Legal
Privacy Policy
This policy explains what we collect on storeos.dev, why we collect it, and the choices you have.
Last updated 9 September 2026
Who we are
StoreOS is an online store platform for Bangladesh sellers. We operate the marketing site at storeos.dev, merchant signup, the merchant console, hosted storefronts, and related APIs. See About StoreOS for contact and company details.
Questions about this policy: message us on WhatsApp from the StoreOS site.
What this policy covers
It covers personal data we process when you:
- Visit storeos.dev, the docs, or the blog
- Create a merchant account (name, email, Bangladesh mobile number, SMS OTP)
- Use the StoreOS console, hosted storefront, site builder, themes, or custom domain
- Pay for a StoreOS plan
If you shop on a merchant's StoreOS store, that merchant is the controller of your order and customer data. We process that data to provide the store they run. Ask that merchant about their own privacy practices as well.
Data we collect
Account and signup
Name, email address, and Bangladesh mobile number. We send a one-time SMS code to verify the number. We use this to create your merchant account and to reach you about the service.
Store and commerce data
Catalog, orders, customers, payments, delivery, and storefront content you (or your storefront) send to StoreOS. That includes data needed for COD, Pathao, Steadfast, and other integrations you enable.
Billing
Plan, invoices, and payment status. Card and gateway processing is handled by our billing provider (Graphland PGW). We do not store full card numbers on StoreOS servers.
Site analytics and reliability
storeos.dev uses Google Analytics 4 and Microsoft Clarity to understand traffic and how people use the site. We use Sentry for error reports and Cloudflare to host and protect the site. These tools may set cookies or similar identifiers, log IP address, browser, device, and pages viewed.
Support
If you contact us on WhatsApp or email, we keep the conversation as needed to help you.
How we use data
- Provide, secure, and improve StoreOS
- Create and authenticate merchant accounts
- Process orders, payments, and courier bookings you initiate
- Send transactional SMS and email (OTP, order and account notices)
- Measure marketing-site usage and fix outages
- Meet legal, tax, and fraud-prevention obligations
We do not sell your personal data.
Who we share data with
We share data only as needed to run the product:
- Cloudflare — hosting, CDN, and security
- Google Analytics — marketing-site measurement
- Microsoft Clarity — marketing-site session insights
- Sentry — application error monitoring
- Graphland PGW — plan catalog and billing
- SMS delivery providers — OTP and transactional SMS
- Couriers and messaging tools you connect (for example Pathao, Steadfast, WhatsApp Business) — only the data those integrations require
We may disclose data if required by Bangladesh law or to protect StoreOS, our merchants, or the public from fraud or abuse.
Cookies
Essential cookies keep the site working (for example session and security). Analytics cookies from Google Analytics and Microsoft Clarity help us see which pages are used. You can block analytics cookies in your browser; the site will still load.
Retention
Account and store data is kept while your account is active and for a reasonable period afterward so we can close billing, handle disputes, and meet legal records rules. Analytics and error logs are kept for a shorter operational period. You can ask us to delete merchant account data; we may retain what the law requires.
Your choices
You can access or update account details in the console, or contact us to correct or delete data we hold as controller of the marketing site and merchant accounts. For data on a shop you visited, contact that merchant first.
StoreOS is built for Bangladesh businesses. If you are in a region with additional privacy rights (including the EU/UK), contact us and we will handle your request as the law requires.
Security
We use HTTPS, access controls, and infrastructure providers to protect data. No method of transmission or storage is completely secure.
Children
StoreOS is a business product. We do not knowingly collect personal data from children.
Changes
We may update this policy. The date at the top of the page is the latest version. Material changes will be reflected here.
Related
Use of StoreOS is also governed by the Terms of Service.