Privacy Policy

This Privacy Policy explains how [Insert legal entity name] handles personal information when you use Shomorthok as a buyer, creator, visitor, or admin user.

Replace the bracketed business details before launch and adapt the final version to your live vendors, retention periods, and legal obligations.

We may collect information you provide directly, information generated through your use of the platform, and information from sign-in or payment providers that support the service.

• Account and profile data such as your name, email address, and sign-in provider details.
• Creator onboarding details such as display name, storefront slug, bio, application status, and moderation history.
• Commerce records such as selected package, creator relationship, order status, subscription status, and refund activity.
• Usage and security records such as download events, support interactions, and technical logs needed to protect the platform and investigate abuse.

We use personal information to operate the platform, authenticate users, fulfill subscriptions, provide access to creator content, communicate about account activity, and enforce platform rules.

• Create and secure user accounts.
• Process subscriptions and payment-related events.
• Approve creator applications and moderate platform activity.
• Manage download access, support requests, and operational troubleshooting.
• Comply with legal obligations and respond to lawful requests.

We do not sell personal information through this placeholder policy. We may share information with vendors and partners only as needed to run the platform or meet legal requirements.

• Infrastructure, hosting, database, and authentication providers that support the service.
• Payment and fraud-prevention providers involved in checkout and refund handling.
• Professional advisers, regulators, courts, or law enforcement when legally required or reasonably necessary to protect rights and safety.
• A successor entity if the business is reorganized, sold, or merged, subject to applicable law.

We use cookies and similar technologies to keep sessions working, support sign-in flows, protect the service, and remember basic preferences.

See the Cookies Policy for more detail about what is currently used and what must be updated if analytics or advertising tools are added later.

We retain information for as long as needed to provide the service, maintain required business records, resolve disputes, enforce agreements, and satisfy legal obligations.

Before launch, define concrete retention periods for accounts, transaction data, application records, and operational logs instead of relying on this placeholder wording.

We use reasonable technical and organizational safeguards designed to protect personal information. These may include access controls, signed download links, role checks, and security monitoring.

No system is perfectly secure, so you should also protect your account credentials and notify support if you suspect unauthorized access.

Depending on applicable law, you may have rights to access, correct, delete, object to, or limit certain uses of your personal information.

Privacy requests and complaints should be directed to [Insert support email address]. Add your actual response workflow, identity verification process, and statutory timelines before launch.

Your information may be processed in countries other than the one where you live if our service providers or infrastructure operate there. Update this section with the actual transfer approach used in production.

We may update this policy from time to time. The live policy should show the effective date as [Insert effective date].

For privacy questions, contact [Insert legal entity name] at [Insert support email address] or [Insert registered business address].