Privacy Policy
Promptli Commerce ("Promptli", "we") is software that lets shops in Bangladesh run an online store, take orders, send parcels with couriers and talk to their customers. This policy explains what personal data we handle, why, who else receives it and what you can ask us to do. It covers our website promptli.online, the store admin, the Promptli Inbox at chat.promptli.online, and the online stores that shops run on Promptli.
1. Who is responsible for your data
- Shop owners and their staff ("merchants"): Promptli is responsible for the data of your Promptli account.
- Shoppers (people who order from, or message, a shop on Promptli): the shop decides why and how your data is used, and Promptli processes it on the shop's behalf. Promptli does not use shoppers' data for its own marketing and does not sell it.
2. What we collect
| Who | Data | Why |
|---|---|---|
| Merchants | Mobile number (sign-in by one-time code), name, shop name and details, plan and invoices, the bKash transaction ID and sender number you give when you pay us, courier keys you connect (stored encrypted) | To run your account, bill you and connect your couriers |
| Shoppers | Name, mobile number, delivery address, what was ordered, order status and tracking, optional email, notes | To deliver the order, show its status and let the shop contact you |
| People who message a shop | The messages, any images you send, a random chat identifier kept in your browser (website chat); on Facebook Messenger, Instagram or WhatsApp, your name or username and the platform's ID for you | So the shop's team can answer you in one inbox |
| Everyone | IP address, browser type and security logs; the browser storage needed to keep you signed in or keep your cart and chat | Security, preventing abuse and keeping the service working |
We do not ask for passwords, card numbers or bank details. Payments to a shop are cash on delivery or bKash to the shop's own account; we do not hold shoppers' money.
3. Messages from Facebook, Instagram and WhatsApp
A shop can connect its Facebook Page, Instagram account or WhatsApp Business number to Promptli. Meta then sends us the messages people write to that shop, and the shop's team replies from Promptli. We store those messages and the sender's Meta-assigned ID and public profile name in that shop's inbox, use them only to show the conversation and let the shop reply, and never use them for advertising. Data received from Meta is not sold, and is not used to build profiles of people. You can ask for it to be deleted at any time: see Data deletion.
4. AI assistant
A shop may switch on an AI assistant that helps answer customers. When it is on, the text of the conversation, the shop's own instructions, products and prices and, if you are a known customer, your earlier orders with that shop are sent to Anthropic, the provider of the AI model, to write the reply. Under Anthropic's commercial terms, content sent through its API is not used to train its models by default. The assistant never decides a payment on its own, and the shop can take over any chat.
5. Who else receives data
- Couriers the shop chooses (Pathao, Steadfast, RedX): your name, phone, address and cash-on-delivery amount, to deliver the parcel.
- Hosting: our cloud server provider stores the data on its servers, which may be located outside Bangladesh.
- Meta, for shops that connect Messenger, Instagram or WhatsApp; Anthropic, for shops that switch on the AI assistant.
- SMS and email providers, when we send you a one-time code, an order update or a receipt, receive your number or address and the message.
- Google Fonts serves the fonts used on our pages, so Google sees your IP address when a page loads.
- Sign in with Google, if we offer it: Google tells us your name, email address and Google ID, which we use only to sign you in. We do not use it for advertising and do not share it.
- Authorities, when the law requires it.
We do not sell personal data. Each shop on Promptli may also add its own tools, such as an advertising pixel, which are the shop's responsibility.
6. How long we keep it
- While a shop's account is active, its customers, orders and messages are kept so the shop can run its business.
- When a shop cancels or is removed, its data is kept for a recovery period, then permanently deleted (at least 90 days after removal unless the owner asks for it sooner).
- One-time sign-in codes expire within minutes and are cleaned up automatically.
- We keep invoices and payment records of merchants for as long as accounting and tax rules require.
- Deleted data can remain in backups for a limited time until they are rotated out.
7. Security
Traffic is encrypted in transit (HTTPS). Each shop's data is separated from every other shop's at the database level, courier keys are encrypted at rest, sign-in uses a one-time code, and staff access is limited by role. No system is perfectly secure; if a breach affects you we will tell the affected shop or merchant without undue delay.
8. Your choices and rights
You can ask to see, correct or delete the personal data we hold about you, or object to how it is used. Shoppers can also contact the shop they ordered from. To delete your data follow Data deletion, or email support@promptli.online. You can stop shop text messages by replying STOP, and remove cookies and site data in your browser settings.
9. Children
Promptli is for businesses and is not directed at children under 18. If you believe a child has given us personal data, tell us and we will delete it.
10. Changes
If we change this policy in substance we will update the date above and, for merchants, tell you in the admin before the change applies.
11. Contact
Questions or requests: support@promptli.online.