Privacy Policy
Last updated: Oct 20, 2026
How PartsPilot handles personal data.
1. Who is responsible
PartsPilot runs the service. For the records a shop enters about its own customers and staff, the shop decides what is collected and why, and PartsPilot stores and processes them on the shop's behalf. This policy explains what we collect and how we handle it.
2. What we collect
From shops and staff: name, phone number, email, role, the shop's name, address and settings, and sign-in and security events (including failed attempts and the device and address used). From a shop's work: products, stock, sales, returns, purchases, expenses, cash records, attendance and salary entries, garage jobs and customers' names, phone numbers and dues. From the online store: the name, phone number, address and order a customer gives when reserving or ordering, and a customer account if they create one.
3. Why we use it
To run the service you asked for (sign-in, selling, stock, reports, delivery, payments), to keep it secure and prevent abuse, to send messages about your account and orders, to support you, and to meet legal duties. We do not sell personal data and we do not use a shop's customer data for advertising.
4. Who it is shared with
Only with what is needed to run the service: our hosting and database providers, email delivery, and, when you or your customer use them, payment gateways (bKash, Nagad) and couriers (Pathao, SteadFast), who receive the details needed for that payment or parcel. They process it under their own terms. We may disclose data when the law requires it.
5. Staff and cost data
Inside a shop, what a person sees depends on the role the owner gives them. Staff do not receive cost, margin, profit or financial reports. Every change to important records is logged with who made it.
6. Where it is kept and how it is protected
Data is stored in a managed database with separation between shops, encrypted connections, access controls, login limits and audit logs. Secrets such as a shop's gateway keys are stored encrypted. No system is perfectly secure; we will tell affected shops without undue delay if a breach affects their data.
7. How long we keep it
While your account is active we keep your records, because the law and your own books need them. Sales, returns, stock movements, invoices and cash records are never deleted by the app; corrections are recorded as new entries. A shop that stays read-only for the retention period (90 days by default) after its subscription lapses may be deleted, and only after an off-site copy exists. You can ask for an export at any time.
8. Your choices and rights
You can ask us to see, correct or export the personal data we hold about you, to restrict its use, or to delete it where the law allows. A shop's customers should ask the shop first, because the shop controls those records. Contact us using the details below and we will answer within a reasonable time.
9. Cookies and similar storage
We use cookies and browser storage that are necessary to keep you signed in, remember your language and display choices, and protect the service. We do not use advertising cookies.
10. Children, changes and contact
The service is for businesses and is not meant for children. We may update this policy and will announce a material change in the app; the date above shows the latest version. For privacy questions use the contact details on our site or the support channel in your account.