Privacy Policy

Alap (অলাপ) — conversational commerce for online sellers. Last updated: [DATE].

This policy explains how Alap ("we", "us") collects, uses, and protects information when merchants use our dashboard and when their customers message them through connected channels (Facebook Messenger, Instagram, and WhatsApp). Replace all [BRACKETED] placeholders before publishing, and have it reviewed for your jurisdiction — this is a starting template, not legal advice.

Who we are

Alap is operated by [YOUR LEGAL NAME / COMPANY], located at [ADDRESS], Bangladesh. Contact: [EMAIL].

Information we collect

From merchants (our customers): business name, email, password (stored hashed), product catalogue, orders, and subscription/billing records.

From end customers (people who message a merchant): the messages they send, their platform-provided ID, and — only when they choose to place an order — their name, phone number, and delivery address. Voice notes and images sent to the bot are processed to understand the request.

We do not collect payment card numbers. Cash on delivery and manual mobile-payment verification are handled outside our systems.

How we use information

To operate the automated assistant (understand messages and reply), to process and track orders, to arrange courier delivery, to provide the merchant dashboard and analytics, to meter usage against subscription plans, and to keep the service secure.

How information is shared

We share information only with service providers needed to run Alap:

• Meta Platforms — to receive and send messages on Messenger, Instagram, and WhatsApp.
• AI provider — message text is sent to our AI provider ([e.g. Groq]) to generate replies. It is not used to train third-party models.
• Courier partners — name, phone, and address are shared with the courier the merchant selects to deliver an order.
• Hosting/database — data is stored on our server infrastructure ([e.g. Hostinger VPS]).

We do not sell personal information.

Data retention

We keep conversation and order data for as long as the merchant's account is active, and delete or anonymise it within [e.g. 90 days] of a deletion request or account closure, except where we must retain records to meet legal obligations.

Your rights & data deletion

End customers may request access to or deletion of their data by contacting the merchant they messaged, or us at [EMAIL]. Merchants can delete products, orders, and their account from the dashboard. To request deletion of all data associated with your Facebook/Instagram/WhatsApp identity, email [EMAIL] and we will process it within [e.g. 30 days].

Security

Passwords are hashed, access is scoped so each merchant can only see their own data, and traffic is encrypted in transit (HTTPS). No system is perfectly secure, but we take reasonable measures to protect information.

Children

Alap is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; the "last updated" date will change. Continued use after an update means you accept the revised policy.

Contact

Questions about this policy: [EMAIL].