EcomGini (“EcomGini”, “we”, “us”) is a software service operated by IT Pal Solutions, 50 Nayapara Road, Mymensingh 2200, Bangladesh. EcomGini helps businesses answer their customers on Facebook Messenger, Instagram, WhatsApp, post comments and website chat with an AI assistant, and manage orders, couriers and follow-ups. This policy explains what data we collect, why, how we protect it and how you can have it deleted.
1. Who this policy covers
Business users: shop owners and their team members who create an EcomGini account.
Customers of those businesses: people who message, comment on or order from a business that uses EcomGini.
For customer data, the business using EcomGini is the data controller and EcomGini acts as its processor, using the data only to provide the service the business asked for.
2. Data we collect from business users
- Account data: name, email address, phone number, business name, address and password (stored only as a secure hash).
- Business settings: products, prices, delivery charges, policies, instructions for the assistant and knowledge-base documents you upload.
- Billing records: top-ups, plan details and transaction references. We do not store card numbers.
- Usage data: log-ins, actions in the dashboard and technical logs needed to keep the service secure.
3. Data we receive from Meta platforms
When a business connects its Facebook Page, Instagram professional account or WhatsApp Business account through Meta’s official login, we receive access tokens and, through the Meta APIs, the following data:
- Messages sent to and from the connected Page, Instagram account or WhatsApp number, including text, photos, voice notes and attachments.
- The public name and profile picture of people who message the business, and the page-scoped or app-scoped IDs Meta provides.
- Comments on the business’s own posts, and the post content needed to understand which product a comment refers to.
- Basic Page information such as Page name and ID.
We use this data only to show conversations to the business, generate replies, create orders, leads and bookings, send order and delivery updates, and produce analytics for that business. We do not use Meta platform data for advertising, we do not sell it, and we do not combine it across different businesses except for anonymous delivery-risk signals described in section 5.
4. Data about customers of businesses
- Contact details a customer provides in a chat or order form: name, phone number and delivery address.
- Order details: products, quantities, prices, payment status and courier tracking.
- Conversation history with the business, including AI and team replies.
5. How we use data
- To provide the service: answering customers, recognising products from photos, transcribing voice notes, creating orders and bookings, and booking couriers.
- To send messages the business authorised, such as order confirmations, delivery updates and reminders, within Meta’s messaging rules.
- To prevent fraud: we may show a business a delivery-success score for a phone number based on past delivery outcomes, without revealing other businesses’ customers or conversations.
- To keep the service secure, fix problems and improve features.
- To communicate with business users about their account, billing and important changes.
6. AI processing
Messages and images are sent to our AI provider (Google Gemini API) only to generate replies, read photos or transcribe voice notes for the business that received them. We send only what is needed for that request. We do not allow our AI provider to use this data to train its models where such an option is available to us.
7. Who we share data with
We share data only with service providers that help us run EcomGini, and only as needed:
- Meta Platforms (Facebook, Instagram, WhatsApp) — to receive and send messages.
- Google (Gemini API) — AI processing.
- Our hosting provider (servers in the United States) and Cloudflare (R2 storage for files and backups).
- Courier companies the business connects (e.g. Steadfast, Pathao, RedX) — name, phone, address and parcel details.
- Payment providers the business uses (e.g. bKash, Nagad, SSLCommerz) — payment amount and reference.
- SMS and email providers — to send confirmations and alerts.
We may disclose data if required by law. We never sell personal data.
8. Storage and security
- Data is encrypted in transit (HTTPS/TLS). Access tokens and API keys are encrypted at rest.
- Passwords are stored only as salted hashes.
- Encrypted backups are kept on separate storage and rotated.
- Each business can see only its own data; team members see only what the owner allows.
9. How long we keep data
We keep business and conversation data while the business account is active. If a business stops using EcomGini, data is kept so it can return, until the business asks us to delete it. Deleted data is removed from backups within 60 days. Billing records may be kept longer where the law requires.
10. Your rights and data deletion
You can ask to access, correct, export or delete your data at any time. Customers of a business can ask that business, or contact us directly. Follow the steps on our Data Deletion page or email hello@ecomgini.com. We act on verified requests within 7 days.
11. Children
EcomGini is a business service and is not directed to children under 13. We do not knowingly collect their data.
12. Changes to this policy
We will post any changes on this page and update the date above. Significant changes will be notified to business users by email or in the dashboard.
13. Contact
IT Pal Solutions — EcomGini, 50 Nayapara Road, Mymensingh 2200, Bangladesh. Email: hello@ecomgini.com. Phone: +880 1601 787 786.