01. Overview & Scope
Welcome to SeloraX Merchant ("the App", "we", "us", or "our"), operated by SeloraX (accessible at https://selorax.io). SeloraX Merchant is a business-to-business (B2B) enterprise resource planning (ERP) and multi-store management platform designed for merchants, store owners, and authorized staff members.
This Privacy Policy explains how information is collected, processed, and safeguarded when you download, install, or use our mobile application (Android Package: app.selorax.io, iOS Bundle: app.selorax.io), and associated cloud services.
Business Commitment: We do NOT sell, rent, or monetize your store data, customer lists, financial records, or operational metrics to third-party data brokers or advertisers.
02. Information We Collect
To deliver automated commerce operations, courier booking, and inventory management, we collect the following categories of information:
- Account & Profile Credentials: Merchant name, business email address, verified phone number, authentication passwords (cryptographically hashed), business name, and assigned staff access roles.
- Store & Catalog Data: Product titles, descriptions, SKU identifiers, barcode numbers, inventory counts, categories, pricing, wholesale cost structures, and product imagery.
- Customer & Order Transaction Data: Customer recipient names, delivery addresses, telephone numbers, order line items, payment status, and order tracking numbers. This information is input or synced by the merchant to fulfill commerce deliveries.
- Logistics & Delivery Data: Consignment IDs, shipping parcel weights, courier service selections (e.g. Steadfast, Pathao, RedX, Carrybee), delivery success percentages, and return statuses.
- Device & Diagnostics Data: Mobile device model, operating system version, app version, IP address, device time zone, and crash diagnostics logs to ensure operational reliability.
03. Mobile Device Permissions
To provide full functionality, the App requests specific device permissions. You have the right to grant or deny these permissions via your device settings at any time:
| Permission |
Platform Identifier |
Purpose & Usage |
| Camera |
CAMERA |
Scanning product barcodes / SKU codes during physical inventory audits, order packing, and return inspections; capturing product photos directly to the catalog. |
| Microphone & Audio |
RECORD_AUDIO |
Allows merchants to dictate voice commands and queries to the AI Assistant copilot in Bangla or English; in-app VoIP order confirmation calling. |
| Phone & Calling |
MANAGE_OWN_CALLS / CallKeep |
Enables merchants and customer support agents to place order verification calls to buyers directly from the order details interface. |
| Photos & Storage |
READ_MEDIA_IMAGES |
Selecting existing product images from your device photo library to upload to your online storefront catalog. |
| Push Notifications |
POST_NOTIFICATIONS |
Delivering real-time alerts for incoming store orders, abandoned cart triggers, stock depletion warnings, and courier milestone updates. |
| Biometrics |
USE_BIOMETRIC / FaceID |
Optional biometric app lock (Fingerprint / Face Unlock). Biometric templates remain encrypted exclusively inside your device's hardware Secure Enclave and are never transmitted to our servers. |
04. How We Use Information
Information collected is used strictly for legitimate commercial and operational purposes:
- Core Operations: Managing purchase orders, tracking product inventory, and syncing stock across multiple connected storefronts.
- Automated Logistics Fulfillment: Auto-generating courier consignments, printing parcel labels, and synchronizing real-time delivery status updates.
- AI Copilot & Natural Language Queries: Processing merchant inquiries regarding daily revenue, stock forecasts, and customer behavior. Voice input is transcribed and processed in real time and is never used to train public language models.
- Fraud Prevention & Risk Scoring: Analyzing courier delivery success ratios to identify fraudulent buyers and repeat return risks before parcel dispatch.
- System Security & Troubleshooting: Detecting and mitigating malicious traffic, unauthorized store access, and software crashes.
05. Third-Party Services & Integrations
SeloraX Merchant integrates with select third-party service providers solely to execute necessary application services:
- Logistics & Courier Partners: Courier APIs (including Steadfast Courier, Pathao Courier, RedX, and Carrybee) receive recipient delivery information (name, phone number, address, and COD cash collection amount) exclusively when you instruct the App to dispatch a shipment.
- Push Notification Infrastructure: Google Firebase Cloud Messaging (FCM) is used to dispatch encrypted push notification payloads to your mobile device.
- Cloud Infrastructure & Database: Encrypted backend databases and APIs hosted on secure cloud infrastructure complying with enterprise data protection standards.
- Payment Gateways: Integration endpoints for payment status verification (e.g. bKash, Nagad, SSLCommerz). We do not collect or store full credit/debit card numbers or PINs.
06. Data Storage, Encryption & Security
We deploy robust enterprise-grade safeguards to protect your business records:
- In-Transit Encryption: All communications between the mobile application and SeloraX APIs are strictly encrypted using TLS 1.3 / HTTPS encryption.
- At-Rest Encryption: Sensitive database records, authentication secrets, and backups are stored utilizing industry-standard AES-256 encryption.
- On-Device Credential Security: Session tokens and authentication states are stored securely on the mobile device using hardware-backed encrypted storage (Android EncryptedSharedPreferences / iOS Keychain via SecureStore).
- Role-Based Access Control (RBAC): Multi-user staff permissions restrict store administrative controls, financial balances, and sensitive customer records to designated authorized roles.
07. Data Retention & Deletion Rights
We retain store and transaction data for as long as your merchant account remains active, or as required by applicable tax, commercial accounting, and legal requirements.
Right to Account & Data Deletion: You have the absolute right to request the permanent deletion of your merchant account, staff profiles, and associated data at any time.
How to request data deletion:
- Navigate in the App to Settings → Account → Delete Account, or
- Submit an email request from your registered merchant email address to [email protected] with the subject line "Data Deletion Request".
Upon verification, your account, authentication records, and active store data will be permanently purged from our primary production databases within 30 days, except where retention is legally mandated.
08. Children's Privacy Protection
SeloraX Merchant is an enterprise management application strictly intended for commercial business owners, merchants, and adults aged 18 and older. The App is not directed toward or marketed to children under the age of 13 (or under 16 in certain jurisdictions), and we do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately, and we will delete the data promptly.
09. Policy Changes & Notifications
We may update this Privacy Policy periodically to reflect enhancements in our application features, legal compliance obligations, or technical improvements. When material modifications occur, we will notify merchants via an in-app notice, push notification, or email prior to the changes taking effect. The "Last Updated" timestamp at the top of this document indicates the effective revision date.
10. Contact Information
If you have any questions, inquiries, privacy feedback, or data subject requests regarding this Privacy Policy or our security practices, please contact our Data Protection Team: