Privacy policy

• Account data — name, email, phone number, password (hashed), and optional profile photo.
• Identity data — for verified sellers we collect NID/passport number and a photo of the document.
• Listing data — product photos, descriptions, prices, locations, and category metadata.
• Messages — content of conversations between users on eSawda, retained for moderation and dispute resolution.
• Device & usage data — IP address, device type, browser, pages visited, referring URL, and timestamps.
• Cookies — small files for session, preferences, and analytics. Manage them in cookie settings.

• Operate, secure, and improve the marketplace.
• Verify identities and prevent fraud, scams, and abuse.
• Show your listings to relevant buyers, personalise search results, and run promotions you opt into.
• Send transactional notifications (messages, price alerts, account alerts). Marketing emails are opt-in.
• Comply with legal obligations and respond to valid requests from authorities.

We process your data on the basis of: (a) contract — to provide the service you signed up for; (b) consent — for marketing, optional cookies, and non-essential features; (c) legitimate interest — to keep the platform safe and prevent fraud; and (d) legal obligation — where law requires us to retain certain records.

• Other users — limited profile info (name, verified badge, public listings) is shown to other users.
• Service providers — cloud hosting, SMS/email delivery, payment processors, and analytics vendors bound by data-processing agreements.
• Authorities — when required by law or to protect the safety of our users.
• Business transfers — if eSawda is acquired or merges, your data may transfer to the new entity under the same protections.

We never sell your personal data to third parties. Not now, not later.

We keep account data while your account is active. If you delete your account, we erase or anonymise your data within 30 days, except where we must retain it longer (e.g. transaction records for tax/legal reasons, or evidence of fraud).

• Access — request a copy of your data.
• Correction — fix anything wrong.
• Deletion — close your account and erase data.
• Object / restrict — opt out of certain processing.
• Portability — export your listings & messages.
• Withdraw consent — anytime, for consent-based processing.

To exercise any of these, email privacy@esawda.com. We respond within 30 days.

We use TLS in transit, encryption at rest for sensitive fields, role-based access, audit logs, and continuous vulnerability monitoring. No system is 100% secure — if you spot a vulnerability, please report it responsibly to privacy@esawda.com.

Some of our service providers may process data outside Bangladesh. Where this happens we rely on standard contractual clauses and equivalent safeguards to protect your information.

eSawda is not directed at children under 18. We do not knowingly collect data from minors. If you believe a child has registered, contact us and we will delete the account.

We may update this policy as the product evolves. Material changes will be announced by email and an in-app banner at least 14 days before they take effect. The “last updated” date at the top always reflects the current version.

For privacy questions, complaints, or data requests, email privacy@esawda.com. You can also write to our Data Protection Officer at our Dhaka office (see Contact).