Privacy Policy · AriseSell

1. Overview & Architecture Scope

AriseSell ('we', 'our', or 'the Platform') operates an enterprise-grade Conversational Commerce ERP engineered for commercial retailers, e-commerce brands, and social commerce entrepreneurs across Bangladesh. This Privacy Policy governs all processing of personal and business data conducted through our web console (/console), Meta Cloud APIs (WhatsApp, Messenger, Instagram), courier integration webhooks, and automated checkout interfaces.

Two Categories of Data: (a) Merchant Account Data (credentials, catalogs, invoices, team members) and (b) End-Customer Data (buyers interacting with your connected chat channels to place orders).

Commercial Purpose Restriction: All collected information is processed solely to fulfill merchant-directed commerce tasks: answering buyer queries, confirming orders, checking fraud risk, and generating courier shipments.

2. Information We Collect

Depending on how you and your buyers interact with AriseSell, we collect and process specific categories of data required to deliver reliable conversational sales and courier fulfillment:

a) Merchant Business & Identity Profile

Name, registered business email address, phone number, store name, brand logo, billing details, and assigned role credentials for team members (Owner, Manager, Agent, Staff).

b) Product Catalog & Inventory Vector Data

Product titles, descriptions, SKU codes, prices, size/color variant matrices, stock levels, knowledge base FAQs (/console/brain), and vector embeddings used by Multimodal Vision AI to match customer image uploads.

c) Buyer (End-Customer) Conversational Data

Chat messages, buyer voice/photo uploads, order items, full recipient name, delivery mobile number, district/thana, delivery street address, and Cash on Delivery (COD) amount. We also receive Meta Page-Scoped IDs (PSID) and WhatsApp IDs.

d) Courier & Fulfillment Telemetry

Consignment tracking codes, delivery partner status webhooks (Steadfast, Pathao, RedX), delivery attempt histories, returned parcel logs, and COD payout reconciliation reports.

3. How We Use Data & AI Guardrails

We use collected information exclusively to power your conversational commerce workflow, protect your store from delivery fraud, and automate fulfillment:

Automated 24/7 Sales

Processing natural language inquiries in Bangla, Banglish, and English, recommending relevant in-stock products, and taking complete checkout orders.

1-Click Courier Dispatch

Directly generating Steadfast, Pathao, or RedX consignments from chat addresses, tracking deliveries live, and updating customer threads.

Delivery Risk Protection

Evaluating historical return risks and delivery reliability scores to shield merchants against fake COD orders and costly courier returns.

Strict Anti-Hallucination

The AI is constrained by your uploaded store catalog and rules. It never invents fake discounts or promises unapproved delivery timelines.

4. Zero Data-Sale Policy & Trusted Sub-processors

UNCONDITIONAL PROMISE: AriseSell NEVER sells, rents, leases, or trades your customer contact lists, order revenues, or catalog wholesale data with third-party advertisers, data brokers, or competing merchants. Your customer relationships belong 100% to you.

We share data exclusively with authorized sub-processors necessary to run the infrastructure under strict confidentiality obligations:

Meta Platforms Inc.: WhatsApp Business Cloud API, Facebook Messenger, and Instagram Graph API to send and receive customer messages.
Logistics Courier Partners: Steadfast Courier, Pathao Courier, and RedX Logistics to create consignments and provide real-time parcel tracking.
Enterprise AI Infrastructure: Stateless LLM inference clusters (Google Gemini Enterprise APIs) with contractual Zero-Data-Retention agreements ensuring your private chats are never used to train public foundation models.
Legal & Regulatory Authorities: When strictly mandated by applicable laws of the People's Republic of Bangladesh under a valid court order or lawful governmental subpoena.

5. Data Sovereignty & Catalog Ownership

You retain 100% full, unencumbered ownership of your product catalogs, product images, descriptions, customer phone numbers, delivery addresses, and revenue records. AriseSell claims zero intellectual property or equity interest in your business data.

You grant AriseSell only a limited, revocable, non-exclusive license strictly to transmit messages, process AI vector matching, and interact with courier APIs on your authenticated behalf while your account is active.

6. Multi-Tenant Security & Encryption

AriseSell implements bank-grade multi-tenant cryptographic safeguards to ensure zero data leakage between different merchants and distinct stores:

Encryption in Transit & at Rest: All web and API traffic is encrypted via TLS 1.3. Sensitive credentials (Meta System Tokens, Steadfast API Keys, Pathao Secret Keys) are encrypted using industry-standard AES-256 at rest.

Multi-Store Isolation: Each registered store maintains independent catalogs, channel webhooks, courier credentials, customer threads, and order records with strict cryptographic isolation.

Granular Role Access (RBAC):</strong> Stores can assign specific team seats (Owner, Manager, Agent, Staff). Staff agents only view channels assigned to them without accessing store billing or financial keys.

7. Store Lifecycle & Danger Zone Deletion

AriseSell features an intentional separation between permanent merchant identity accounts and dynamic store instances:

Permanent User Account: Your personal identity account (Email, Password, Google Auth, 2FA credentials) is a permanent anchor on AriseSell. You can manage multiple stores or create new stores without ever having to re-create accounts.

Store Cascading Purge ('Delete Store'): When an owner initiates a store deletion ('Delete Store: {storeName}'), all store-tied dependencies are cleanly and permanently deleted: connected channels (WhatsApp, Messenger, IG), catalog items, conversation threads, orders, and courier tokens.

Clean Detachment: The owner user record survives with user.business_id = null, redirecting cleanly to /choose-plan?store_deleted=true where you can create a new brand anytime.

8. Meta Platform Compliance & User Data Deletion

AriseSell strictly complies with Meta Platform Terms, Developer Policies, and WhatsApp Business Solution Terms. In accordance with Meta Platform Data Deletion requirements, any Facebook, Messenger, or Instagram user can easily request deletion of their data:

How to Request Data Deletion:

Facebook App Settings: Go to your Facebook Profile > Settings & Privacy > Settings > Apps and Websites > Select 'AriseSell' > Click 'Remove'.
In-Chat Deletion Request: Send the message 'Delete My Data' or 'ডাটা মুছে ফেলুন' in any store chat connected with AriseSell.
Email Support: Email [email protected] with your Facebook Profile link or phone number for prompt manual verification and purging within 48 hours.

9. Your Rights & Data Portability

As an authorized merchant on AriseSell, you maintain comprehensive rights over your stored business and customer records:

1-Click Data Export

Export all customer phone directories, order logs, and courier records in standard CSV/Excel format anytime directly from /console/customers and /console/orders.

Instant Channel Disconnection

Disconnect your WhatsApp Business number, Facebook Page, or Instagram account with a single click from /console/channels. Webhooks cease immediately.

Data Rectification

Update catalog SKUs, wholesale costs, knowledge base rules, or store addresses anytime with instant synchronization across active AI chats.

Account Security Logs

Monitor active browser sessions, team member login activity, and enable Two-Factor Authentication (2FA) for heightened administrative protection.

10. Cookies & Operational Storage

AriseSell uses minimal, strictly essential cookies and local storage tokens necessary to keep your session authenticated and secure:

Authentication Tokens: Secure, HTTP-only JWT session tokens to verify your authenticated identity across /console pages without re-login.
Interface Preferences: Local storage keys to remember your preferred language toggle (English or Bangla).
Zero Third-Party Ad Trackers: We do not inject invasive third-party cross-site behavioral advertising cookies or sale trackers into your dashboard.

11. Children's Privacy (18+ Commercial Requirement)

AriseSell is a commercial B2B software-as-a-service application built for retail businesses. Our services are strictly directed to individuals who are at least 18 years of age and legally competent to enter commercial contracts in Bangladesh.

We do not knowingly solicit or collect personal information from individuals under 18. If we discover that an unauthorized minor has registered a store, we will immediately terminate the account and permanently delete all associated data.

12. Policy Revisions & Data Protection Officer

We may update this Privacy Policy periodically to reflect enhancements in AI functionality, Meta Platform requirements, or regulatory changes in Bangladesh. When material revisions occur, we notify active merchants via email or in-console alerts, updating the 'Last Updated' timestamp at the top of this document.

Data Protection Office & Contact Details

Legal EntityArise Studio

Privacy & Data Queries [email protected]

Headquarters JurisdictionBuilding 376, Road 14, Savar DOHS, Savar, Dhaka, Bangladesh

Response CommitmentWithin 24-48 business hours

Official Channels:

View Terms of Service