This Privacy Policy explains how Oushodh.app ("we", "us", "our") collects, uses, shares, and protects your information when you use the Oushodh.app mobile application (the "App"). Oushodh.app is a business-to-business marketplace that connects pharmacies, hospitals, and clinics with verified wholesalers and distributors of pharmaceutical products in Bangladesh.
Oushodh.app is a registered business in Bangladesh (Trade Licence No. TRAD/DNCC/028574/2025, Dhaka North City Corporation), with its place of business at House 840–841, Baitul Aman Tower (4th floor), Adabor, Dhaka-1207, Bangladesh. For the purpose of this policy, Oushodh.app is the controller of your personal data. You can reach us any time at info@oushodh.app.
1. Information we collect
We collect the following categories of information, in each case to operate the marketplace and verify the parties trading on it.
Account and identity
- Your mobile phone number, which is your login identifier.
- Your name (first and last).
- One-time passcodes (OTPs) used to verify your phone number. OTPs are short-lived and are not retained after verification.
Business and verification (KYC) data — sellers
- Organisation/business name, contact person, and business phone number.
- Business address (ward/village, union/area, upazila, district, post office, and postal code).
- Verification documents you upload, including your trade licence, signboard photograph, and profile picture, together with their file metadata and your verification status and history.
Communications and marketplace activity
- Messages you send and receive through the App, including text messages and voice notes exchanged with other users.
- Ratings and reviews you give or receive (which may be shown to other users).
- Listings you view, searches you run, and reports you submit about listings or users.
Device and technical data
- Push-notification device tokens and device details (device type and name, app version, operating-system version).
- Sign-in timestamps, IP address, and browser/user-agent information recorded in our security and audit logs.
Delivery and deliveryman identity data
- Proof of delivery: when a deliveryman marks an order delivered, partially delivered, or failed, the App takes a photo in the App at the door and records the phone's precise location and the time at that moment. The supplier and oushodh.app support see the photo, the location, and the time; the buyer sees the time only.
- Deliveryman and employee identity records, entered by the employer: when a supplier adds a deliveryman or an employee, the supplier enters that person's NID number and photo, present and permanent addresses, parents' names, and an emergency contact. The NID number is stored encrypted and is shown only as its last four digits (•••• 4821), to the employing supplier and to oushodh.app support.
- Invitation SMS: the supplier enters the deliveryman's or employee's phone number, to which the App sends a one-time sign-in invitation by SMS.
- Vendors and quotations: a supplier may enter a vendor's business name, phone number and address to ask it for prices; the App sends that phone a one-time sign-in invitation by SMS. The rates and quantities a vendor enters on a supplier's request are stored with that request.
Cash, deposits and settlement (financial) data
- Cash collected at the door: for cash-on-delivery orders the App records the amount the deliveryman collected on each invoice, what he brought back, and the supplier's settlement of it at the counter — the invoices settled, any shortfall kept open, and the receipt number issued for the sitting.
- Deposits: when a deliveryman deposits collected cash to the supplier — by cash hand-over, mobile financial service (bKash, Nagad, Rocket) or bank — the App records the amount, the channel, the transaction ID (TrxID) of a mobile or bank transfer, and a photo or screenshot of the slip he takes in the App as proof. The supplier confirms or corrects the deposit and the App issues a receipt.
- Supplier payout accounts: the bank and mobile financial service accounts a supplier enters so its deliverymen know where to deposit — account holder name, account or wallet number, bank and branch or provider. Notifications never carry an account number.
- Receipts and ledgers: settlement and deposit receipts, and the running account between a supplier and each of its deliverymen, kept as the supplier's business records.
2. How we use your information
- To create and operate your account and authenticate you by phone and OTP.
- To verify sellers through KYC review of submitted documents, so buyers can trade with confidence.
- To enable search, listings, messaging, ratings, and other core marketplace features.
- To send service and transactional notifications (for example, verification outcomes and new messages).
- To keep the platform safe — detecting and preventing fraud, abuse, and policy violations, and handling reports.
- To provide customer support and respond to your enquiries.
- To comply with applicable laws and respond to lawful requests from competent authorities.
- To record proof of delivery (a photo, the precise location, and the time at the door) and to let suppliers manage the deliverymen they employ.
- To record cash collected, deposits, settlements and receipts between suppliers and their deliverymen, and to remind them of deposits waiting to be confirmed and invoices still to settle.
3. How we share your information
We do not sell your personal data. We share it only as described below.
- With other users: when you trade or communicate on the marketplace, the other party sees the information necessary for that interaction — for example, your business profile, verification status, messages you send them, and ratings. A deliveryman's proof of delivery (photo, location, time) is shown to the supplier he delivers for; the buyer sees the time only. A deliveryman's or an employee's identity record is visible to the supplier who employs them. A vendor's quotes are shown only to the supplier who asked for them; no other vendor sees them, and the supplier's own reference prices are never shown to vendors. A deliveryman's deposits, proof slips and settlement receipts are shown to the supplier he delivers for and to oushodh.app support; a supplier's payout account details are shown to its own deliverymen so they can deposit; the buyer sees none of this.
- With service providers who process data on our behalf:
- SSL Wireless — delivery of OTP and notification SMS to your phone number.
- DigitalOcean (Spaces object storage) — secure storage of uploaded documents, images, and voice notes.
- Google (Firebase Cloud Messaging) — delivery of push notifications to your device.
- For legal reasons: with law-enforcement, regulators, or other authorities where required by law or to protect the rights, safety, and integrity of our users and the platform.
4. Where your data is stored and how we protect it
Your data is stored on secured servers and object storage operated by our infrastructure provider (DigitalOcean), which may be located outside Bangladesh (for example, in Singapore). Where data is transferred internationally, we take steps to ensure it remains protected consistent with this policy.
We protect your data with encryption in transit (HTTPS/TLS), access controls, and audit logging of administrative actions. One-time passcodes are stored only transiently and expire automatically. No method of transmission or storage is completely secure, but we work to protect your information using reasonable technical and organisational measures.
5. How long we keep your data
We keep your personal data only as long as necessary. While your account is active, we retain it to provide the service. When you delete your account, we delete your personal data — profile, KYC documents (trade licence, signboard, photos), messages and voice notes, and device tokens — within 90 days. We keep a minimal record of marketplace activity (such as enquiries, ratings, and reports) for up to 12 months after deletion for fraud prevention and dispute resolution, after which it is deleted or anonymised. Security and audit logs (such as IP address, device, and sign-in records) are retained for 12 months. One-time passcodes are not stored after they expire. Residual data in encrypted backups is purged within 90 days of deletion. Where applicable law later requires longer retention, we keep only what the law requires. A deliveryman's or an employee's identity record is kept on file after they stop working for the supplier and is not deleted from the App; their accounts are closed by the employing supplier or by oushodh.app support on request, not from within the App. Cash, deposit and settlement records — amounts, receipts and proof slips — are kept for as long as the supplier's account is active, as the business records of both parties, and are not deleted from within the App. A supplier's vendor records — the vendor's business name, phone number, address and the quotes it gave — are kept as the supplier's business records for as long as the supplier's account is active; a vendor who closes their own account keeps those quotes on the supplier's side.
6. Your choices and rights
- Access and correction: you can view and update most of your profile and business information within the App.
- Deletion: you can delete your account and associated data at any time. See our Account & data deletion page for how to do this both inside the App and through a web request.
- Notifications: you can manage push notifications in your device settings.
- Deliverymen and employees: your identity record is entered and kept by the supplier who employs you; ask your employer to correct it. Your account is closed by your employer or by oushodh.app support on request (call +8801958022440), not from within the App.
- Vendors: the supplier who added you keeps your business name, phone number and address; ask that supplier to correct them. Your quotes are seen only by that supplier. You can close your own account from within the App.
7. Children
Oushodh.app is a business-to-business service intended for licensed businesses and the adults who operate them. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.
8. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you within the App. Continued use of the App after changes take effect means you accept the updated policy.
9. Contact us
- Oushodh.app
- House 840–841, Baitul Aman Tower (4th floor), Adabor, Dhaka-1207, Bangladesh
- info@oushodh.app