1. Who we are

Jafait Technologies is the provider of the Services. Website: jafait.com. Contact: hello@jafait.com.

2. Information we collect

We collect only what is needed to run the Services:

• Account information: your name, email address, phone number, business name, role and a password (stored only in hashed form).
• Business data you enter: products, stock, orders, invoices, expenses, cash and bank balances, dues, employee and payroll details, assets, offers and similar records.
• Your customers' data: names, phone numbers, addresses and order history that you add to the app, or that arrive through connected channels.
• Messages and connected channels: if you connect WhatsApp, Facebook, Instagram or website chat, we receive and store the messages and basic contact details of the people who message you, so they can appear in your inbox and so you can reply.
• Payment information: online payments are handled by our payment partner (SSLCommerz). We do not see or store your full card number or PIN. We store the transaction ID, amount, status and payment method type.
• Device and usage data: IP address, browser/device type, logs, error reports and push-notification tokens.
• Support communications: messages you send us and our replies.

3. How we use information

• To create and secure your account and provide the features you use (inventory, orders, invoices, reports, inbox, payroll, wallet, services marketplace and others).
• To process payments, subscriptions, wallet top-ups and refunds.
• To send OTP codes, receipts, alerts, reminders and service messages by email, SMS or push notification.
• To provide customer support, prevent fraud and abuse, and keep the Services secure and reliable.
• To improve the Services, fix bugs and understand how features are used.
• To comply with the law.

We do not sell your personal information, and we do not use your business data or your customers' data for advertising.

4. Your customers' data — your role and ours

For the customer and message data you put into the Services, you decide what is collected and why, and you are responsible for having the right to collect it (for example, consent to message your customers). We process this data only on your behalf, to provide the Services to you.

5. Who we share information with

We share information only with service providers that help us run the Services, and only as needed:

• Cloud hosting and database providers.
• SSLCommerz and other payment providers, to process payments.
• Email, SMS and push-notification providers (for example Brevo, Twilio, Firebase and Bangladeshi SMS gateways).
• Meta Platforms (WhatsApp, Facebook, Instagram), when you connect those channels.
• Courier and delivery partners, when you choose to book a shipment (we send the recipient details needed for delivery).
• AI service providers (for example Anthropic), only when you use an AI feature; the text you submit for that feature is sent to the provider to generate a response.
• Professional advisers, authorities or courts, when required by law, or to protect rights, safety and security.
• A successor, if we merge with or are acquired by another company (we will notify you).

6. Data from Meta (WhatsApp, Facebook, Instagram)

We use data received from Meta platforms only to show conversations in your inbox and to let you send replies. We do not sell it, do not use it for advertising, and do not use it to build profiles unrelated to the Services. You can disconnect a channel at any time in the app; the stored access token for that channel is then removed.

7. International transfers

Our providers may store or process information in countries other than yours. Where this happens we take reasonable steps so that your information stays protected.

8. Security

We use reasonable technical and organisational measures, including encrypted connections (HTTPS), hashed passwords, encryption of sensitive access tokens and keys, and role-based access control. No system is completely secure, so please use a strong password, keep it private, and tell us immediately if you suspect unauthorised access.

9. Retention

We keep your information while your account is active and as needed to provide the Services. After you close your account we delete or anonymise it within a reasonable period, except where we must keep certain records for legal, tax, accounting or fraud-prevention reasons (for example payment records).

10. Your choices and rights

• Access, correct or update your information in the app.
• Export or request a copy of your data.
• Ask us to delete your account and data.
• Opt out of marketing messages at any time (service and security messages will still be sent).
• Withdraw consent where we rely on it.

To use these rights, email hello@jafait.com. We may need to verify your identity first. Depending on where you live, you may also have rights under local law (for example GDPR in the European Economic Area).

11. Data deletion request

To delete your account and the data we hold about you, email hello@jafait.com from the email address on your account with the subject "Delete my data". We will confirm and complete deletion within 30 days, subject to the retention exceptions in section 9. If you connected Meta channels, deleting your account also removes the stored connection.

12. Children

The Services are meant for businesses and are not directed to people under 18. We do not knowingly collect information from children.

13. Cookies and local storage

The web version may use cookies or browser storage to keep you signed in and remember settings such as language. You can clear them in your browser; some features may then not work.

14. Changes to this policy

We may update this policy. If the changes are important we will tell you in the app or by email. The "Last updated" date at the top shows the latest version.

15. Contact

Jafait Technologies. Email: hello@jafait.com.