Privacy Policy for Nobanno

Last Updated: August 30, 2026

Welcome to Nobanno ("we," "our," or "us"). We are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

We collect several types of information from and about you to provide, improve, and secure our Service. This information is categorized as follows:

a. Information You Provide Directly to Us:

• Account Information: When you register, we collect your name, username, email address, phone number, and password. You may also choose to provide additional details for your profile, such as an address and profile picture.
• Role-Specific Information:
  • Farmer: If you register as a farmer, you will provide your bKash number and bank account details (bank name, branch, routing number, account number, and mobile number) to receive payouts.
  • Deliveryman: If you register as a deliveryman, you will provide your service areas to indicate where you can operate.
• Financial and Transaction Data: To process payments, we collect information related to your orders, such as your delivery address, payment method, transaction IDs, and payment status. This includes data you submit for manual bKash payments, Bangla QR payments (mobile-banking number/account number, amount, trx_id).
• User Content: This includes any information you voluntarily provide in communications with us or other users (e.g., reviews, comments, bid messages, and images uploaded to posts or reviews).

b. Information We Collect Automatically:

When you use our Service, we may automatically collect certain information, including:

• Location Information: With your consent, we collect your precise GPS location (latitude and longitude) via your browser or mobile device. This is used to enable key features such as calculating distances for deliveries, showing relevant products, and assigning nearby deliverymen.
• Device and Usage Data: We may collect information about your device, including its unique device identifier, operating system, browser type, mobile network information, and IP address.
• Push Notification Tokens: To send you real-time notifications about order updates, deliveries, and payment settlements, we collect your Expo push notification token.

c. Information from Third-Party Sources:

• Payment Gateway Providers: We receive payment confirmation and transaction details from our payment partners, such as bKash, SSLCommerz, and UddoktaPay.

2. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, Operate, and Maintain the Service:
  • Create and manage your account and profile.
  • Facilitate orders, deliveries, and payments (including the escrow payment process: 50% advance and 50% final settlement).
  • Enable communication between farmers, customers, and deliverymen.
  • Administer delivery batches, including the process of load, receive, and deliver items.
• Improve and Personalize Your Experience:
  • Show you relevant product listings and service areas.
  • Calculate distances to match you with the most suitable deliverymen.
  • Provide customer support and respond to your inquiries.
• Enhance Security and Safety:
  • Verify user identities and prevent fraud.
  • Monitor and analyze trends, usage, and activities to improve the security of the Service.
• Comply with Legal Obligations:
  • Maintain records for tax and regulatory compliance, including farmer due settlements and payouts.

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following specific ways:

• With Other Users:
  • Customers: Your name, phone number, and location may be shared with the farmer and deliveryman to package items with token, facilitate your order and its delivery.
  • Farmers: Your name, phone number, and product listing details are shared with customers.
  • Deliverymen: Your name and phone number may be shared with farmers and customers involved in the batches you deliver.
• With Service Providers: We share your information with trusted third-party service providers who perform services on our behalf, such as payment gateways (bKash, SSLCommerz, UddoktaPay) and data hosting providers (e.g., AWS, database services). These providers are contractually obligated to protect your data and only use it to provide their specific services.
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• In the Event of a Business Transfer: If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will notify you of any such change and any choices you may have regarding your information.

4. Data Retention and Deletion

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable tax/revenue laws), resolve disputes, and enforce our legal agreements and policies.

You may request the deletion of your account and personal data at any time by contacting us. However, we may retain certain data as necessary to comply with legal obligations or for legitimate business purposes, such as fraud prevention and maintaining financial records. Please note: if you are a farmer, financial and transaction records may need to be retained for a longer period for accounting and tax purposes.

5. Your Rights

Depending on your jurisdiction, you may have the following data protection rights:

• Access: You have the right to request a copy of the personal data we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete data we hold about you.
• Deletion: You have the right to request that we delete your personal data, subject to certain legal exceptions (e.g., to comply with a legal obligation).
• Data Portability: You have the right to request that we transfer your data to another organization, or directly to you, in a structured, machine-readable format.
• Withdraw Consent: You have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

To exercise any of these rights, please contact us using the information provided in Section 9.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of your personal information. This includes:

• Encryption: Using HTTPS for secure data transmission and hashing passwords and OTPs.
• Access Controls: Limiting access to your personal information to employees and service providers who need it to perform their job functions.
• Data Minimization: Collecting only the information necessary for the stated purposes.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

7. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: nobanno.contact@gmail.com
• Address: Dr. M A Rashid Hall, Dhakeswari Road, Lalbag, Dhaka-1000