Privacy Policy — Openbox Bangladesh

Privacy Commitment: Openbox ("we", "us", "our") is dedicated to maintaining the confidentiality, integrity, and security of your personal data. This Privacy Policy details the information we collect, how it is used to safeguard transactions, and your rights under the Information and Communication Technology (ICT) Act of Bangladesh.

1. Information We Collect

Personal Profile Data

Full name, verified mobile number, email address, physical delivery addresses, and login credentials.

Seller KYC & Identity Proof

National ID (NID) photos, Trade Licenses (for store owners), utility bills for location verification, and store photos.

Device Hardware Telemetry

IMEI numbers, device serial numbers, battery health percentages, component diagnostics, and model identifiers recorded during hub inspection.

Financial & Escrow Records

bKash/Nagad wallet numbers, bank account numbers for payouts, transaction IDs, invoice logs, and escrow authorization timestamps.

2. How We Use Your Information

Order Fulfillment & Delivery: Dispatching verified devices with authorized couriers for doorstep inspection.
Anti-Theft Protection: Cross-referencing IMEI numbers against lost/stolen device registries to safeguard buyers.
Escrow Vault Management: Securing payments until physical item verification and buyer sign-off.
Seller KYC Auditing: Preventing fictitious commercial listings and establishing legitimate recommerce channels.
Security Alerts: Sending SMS OTP verification codes, order status updates, and login notices.

3. Third-Party Data Sharing & Protection

We do not sell, rent, or trade your personal data to marketing third parties. Disclosures occur strictly on a need-to-know operational basis:

Logistics Partners: Sharing recipient name, contact number, and address strictly for doorstep delivery and inspection.
Payment Gateways (bKash, Nagad, SSLCommerz): Processing encrypted checkout transactions and payout disbursements.
Law Enforcement & Regulators: Complying with court orders, Bangladesh BTRC directives, or CID anti-fraud investigations.

4. Data Encryption & Security Measures

All user communication is encrypted via 256-bit SSL/TLS protocol in transit. Sensitive credentials and passwords are encrypted using one-way cryptographic hashing algorithms. Our database infrastructure is maintained behind secured firewalls with role-based internal access controls.

5. Your Rights & Account Deletion

You possess full authority over your personal information, including the right to access your stored records, rectify outdated details, and request complete account termination under our Account & Data Deletion Policy.

Privacy Inquiries

If you have inquiries regarding our data processing policies, please email our Data Protection Officer at [email protected].