Privacy Policy
How Karbari protects merchant accounts, enforces strict store-level data boundaries, and safeguards shopper information.
1. Merchant & Shopper Data Roles
Our platform provides multi-store ecommerce software to independent businesses ('Merchants'). Each Merchant owns and controls the catalog, customer records, and orders of its own stores. When a customer ('Shopper') places an order on a Merchant's storefront, that order data is scoped strictly to that specific store.
2. Information We Collect
We collect account credentials (name, email address, encrypted password), business profile details, store domain records, and subscription billing references (such as bKash, Nagad, Rocket, or Bank Transfer transaction references) necessary to provision and operate your stores.
3. Multi-Store Isolation & Security
Every store's products, inventory, customer records, orders, and staff permissions are isolated at the database and API layer. Staff members assigned to a specific store or role (Admin, Manager, Moderator, Call Center) can only access the resources authorized by the business owner.
4. Cookies & Session Protection
We use strictly necessary HttpOnly session cookies to keep business owners and store staff securely authenticated, protect against cross-site request forgery (CSRF), and remember language or theme preferences. We do not sell merchant or shopper personal data to third parties.