How we handle your data

We ask for information at the point it is needed, and we tell you why at that point. In total we hold:

• Account details — Your name, mobile number, email address, password and — for business accounts — company name, trade licence and TIN or BIN.
• Shipment details — Pickup and delivery addresses, consignee names and contact numbers, cargo descriptions, weights, dimensions, declared values and photographs of the goods.
• Trade documents — Commercial invoices, packing lists, HS codes, LC and permit references, and the clearance paperwork a consignment requires.
• Payment records — Invoices, receipts, wallet transactions and the reference a payment provider returns to us. Card numbers are entered on the payment gateway, never on our site, and we never receive or store them.
• Images you upload — A profile picture, if you choose to add one, and any photograph you attach to a booking or a claim. A profile picture is optional and the account works without it.
• Technical data — IP address, browser and device type, operating system, timestamps and the pages visited — the standard log every web server keeps.
• Communications — Messages you send us by email, WhatsApp, the contact form or the chat widget, and our replies to them.

Everything we hold is used for one of these purposes:

• Book, move, clear and deliver your consignments, and let you track them
• File the declarations customs and regulatory authorities require for your cargo
• Issue invoices and receipts, take payment, and operate your wallet balance
• Tell you what is happening to a shipment — collection, departure, arrival, clearance, delivery
• Answer your questions and handle claims, refunds and disputes
• Keep the accounting, tax and customs records the law requires us to keep
• Detect and prevent fraud, misdeclaration and misuse of an account
• Understand which parts of the site are used, so we can fix what does not work

Each purpose above rests on one of the following:

• Performing our contract — Most of it. We cannot move a consignment without the addresses, the cargo description and a way to reach the consignee.
• Complying with a legal obligation — Customs declarations, tax records and anything a regulator or a court lawfully requires of us.
• Our legitimate interests — Securing our systems, preventing fraud, recovering unpaid charges and improving the service — weighed each time against your privacy.
• Your consent — Optional things only, such as a profile picture or marketing messages. You can withdraw consent at any time without affecting your shipments.

A consignment cannot move unless certain parties see certain data. These are the only ones that do:

• Carriers and their agents — Airlines, shipping lines, trucking companies and courier partners need the consignee's name, address and contact number to make a delivery.
• Customs and regulators — Customs authorities in the origin and destination countries, and any regulator entitled to inspect a consignment, receive the declarations and documents for it.
• Overseas agents — Our agents on the lanes we run receive what they need to collect, consolidate and forward your cargo.
• Payment providers — SSLCommerz and the mobile financial services process your payment. They receive what a transaction needs; we receive only the result and a reference.
• Technology providers — Google Firebase hosts our database, authentication and file storage, and delivers push notifications under contract to us.
• Professional advisers and authorities — Auditors, lawyers, insurers and law enforcement, where the law requires it or a claim makes it necessary.
• Nobody else — We do not sell your personal data, rent it, or hand it to advertisers or data brokers. There is no advertising network on this site.

We keep data for as long as the purpose it was collected for requires, and no longer:

Account data

For as long as your account is open, and then removed when you ask us to delete it.

Shipment records

Kept while a consignment is in transit, and for the period afterwards that a claim or a dispute may still arise.

Customs and trade documents

Retained for the period Bangladeshi customs and tax law requires, which outlasts both the shipment and the account.

Invoices and payment records

Kept for the statutory accounting and tax retention period.

Server logs

Kept for a short operational period and then rotated out.

Deleted accounts

Personal data is removed on deletion, except records we are legally required to keep — those are retained and not used for anything else.

• Traffic to this site and our apps is encrypted in transit with HTTPS
• Accounts are protected by Firebase Authentication, and passwords are stored only as salted hashes we cannot read
• Access to shipment and customer records is limited to the staff whose work requires it
• Card and mobile-wallet credentials are entered on the payment provider's own page — they never reach our servers, and we cannot see them
• We keep an audit trail of changes to bookings, invoices and account status

These rights are available to every user of this site, wherever you are. If you are in the EU or UK they are your GDPR rights; if you are in California they include your CCPA rights, including the right to know what is collected and the right to tell us not to sell it — which we do not do in any case.

• Access — Ask for a copy of the personal data we hold about you.
• Correction — Have anything inaccurate corrected, and anything incomplete completed.
• Erasure — Ask us to delete your account and personal data, subject to records we are legally required to retain.
• Restriction — Ask us to pause processing while an accuracy or objection question is resolved.
• Objection — Object to processing we carry out under legitimate interests.
• Portability — Receive the data you gave us in a machine-readable form, or have it sent to another provider.
• Withdrawing consent — Withdraw consent for anything you consented to, at any time.
• Complaint — Complain to us first — and to your data protection authority if our answer does not satisfy you.