Privacy Policy

1. Overview

MH Inventory (“we”, “us”) respects your privacy. This Policy explains what data we collect, why we collect it, and how we protect it. It applies to all users of the MH Inventory platform and associated services.

2. Data We Collect

• Account data — name, email address, phone number, business name, and password hash.
• Business data — products, stock levels, orders, customers, suppliers, and financial records you enter.
• Usage data — pages visited, features used, timestamps, and IP address for security and support.
• Integration data — WooCommerce API credentials (encrypted at rest), order sync records.
• Communication data — emails or messages you send to our support team.

3. How We Use Your Data

• To provide, maintain, and improve the Service.
• To authenticate users and enforce multi-tenant data isolation.
• To send transactional emails (account verification, password reset).
• To provide customer support.
• To detect and prevent fraud, abuse, or security threats.
• To comply with legal obligations under Bangladeshi law.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

All data is stored on servers in a secured environment. We use industry-standard measures including encryption in transit (TLS), encryption at rest for sensitive credentials, role-based access control, and strict tenant isolation (each account's data is logically separated and inaccessible to other accounts). However, no system is 100% secure; use the Service at your own risk.

5. Third-Party Services

We may use trusted third-party services to operate the platform:

• Payment gateways (Stripe, PayPal) — process subscription payments; their own privacy policies apply.
• SMS gateway — to send order notifications to your customers on your behalf.
• Courier APIs (Steadfast, Pathao, etc.) — to create shipments; only shipment-relevant data is shared.
• Error monitoring (Sentry) — anonymised crash reports to improve stability.

6. Cookies

We use strictly necessary cookies to maintain your authenticated session (access token and refresh token). We do not use advertising or cross-site tracking cookies.

7. Data Retention

Your data is retained for as long as your account is active. After account termination, data is retained for 30 days (for export) and then permanently deleted, except where we are legally required to retain it longer.

8. Your Rights

Under applicable Bangladeshi law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data.
• Export your business data at any time from your account settings.

To exercise these rights, contact us at support@mhinventory.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors.

10. Legal Compliance

This Policy is designed to comply with the Digital Security Act 2018, ICT Act 2006, and Consumer Rights Protection Act 2009 of Bangladesh. We may disclose data when required by law or valid court order.

11. Policy Updates

We may update this Policy. We will notify you by email or in-app notice. Continued use after 14 days of notification means you accept the updated Policy.

12. Contact

Privacy questions or complaints: support@mhinventory.com