Privacy Policy — Oushodh.app

This Privacy Policy explains how Oushodh.app ("we", "us", "our") collects, uses, shares, and protects your information when you use the Oushodh.app mobile application (the "App"). Oushodh.app is a business-to-business marketplace that connects pharmacies, hospitals, and clinics with verified wholesalers and distributors of pharmaceutical products in Bangladesh.

Oushodh.app is a registered business in Bangladesh (Trade Licence No. TRAD/DNCC/028574/2025, Dhaka North City Corporation), with its place of business at House 840–841, Baitul Aman Tower (4th floor), Adabor, Dhaka-1207, Bangladesh. For the purpose of this policy, Oushodh.app is the controller of your personal data. You can reach us any time at info@oushodh.app.

1. Information we collect

We collect the following categories of information, in each case to operate the marketplace and verify the parties trading on it.

Account and identity

Your mobile phone number, which is your login identifier.
Your name (first and last).
One-time passcodes (OTPs) used to verify your phone number. OTPs are short-lived and are not retained after verification.

Business and verification (KYC) data — sellers

Organisation/business name, contact person, and business phone number.
Business address (ward/village, union/area, upazila, district, post office, and postal code).
Verification documents you upload, including your trade licence, signboard photograph, and profile picture, together with their file metadata and your verification status and history.

Communications and marketplace activity

Messages you send and receive through the App, including text messages and voice notes exchanged with other users.
Ratings and reviews you give or receive (which may be shown to other users).
Listings you view, searches you run, and reports you submit about listings or users.

Device and technical data

Push-notification device tokens and device details (device type and name, app version, operating-system version).
Sign-in timestamps, IP address, and browser/user-agent information recorded in our security and audit logs.

2. How we use your information

To create and operate your account and authenticate you by phone and OTP.
To verify sellers through KYC review of submitted documents, so buyers can trade with confidence.
To enable search, listings, messaging, ratings, and other core marketplace features.
To send service and transactional notifications (for example, verification outcomes and new messages).
To keep the platform safe — detecting and preventing fraud, abuse, and policy violations, and handling reports.
To provide customer support and respond to your enquiries.
To comply with applicable laws and respond to lawful requests from competent authorities.

3. How we share your information

We do not sell your personal data. We share it only as described below.

With other users: when you trade or communicate on the marketplace, the other party sees the information necessary for that interaction — for example, your business profile, verification status, messages you send them, and ratings.
With service providers who process data on our behalf:
- SSL Wireless — delivery of OTP and notification SMS to your phone number.
- DigitalOcean (Spaces object storage) — secure storage of uploaded documents, images, and voice notes.
- Google (Firebase Cloud Messaging) — delivery of push notifications to your device.
For legal reasons: with law-enforcement, regulators, or other authorities where required by law or to protect the rights, safety, and integrity of our users and the platform.

4. Where your data is stored and how we protect it

Your data is stored on secured servers and object storage operated by our infrastructure provider (DigitalOcean), which may be located outside Bangladesh (for example, in Singapore). Where data is transferred internationally, we take steps to ensure it remains protected consistent with this policy.

We protect your data with encryption in transit (HTTPS/TLS), access controls, and audit logging of administrative actions. One-time passcodes are stored only transiently and expire automatically. No method of transmission or storage is completely secure, but we work to protect your information using reasonable technical and organisational measures.

5. How long we keep your data

We keep your personal data only as long as necessary. While your account is active, we retain it to provide the service. When you delete your account, we delete your personal data — profile, KYC documents (trade licence, signboard, photos), messages and voice notes, and device tokens — within 90 days. We keep a minimal record of marketplace activity (such as enquiries, ratings, and reports) for up to 12 months after deletion for fraud prevention and dispute resolution, after which it is deleted or anonymised. Security and audit logs (such as IP address, device, and sign-in records) are retained for 12 months. One-time passcodes are not stored after they expire. Residual data in encrypted backups is purged within 90 days of deletion. Where applicable law later requires longer retention, we keep only what the law requires.

6. Your choices and rights

Access and correction: you can view and update most of your profile and business information within the App.
Deletion: you can delete your account and associated data at any time. See our Account & data deletion page for how to do this both inside the App and through a web request.
Notifications: you can manage push notifications in your device settings.

7. Children

Oushodh.app is a business-to-business service intended for licensed businesses and the adults who operate them. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you within the App. Continued use of the App after changes take effect means you accept the updated policy.

9. Contact us

Oushodh.app: House 840–841, Baitul Aman Tower (4th floor), Adabor, Dhaka-1207, Bangladesh
Email: info@oushodh.app