Privacy Policy

GREEN (“GREEN”, “we”, “us”) provides a multi-tenant commerce platform that lets merchants (“tenants”, “you”) manage products, orders, customers and fulfillment from one dashboard. This policy explains what we collect, why, and how it's protected — for both tenants using GREEN and the customers whose orders tenants process through it.

Information we collect

• Account & tenant data: name, email, phone, business details, and role/permission assignments for everyone on your team.
• Store data you enter: products, orders, and the customer records you create or import (name, phone, delivery address, order history) — this belongs to you as the tenant, and we process it on your behalf.
• Integration credentials: if you connect Pathao, Steadfast, WooCommerce, or bKash, we store the API credentials needed to operate that connection. Credentials are encrypted at rest (AES-256-GCM) and are never displayed in full after you enter them.
• Billing data: your subscription plan, billing cycle, and payment confirmations from bKash. We do not store your bKash PIN or full payment credentials — those are handled directly by bKash.
• Usage & log data: sign-in activity, an audit trail of sensitive actions (e.g. role changes, credential updates), device and browser information, and diagnostic logs used to keep the service reliable.
• Cookies: essential session cookies that keep you signed in. See our Cookie Policy for details.

How we use it

• To operate the dashboard and keep your account and tenant workspace secure.
• To process orders and hand off shipments to the courier accounts you connect.
• To bill your subscription and send billing-related notices.
• To send platform notifications (order, courier and account alerts) to your team.
• To detect, investigate and prevent fraud, abuse, or security incidents.
• To improve the product based on aggregated, non-identifying usage patterns.

Who we share it with

We only share data with third parties where it's necessary to deliver the service you've configured, or where the law requires it:

• Pathao and Steadfast — recipient name, phone and delivery address for orders you choose to ship through them.
• bKash — the minimum information needed to process a subscription payment or a customer checkout you've enabled.
• WooCommerce — product, order and customer data you choose to sync, exchanged directly between your connected store and your GREEN workspace.
• Infrastructure providers — our hosting and database providers, bound by confidentiality obligations, solely to run the service.

We do not sell personal data.

Data storage & security

Sensitive credentials (courier, payment and integration secrets) are encrypted at rest with AES-256-GCM and excluded from standard data reads. Access to production data is restricted to authorized personnel and logged. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard safeguards.

Data retention

We retain account and store data for as long as your subscription is active, plus a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. You can request deletion of your tenant workspace by contacting us; some records may be retained where required by law.

Your rights

You may request access to, correction of, or deletion of your personal data, and may withdraw consent for optional communications at any time. If you are a customer of one of our tenants and want to exercise these rights over your order data, please contact that merchant directly — they control that data; we process it on their behalf.

Children's privacy

GREEN is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18.

International data

GREEN is built and operated for merchants in Bangladesh. Data may be processed on infrastructure located outside Bangladesh by our hosting providers, protected by the safeguards described above.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy or your data? Reach us at privacy@green.app.