Legal

Privacy Policy

This policy explains what we collect on storeos.dev, why we collect it, and the choices you have.

Last updated 9 September 2026

Who we are

StoreOS is an online store platform for Bangladesh sellers. We operate the marketing site at storeos.dev, merchant signup, the merchant console, hosted storefronts, and related APIs. See About StoreOS for contact and company details.

Questions about this policy: message us on WhatsApp from the StoreOS site.

What this policy covers

It covers personal data we process when you:

  • Visit storeos.dev, the docs, or the blog
  • Create a merchant account (name, email, Bangladesh mobile number, SMS OTP)
  • Use the StoreOS console, hosted storefront, site builder, themes, or custom domain
  • Pay for a StoreOS plan

If you shop on a merchant's StoreOS store, that merchant is the controller of your order and customer data. We process that data to provide the store they run. Ask that merchant about their own privacy practices as well.

Data we collect

Account and signup

Name, email address, and Bangladesh mobile number. We send a one-time SMS code to verify the number. We use this to create your merchant account and to reach you about the service.

Store and commerce data

Catalog, orders, customers, payments, delivery, and storefront content you (or your storefront) send to StoreOS. That includes data needed for COD, Pathao, Steadfast, and other integrations you enable.

Billing

Plan, invoices, and payment status. Card and gateway processing is handled by our billing provider (Graphland PGW). We do not store full card numbers on StoreOS servers.

Site analytics and reliability

storeos.dev uses Google Analytics 4 and Microsoft Clarity to understand traffic and how people use the site. We use Sentry for error reports and Cloudflare to host and protect the site. These tools may set cookies or similar identifiers, log IP address, browser, device, and pages viewed.

Support

If you contact us on WhatsApp or email, we keep the conversation as needed to help you.

How we use data

  • Provide, secure, and improve StoreOS
  • Create and authenticate merchant accounts
  • Process orders, payments, and courier bookings you initiate
  • Send transactional SMS and email (OTP, order and account notices)
  • Measure marketing-site usage and fix outages
  • Meet legal, tax, and fraud-prevention obligations

We do not sell your personal data.

Who we share data with

We share data only as needed to run the product:

  • Cloudflare — hosting, CDN, and security
  • Google Analytics — marketing-site measurement
  • Microsoft Clarity — marketing-site session insights
  • Sentry — application error monitoring
  • Graphland PGW — plan catalog and billing
  • SMS delivery providers — OTP and transactional SMS
  • Couriers and messaging tools you connect (for example Pathao, Steadfast, WhatsApp Business) — only the data those integrations require

We may disclose data if required by Bangladesh law or to protect StoreOS, our merchants, or the public from fraud or abuse.

Cookies

Essential cookies keep the site working (for example session and security). Analytics cookies from Google Analytics and Microsoft Clarity help us see which pages are used. You can block analytics cookies in your browser; the site will still load.

Retention

Account and store data is kept while your account is active and for a reasonable period afterward so we can close billing, handle disputes, and meet legal records rules. Analytics and error logs are kept for a shorter operational period. You can ask us to delete merchant account data; we may retain what the law requires.

Your choices

You can access or update account details in the console, or contact us to correct or delete data we hold as controller of the marketing site and merchant accounts. For data on a shop you visited, contact that merchant first.

StoreOS is built for Bangladesh businesses. If you are in a region with additional privacy rights (including the EU/UK), contact us and we will handle your request as the law requires.

Security

We use HTTPS, access controls, and infrastructure providers to protect data. No method of transmission or storage is completely secure.

Children

StoreOS is a business product. We do not knowingly collect personal data from children.

Changes

We may update this policy. The date at the top of the page is the latest version. Material changes will be reflected here.

Related

Use of StoreOS is also governed by the Terms of Service.