This privacy policy explains how Bdeshishop handles information received
through the Bdeshishop automated customer-support assistant, which operates
across Facebook Messenger, WhatsApp, and
Instagram. It applies to all three channels, not to
purchases made on bdeshishop.com.
1. Who Operates This Service
This Service is operated by Bdeshishop (also written
"Bdeshi Shop"), an online shop based in Dhaka, Bangladesh, which is the
business you are messaging. The messaging platform that runs the assistant
is provided and hosted by b2gsoft, which processes your
data on Bdeshishop's behalf and for no other purpose.
When you message our pages on Facebook Messenger,
WhatsApp, or Instagram, the assistant
receives and processes the following:
Message text. The text of the messages you send through
Messenger, WhatsApp, or Instagram Direct. The assistant reads this text to
understand your question.
User ID. The platform-assigned identifier for your
conversation (page-scoped user ID on Messenger, WhatsApp phone number
identifier, or Instagram user ID). We use it only to route the reply back
to you through the respective platform's API.
Conversational context. The assistant remembers your
recent turns so follow-up questions (for example, "how much?" or "what
sizes?") work naturally. This context is stored on our servers so it
survives a restart, and is removed by the deletion process in section 6.
Server logs. Standard webhook server logs containing
timestamps and IP addresses, kept for security and operational purposes.
Channel-specific identifiers
Channel
Identifier collected
How it is obtained
Messenger
Page-scoped user ID (PSID)
Meta delivers it in the webhook payload
WhatsApp
Phone number
Cloud API delivers the sender's phone number in the webhook payload
Instagram
Instagram-scoped user ID
Instagram Graph API delivers it in the messaging webhook payload
If you place an order through the assistant, it also collects the details the
order needs: your name, phone number,
delivery address, and whether delivery is inside or outside
Dhaka. We do not collect email addresses, card or payment details, or social
profile information beyond the platform user ID and the message text Meta
delivers to our webhook.
3. How We Use Your Data
Your data is used for one purpose: answering your questions. The assistant
replies to product questions about price, stock, sizes, delivery charges,
payment methods, and shop policies, in English or Bengali. When a question
needs a human (order tracking, refunds, complaints), the assistant directs
you to our hotline or WhatsApp number.
The user ID is used only as the delivery address for these replies. The
assistant replies within each platform's messaging window and never contacts
you outside it. Within a 24-hour window you have opened by messaging us, it
may also send you a follow-up — for example a reminder about an unfinished
order, or an update on an order you placed — and you can ask us to stop at
any time.
4. What We Do Not Do
We do not sell your data to anyone.
We do not use the content of your messages for advertising or ad
targeting.
We do not share your data with third parties for their own purposes. We
use service providers to run the Service, and they process your data only
on our behalf: b2gsoft provides and hosts the messaging
platform; Meta (Facebook Messenger, WhatsApp and
Instagram) carries the messages; a large-language-model
provider generates replies; and our shop's order
API receives the order details when you place an order. We do not
use your data for advertising or ad targeting.
The assistant can place real orders for you through our
shop, and it does so only after you confirm the order summary. It does not
process payments — orders are cash on delivery or paid through the shop's
own existing payment methods.
5. Data Retention
Conversation records. Your messages and the assistant's
replies are stored so we can answer follow-ups, resolve disputes and
improve the Service, and are deleted by the process in section 6. A copy
may be kept in our operational database, which is access-controlled and
encrypted in transit.
Order and complaint records. Orders, complaints and
support hand-offs are kept as long as needed for accounting, warranty and
legal obligations, then deleted.
Server logs. Operational logs (timestamps, IP addresses)
are kept for security and operations and are rotated as part of normal
server maintenance.
Product catalog. The catalog and company-profile
information the assistant reads is public shop information and contains no
user data.
6. Data Deletion
You can request deletion of any data the assistant may hold about you at any
time. See our Data Deletion page at
aicom.b2gsoft.com/data-deletion
for the full procedure, or email
bdeshishop111@gmail.com with
the subject "Data Deletion Request".
7. Children's Privacy
The service is not directed at children under 13, and we do not knowingly
process messages from children under 13. If you believe a child has sent us
messages, contact us and we will delete the associated data.
8. Security
The webhook endpoints that receive messages from Meta (Messenger,
WhatsApp, and Instagram) are served over HTTPS.
Platform credentials (webhook verify tokens and page/user access tokens)
are kept in environment files on the server and are never committed to the
codebase or exposed in replies.
User data is stored in access-controlled stores on our servers, with
platform credentials (webhook verify tokens and page/user access tokens)
kept separate from message data and never committed to the codebase or
exposed in replies.
9. Changes to This Policy
If we change this policy, the updated version will be posted on this page
with a revised "Last updated" date.