Privacy Policy

1. Executive Overview & Data Privacy Commitment

Abashoni ("Platform", "we", "us", or "our"), operated by MPC Properties Ltd., is a hyperlocal marketplace built specifically for the residents, landlords, buyers, and vetted home-service vendors of Bashundhara Residential Area (Blocks A to P), Dhaka, Bangladesh.

We operate under a strict Zero-Trust Privacy & Data Minimization doctrine. We never harvest extraneous personal information, we never sell your data to third-party ad networks, and we never expose raw resident contact numbers to public web crawlers, search engines, or untrusted vendors.

2. Information We Collect

We collect only the absolute minimum data required to facilitate safe neighborhood transactions and verified service dispatch:

• Residents & Property Inquirers: Phone number (verified via OTP and masked behind unique tokens such as BC-XXXXXXXX), preferred Bashundhara Block area (e.g. Block C, Block D), and optional inquiry specifications. We do not collect dates of birth, marital status, or government ID numbers from residents.
• Service Technicians, Agents & Landlords (Vendors): Official business name, primary operating contact phone, operating Bashundhara Blocks, service categories, and regulatory verification documents (National ID card and/or DNCC Trade License) uploaded securely for identity validation.
• Automated Technical Telemetry: Essential session cookies, anonymized IP telemetry for DDoS and rate limiting defense, and Cloudflare Turnstile bot verification tokens.

3. How We Protect Your Contact Details (Phone Masking Gateway)

Public phone scrapers and telemarketing bots routinely harvest contact details from legacy classifieds sites. Abashoni deploys a proprietary Zero-Scrape Gateway:

• When you click "Call Provider" or "Book Service", your raw mobile number is never rendered in client DOM elements or JavaScript bundles.
• Your inquiry is converted into an encrypted, server-side notification dispatched directly to the provider's verified WhatsApp channel or inbox containing only your neighborhood block and request summary.
• Only verified vendors with active credit quotas who accept your request receive authorized access to communicate directly with you.

4. Document Storage & KYC Verification Lockdown

All vendor verification documents (NID cards, Trade Licenses) are uploaded directly to private Cloudflare R2 / AWS S3 encrypted object storage using short-lived (300-second) presigned URLs. These files are strictly restricted to authorized compliance officers and are never indexed, publicly accessible, or retained past account termination.

5. Strict Prohibition of Minors (18+ Requirement)

Our marketplace is strictly intended for individuals who are at least eighteen (18) years of age. We do not knowingly collect, solicit, or maintain personal information from individuals under 18. Any account or lead submission identified as originating from a minor is immediately terminated and expunged from our database.

6. Third-Party Disclosures & Analytics Audit

We do not share, rent, or monetize your personally identifiable information (PII) with commercial data brokers, advertising platforms (e.g. Meta Pixel, Google Remarketing), or credit rating firms. Telemetry is limited to privacy-centric infrastructure services (Upstash Redis for rate limiting, Cloudflare Turnstile for anti-spam verification, and WhatsApp Business API for authorized service notifications).

7. Your Rights: Right to Erasure & Data Deletion

Under our governance standards and applicable privacy frameworks, you retain comprehensive control over your personal data:

• Right to Access: You may request an export of all active listings, leads, and reviews associated with your phone number.
• Right to Rectification: You may correct inaccurate business names, operating blocks, or service categories at any time.
• Right to Complete Erasure: You can submit an automated deletion request via our secure authenticated API (/api/user/delete-account). Within 30 days, your phone number is permanently scrubbed, uploaded documents are deleted from storage, and all listings are purged, preserving only immutable tax audit ledgers required by Bangladesh law.

8. Grievance Officer & Legal Contact

For inquiries, data protection requests, or privacy concerns, contact our designated Data Protection Officer: