Privacy Policy – Website and Android App

Last updated: 11 October 2026 Business Koro respects your privacy. This policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to the website businesskoro.com and the Business Koro Android app (package name com.businesskoro.app), together called "the platform". 1. Information We Collect Information you give us: - Name, phone number and WhatsApp number - Email address, if provided - Address or location information, if required - Account login information (your password is stored only in encrypted, hashed form) - Profile photo, if you choose to upload one - Business profile details, such as business name and payout numbers - Membership package and subscription history - Order information, including customer delivery information you submit - Withdrawal details: bKash or Nagad number, or bank account details - Support messages and communication records Information created when you use the platform: - Payment records: amount, status and transaction reference. Card and mobile banking details are entered on the payment provider's page; we do not see or store them - Wallet, settlement and withdrawal records - Device, browser and usage information, IP address and security logs - Notification registration: if you allow notifications, a notification token for your phone or browser and your language setting If you sign in with Google, we receive your name, email address and account identifier from Google. We never receive your Google password. 2. The Android App - The only permission the app asks you for is Notifications, to tell you about orders, deliveries, profit and withdrawals. You can turn notifications off at any time in your phone's settings. It also uses standard permissions that Android grants without asking: internet access, network status, vibration (for button feedback) and briefly keeping the phone awake to deliver a notification. - When you allow notifications, the app sends a notification token to our server through Firebase Cloud Messaging (a Google service). The token is used only to deliver notifications to you, and is deleted when you log out of that phone, when the app is uninstalled, or when your account is deleted. - The app does not access your contacts, location, camera, microphone, call logs or messages. It reads a photo only when you choose one yourself to upload as your profile picture. - The app contains no advertising and no analytics or tracking tools. - Signing in opens your phone's browser to confirm your Business Koro account and then returns you to the app. 3. Cookies and Analytics on the Website The website uses essential cookies to keep you signed in and to remember your language and theme. It also uses Google Analytics to understand how visitors use the website. With your permission, given through the cookie notice, the website also loads advertising and measurement tools (Google Tag Manager, Meta Pixel and TikTok Pixel) to measure the performance of our ads. If you decline, these tools are not loaded. You can change your choice by clearing the site's cookies. None of these tools are used in the Android app. 4. Customer Information Submitted by Resellers Resellers may submit customer information to place orders, including customer name, phone number, address and delivery details. Business Koro uses this information only for order processing, packaging, courier dispatch, delivery tracking, customer issue handling, return or refusal handling, and settlement. Resellers must collect customer information lawfully and must not submit fake, unauthorized or misleading customer data. 5. How We Use Information We use information to: - Create and manage accounts - Activate membership packages and provide product access - Process orders, packaging, courier dispatch and delivery tracking - Calculate profit, wallet balances and settlements - Process payments and withdrawal requests - Provide support and handle complaints - Send notifications and service updates - Protect the platform, prevent fraud and abuse, and keep audit logs - Comply with legal and regulatory requirements 6. Sharing of Information We share only what each service needs: - Courier partners, such as Steadfast (Packzy): customer name, phone number and address, to deliver orders - Payment providers, such as EPS: payment amount and reference, to process payments - Firebase Cloud Messaging (Google): notification tokens, to deliver notifications - Hosting, storage, security and email providers that run the platform, such as Cloudflare - Authorized Business Koro staff and admins, for support and operations - Legal or regulatory authorities, when required by law We do not sell personal information to anyone. 7. Courier and Delivery Customer delivery details are shared with courier partners to complete delivery. Business Koro may use neutral sender branding to protect the reseller's customer relationship. 8. Data Security - All data between your device and our servers is encrypted in transit (HTTPS). - Passwords are stored only as secure hashes. Sensitive service credentials are stored encrypted. - Access to personal data is limited to staff who need it. No online system is completely risk-free. Keep your password private, and report any unauthorized access or suspicious activity to us immediately. 9. How Long We Keep Information - Account and profile information: while your account is active, and until it is deleted. - Order, payment, settlement and withdrawal records: kept for accounting, tax and legal purposes, even after an account is deleted. - Security and access logs: kept for a limited period to protect the platform. - Notification tokens: until you log out of that device, uninstall the app, or delete your account. 10. Deleting Your Account You can ask for your account to be deleted at any time: - In the app or on the website: sign in, open Settings, and tap "Request account deletion". - Or contact us by email or WhatsApp using the details in section 15. Before deletion, any wallet balance must be withdrawn or refunded and any open orders completed. When an account is deleted, your name, contact details, profile photo, business profile details and sign-in access are removed, and you are signed out of every device. Records we must keep by law are retained as described in section 9. Full details: https://businesskoro.com/data-deletion 11. Your Choices and Rights - You can view and update most of your information in Settings, or ask our support team to correct it. We may verify your identity before changing sensitive details. - You can turn notifications off in your phone or browser settings. - You can ask us to stop non-essential promotional messages at any time. 12. Restricted Product and Business Data Business Koro product prices, product costs, media kit links, supplier details, internal notes, profit calculation data and other restricted product information are confidential business data. Users must not copy, leak, scrape, resell, distribute or share it without permission. 13. Data Accuracy Users and resellers are responsible for providing accurate information. Business Koro is not responsible for failed delivery, payment, withdrawal or account issues caused by incorrect information. 14. Children's Privacy The platform is for business users aged 18 or over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it. 15. Contact Business Koro Aftabnagar, Dhaka 1212, Bangladesh Email: [email protected] Phone: +8809617880010 WhatsApp: 01352508431 Support hours: 10:00 AM to 8:00 PM, every day 16. Changes to This Policy We may update this policy from time to time. The updated policy will be posted on this page with a new "Last updated" date, and important changes will also be announced on the platform.