Official Legal & Compliance Document
Privacy Policy & Data Protection
How we protect merchant, customer, and Android Reader App data.
1. Overview & Non-Custodial Nature
PayAutoBD operates strictly as a B2B Non-Custodial Payment Verification Software-as-a-Service (SaaS). We do not hold, store, or process customer funds in any central bank account. All payments made by customers are transferred directly to the respective Merchant's mobile banking (bKash, Nagad, Rocket, Upay) or Bank account.
2. Information We Collect
- Merchant Account Data: Name, business name, email address, phone number, and configured wallet numbers.
- Transaction Verification Data: Incoming payment SMS payloads (Transaction ID, Amount, Provider, and Sender Number) pushed from the Merchant's authorized Android Reader App strictly for automated order matching.
- Customer Checkout Data: Name, mobile number, and email address provided during checkout to generate and deliver official payment invoices.
3. Android Reader App SMS Permission Disclosure
Our Android Reader App requests READ_SMS permission solely to detect incoming financial transaction notifications (e.g., bKash, Nagad, Rocket, Bank credit alerts) containing Transaction IDs. The app strictly ignores and blocks personal messages, OTPs, and PIN codes. Data is transmitted over 256-bit SSL encryption with SHA-256 cryptographic signatures.
4. Data Sharing & Security
We never sell, rent, or share merchant or customer data with third-party advertisers. Data is shared only with the respective Merchant store where the customer initiated the purchase.
PayAutoBD operates strictly as a B2B Non-Custodial Payment Verification Software-as-a-Service (SaaS). We do not hold, store, or process customer funds in any central bank account. All payments made by customers are transferred directly to the respective Merchant's mobile banking (bKash, Nagad, Rocket, Upay) or Bank account.
2. Information We Collect
- Merchant Account Data: Name, business name, email address, phone number, and configured wallet numbers.
- Transaction Verification Data: Incoming payment SMS payloads (Transaction ID, Amount, Provider, and Sender Number) pushed from the Merchant's authorized Android Reader App strictly for automated order matching.
- Customer Checkout Data: Name, mobile number, and email address provided during checkout to generate and deliver official payment invoices.
3. Android Reader App SMS Permission Disclosure
Our Android Reader App requests READ_SMS permission solely to detect incoming financial transaction notifications (e.g., bKash, Nagad, Rocket, Bank credit alerts) containing Transaction IDs. The app strictly ignores and blocks personal messages, OTPs, and PIN codes. Data is transmitted over 256-bit SSL encryption with SHA-256 cryptographic signatures.
4. Data Sharing & Security
We never sell, rent, or share merchant or customer data with third-party advertisers. Data is shared only with the respective Merchant store where the customer initiated the purchase.
Platform Operator: PayAutoBD
Contact Compliance & Support Desk →