Privacy Policy

Devzity (devzity.com) is a business platform from Bangladesh: payments with bKash and Nagad, orders, stock, customers, websites and DevAI, an AI helper for shops. This policy explains what we collect, why, and the choices you have. Questions: support [at] devzity.com.

• Your account: your name, email and profile picture from Google sign-in or your email, and for staff logins a phone number and a hashed password.
• Your business: what you add to Devzity, such as products, orders, customers, payments, website content and settings.
• Payment detection: the Devzity Android app reads only bKash and Nagad payment SMS on your Bridge phone. We keep the payment details (amount, sender number, transaction ID, balance) and the text of that payment SMS as proof. Other SMS are never read into Devzity or uploaded.
• Your shoppers: when someone orders on a website made with Devzity, we keep their name, phone, address and order for that shop.
• Chats with DevAI: messages people send to a shop's DevAI or to Devzity's own assistant.
• Facebook and Instagram messages: if a business connects its Facebook Page or Instagram account, we receive messages sent to it, the sender's name and profile picture as Facebook gives them, and the replies sent from Devzity.
• Technical data: IP address and browser details, used for security and to stop abuse, and cookies that keep you signed in.

• To run the service you use: match payments, show orders, publish websites, send the emails and notifications you asked for.
• To answer customers with DevAI, using only that shop's own information.
• To keep accounts safe, stop fraud and fake orders, and fix problems.

When a business connects a Facebook Page, Devzity uses Meta's official APIs to receive the Page's messages and to send replies, written by DevAI or by the business's team. The Page access key is stored encrypted on our servers, never in a browser.

We use these messages only to show them in that business's Devzity inbox and to answer them. We never sell them, never use them for advertising, and never show one business's messages to another business. A business can disconnect its Page at any time in Devzity (Messages, Pages & AI, Disconnect); we then stop receiving messages and delete the Page access key.

We never sell personal data. We share it only with the services that help us run Devzity, and only what they need:

• AI providers (such as Google Gemini) receive the chat message and the shop's facts needed to write a DevAI answer.
• Meta receives the replies sent to Facebook and Instagram chats.
• Hosting, file storage, email and courier services the business chose to connect.

We may also share data when the law requires it.

We keep your data while your account is open. Payment and order records are business records and are kept for the business's history. When an account is erased, its businesses and their data and files are deleted.

You can see and change your business data in your dashboard. You can ask us for a copy, a correction or to delete your account and data by writing to support [at] devzity.com. How to delete Facebook data is on our data deletion page.

Data is sent over HTTPS. Secrets such as Page access keys and API keys are stored encrypted, and sign-in sessions are stored only as secure hashes.

If we change this policy, we update the date above.