Privacy Policy

Soply helps small online sellers in Bangladesh manage customer messages, orders, products and deliveries from one place. This policy explains what we collect, why, and the choices you have.

Who this covers

• Sellers who sign in with Facebook and connect their Facebook Page to Soply.
• Customers of sellers who message or comment on a seller's Page, or order from a seller's Soply store.

What we collect

From sellers:

• Name, email and profile picture from Facebook Login, and your Facebook user ID (specific to Soply).
• The Pages you choose to connect, and an access token for each, stored encrypted.
• Shop details you enter: shop name, phone, address, products, photos, prices, stock.
• Courier credentials you enter (for example Steadfast or Pathao), stored encrypted.
• Billing records: the plan you chose and the bKash transaction ID you submit.

From a seller's customers, only for the Pages the seller connected:

• Messages sent to the Page, and the replies the seller sends.
• Comments on the Page's posts, and Facebook's ID for the commenter. Facebook does not give us commenters' names.
• A name Facebook shows for a person who messaged the Page, when available.
• Order details the customer or seller enters: name, phone, address, items, amount, delivery status.

We do not collect Facebook friends lists, personal timelines, or anything from Pages a seller did not connect.

How we use it

• To show a seller their Page messages and comments in one inbox, and to send the replies they write.
• To let a seller publish posts to their own Page when they ask us to.
• To create orders, check repeat-customer delivery history, and book couriers on the seller's behalf.
• To run the seller's public store and invoices.
• To operate, secure and bill for the service.

We do not sell personal data, use it for advertising, or use it to train AI models. Messages are shown only to the seller who owns the Page and staff that seller invited.

Who we share it with

• Courier companies the seller selects: the customer's name, phone, address and cash-on-delivery amount, so they can deliver the parcel.
• Facebook / Meta, because we send replies and posts through their platform.
• Our hosting and database providers, who process data only to run Soply.
• Authorities, when the law requires it.

How long we keep it

We keep data while the seller's account is active. Deleting your account or removing Soply from Facebook deletes your data (see below). Billing records may be retained where the law requires.

Security

Page access tokens and courier credentials are encrypted at rest. Connections use HTTPS. Access to a shop's data is limited to its owner and invited staff, and staff see only what their role allows. No system is perfectly secure, so please use a strong Facebook password and two-factor authentication.

Your choices and deletion

• Disconnect a Page at any time in Settings → Pages. We stop receiving its messages.
• Delete your data: remove Soply in your Facebook settings (Settings → Apps and Websites) or follow the steps on our data deletion page.
• Customers can ask the seller, or us, to delete their messages and order details through the data deletion page.

Children

Soply is for businesses and is not directed to anyone under 18.

Changes

If we change this policy in a meaningful way we will update the date above and notify sellers in the app.