Govaly Ltd. ("Govaly", "we", "us", or "our") operates a website-building software-as-a-service platform that allows sellers to create, manage, and run their own online stores and websites (the "Services"). This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, how long we keep it, and the rights you have over your information.
This Policy applies to everyone who uses the Services, including sellers who hold a Govaly account ("Sellers", "you") and the shoppers or visitors of a Seller's store whose information passes through our Services ("End-Customers"). By creating an account or using the Services, you agree to the practices described in this Policy.
01Introduction and Scope
1.1. This Policy covers information handled through the Govaly platform, our websites, and related tools and communications.
1.2. Govaly is a Bangladesh-based company. We handle personal information in line with the applicable laws of Bangladesh, including the Information and Communication Technology Act, 2006 (as amended), the Digital Security Act, 2018, and the emerging data-protection framework of Bangladesh. Because some information is stored on servers outside Bangladesh, we also apply widely recognised international data-protection best practices.
1.3. This Policy should be read together with our Terms and Conditions and our Cancellation Policy, which form part of your agreement with us.
02Information We Collect
We collect the following categories of information.
2.1Seller Account and Billing Information
When you register for and use a Govaly account, we collect information such as:
- Your name and the name of your business;
- Your email address and other contact details;
- Login credentials;
- Billing and payment details necessary to process your Subscription (for example, cardholder name, billing address, and payment method information).
2.2Seller Website Content and Files
We store the content and files you upload or create through the Services, including:
- Images, logos, and media;
- Product listings, descriptions, and pricing;
- Documents, text, and other materials that make up your store or website.
2.3End-Customer Data Collected Through Seller Stores
Sellers use the Services to collect information from their own shoppers and visitors. This may include End-Customer names, contact details, order information, addresses, and other data that End-Customers provide to a Seller's store. This information belongs to the Seller's business relationship with its End-Customers. Govaly stores and processes it on the Seller's behalf so that the Seller's store can function.
2.4Technical and Usage Information
We may automatically collect limited technical information, such as device and browser type, IP address, log data, and how the Services are used, to keep the platform secure and working properly.
03How We Use Information
We use the information described above to:
- Create, operate, and maintain your account and your store or website;
- Process Subscription payments and send billing-related notices;
- Provide, support, troubleshoot, and improve the Services;
- Store, host, and back up your website content and files;
- Enable Sellers to receive and manage End-Customer data through their stores;
- Communicate with you about your account, security, updates, and service matters;
- Protect the platform against fraud, abuse, and security threats;
- Comply with our legal obligations under the laws of Bangladesh and other applicable laws.
We do not sell your personal information or that of your End-Customers.
04How and Where We Store Information
4.1. Your information is stored on a mix of local servers located in Bangladesh and cloud servers located abroad (for example, Amazon Web Services and Google Cloud).
4.2. This means some information, including website content and End-Customer data, may be transferred to and stored in countries outside Bangladesh. Where information is stored or processed abroad, we take reasonable steps so that it continues to receive an appropriate level of protection consistent with this Policy and applicable law.
4.3. By using the Services, you acknowledge and consent to this cross-border storage and processing of information.
05How We Protect Information
5.1. We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse, or alteration. These may include encryption in transit, access controls, and regular backups.
5.2. No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you are responsible for keeping your account credentials confidential.
06Sharing Information with Third Parties
6.1. We share information only as needed to run the Services, and only with parties bound by appropriate confidentiality and security obligations. This may include:
- Payment processors, to handle Subscription billing and payments securely;
- Cloud infrastructure and hosting providers (such as AWS and Google Cloud), which store data on our behalf;
- Service providers that support functions such as email delivery, analytics, or customer support;
- Authorities or third parties, where we are required to do so by law, legal process, or a valid request from a competent authority in Bangladesh or another applicable jurisdiction, or to protect our rights, users, or the security of the Services.
6.2. We do not sell, rent, or trade personal information to third parties for their own marketing.
07Roles and Responsibilities for End-Customer Data
7.1. For the personal information that a Seller collects from its own End-Customers through the Seller's store, the Seller is responsible for that data as its controller, and Govaly acts as a processor that stores and handles the data on the Seller's instructions.
7.2. Sellers are responsible for:
- Having a lawful basis to collect and use their End-Customers' data;
- Providing their own privacy notice to their End-Customers;
- Responding to requests from their End-Customers regarding that data.
7.3. End-Customers who wish to exercise rights over their data should contact the relevant Seller in the first instance. We will support Sellers as reasonably required.
08Data Retention
8.1. We keep information for as long as your account is active and as needed to provide the Services, meet legal and accounting obligations, resolve disputes, and enforce our agreements.
8.2. When your Subscription is cancelled, specific retention and deletion rules apply, as described in Section 9 below and in our Cancellation Policy.
09Data Handling Upon Subscription Cancellation
This section summarises how your data is handled after cancellation. It is governed in full by our Cancellation Policy, which you should read together with this Section.
9.1. No refunds; continued service. If you cancel during a billing cycle, no refund is issued for the remaining paid period. Your Services remain active until the end of the period you have already paid for.
9.2. 15-day data availability window. After your paid period ends and the Subscription is officially cancelled, your data and website backups remain available on Govaly for exactly 15 days.
9.3. Exporting your data. During those 15 days, you can log in to your account and export or download your data and website content.
9.4. Permanent deletion. After the 15-day window expires, all of your data is permanently deleted from Govaly's servers with no option for recovery. Govaly will not retain or provide any backup after that point.
9.5. Deletion of End-Customer data held for a Seller follows the same timeline. Sellers should export any End-Customer data they need before the window closes.
10Your Rights
10.1. Subject to applicable law, you may:
- Access the personal information we hold about you;
- Correct information that is inaccurate or incomplete;
- Export a copy of your data and website content (including during the 15-day post-cancellation window);
- Request deletion of your information, subject to any legal retention obligations.
10.2. To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before acting on a request.
11Legal Basis and Compliance
11.1. We handle personal information where we have a proper legal basis to do so, such as performing our contract with you, complying with legal obligations, protecting legitimate interests in operating and securing the Services, and, where required, on the basis of consent.
11.2. We handle information in accordance with the applicable laws of Bangladesh, including the Information and Communication Technology Act, 2006 and the Digital Security Act, 2018, together with recognised international data-protection best practices for information stored abroad.
12Changes to This Policy
12.1. We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Services after an update means you accept the revised Policy.
13Contact Us
If you have questions, concerns, or requests about this Privacy Policy or your information, please contact us:
Govaly Ltd. Email: [email protected]
We handle all privacy, legal, and account inquiries through this address.