Privacy Policy

1. About AI Employee BD

AI Employee BD is an AI-powered commerce operating system designed specifically for small and medium enterprises (SMEs) and F-commerce merchants in Bangladesh. The platform assists merchants in automating customer messaging, order intake, inventory verification, advance payment workflows, and courier parcel dispatch through integrated third-party services.

2. Information We Process

Depending on how merchants and their end customers interact with AI Employee BD, the platform processes the following categories of information:

• Merchant Account Information: Name, email address, and authentication identifiers provided during merchant account registration.
• Business Configuration: Business name, product catalog details, pricing, inventory balances, delivery fee policies (e.g., inside/outside Dhaka), and advance payment requirements.
• Customer & Order Data: Customer recipient names, contact phone numbers, shipping/delivery addresses, ordered line items, item quantities, and order status updates.
• Channel Conversations: Inbound and outbound chat messages transmitted through connected messaging platforms (such as Facebook Messenger or WhatsApp) solely to fulfill merchant service operations.
• Payment References: Transaction identifiers or references (such as bKash or Nagad transaction IDs) submitted by customers to confirm advance payments or cash-on-delivery orders.
• Technical & Audit Metadata: Timestamps, webhook delivery records, server request logs, and error diagnostic logs necessary for platform reliability and security.

3. How Information Is Used

Information processed by AI Employee BD is utilized strictly for legitimate operational purposes:

• To provide automated conversational assistance to buyers communicating with merchants.
• To parse customer intent and extract order details (such as address and phone number).
• To check live product inventory and reserve stock for draft orders.
• To calculate applicable delivery charges and order totals.
• To create parcel bookings with connected courier services (such as Steadfast Courier or Pathao).
• To enforce multi-tenant isolation, prevent fraud, and audit system transactions.
• To diagnose technical errors and ensure service availability.

4. Connected Messaging Channels (Meta Messenger & WhatsApp)

When a merchant connects a Facebook Page via Facebook Login for Business or a WhatsApp account, our platform receives webhook notifications containing messages sent by customers to that specific Page or number.

5. Artificial Intelligence (AI) Processing

AI Employee BD utilizes large language model (LLM) providers (such as Google Gemini) to process natural language conversations in Bangla and Banglish. Inbound message text and relevant product context are sent via secure server-side API requests to generate responses and detect order intent.

We do not use customer conversation data to train generalized public foundational models. Data transmitted to AI service providers is governed by standard enterprise API terms and server-side confidentiality agreements.

6. Security Architecture & Safeguards

We implement technical and organizational measures designed to protect merchant and customer data:

• Multi-Tenant Row-Level Security (RLS): Strict database policies prevent cross-tenant data leakage between different merchants.
• Encrypted Channel Credentials: Access tokens and API secrets are stored with server-side AES-256-GCM encryption.
• HMAC Webhook Verification: Webhook payloads from Meta and courier partners are cryptographically validated using SHA-256 HMAC signatures before processing.
• Role-Based Access Control (RBAC): Access to merchant management functions is restricted according to verified user roles.

7. Third-Party Service Providers

To deliver our services, we integrate with established infrastructure and service providers:

• Cloud Infrastructure & Hosting: Vercel and secure edge networks.
• Database & Auth: Supabase (PostgreSQL with Row Level Security).
• Messaging Platforms: Meta Platforms, Inc. (Facebook Messenger, WhatsApp Cloud API).
• Courier Partners: Steadfast Courier, Pathao Courier (for parcel creation when configured by the merchant).
• AI Inference: Google Gemini API for natural language understanding.

8. Data Retention & Deletion

We retain merchant and customer information only for as long as necessary to provide active services, maintain order history for merchant bookkeeping, troubleshoot technical issues, and satisfy operational obligations.

Merchants may delete their business account and associated data at any time via the Danger Zone in Store Settings, or disconnect connected social channels immediately. For complete information on user data deletion, visit our Data Deletion Instructions.

9. Merchant & Customer Rights

Merchants and customers have the right to request access to their stored information, request corrections to inaccurate data, or request the deletion of their records. Inquiries can be submitted through our Support Page.

10. Contact & Inquiries

If you have any questions regarding this Privacy Policy or our operational data handling practices, please contact our team through the AI Employee BD Support Center.