Privacy policy

1. What we collect

We only ask for what we need to run the service:

• Your name, email address and mobile number, and your password if you set one (we store it hashed, never as plain text).
• If you sign in with Google or Facebook: your name, email address (if the account has one), profile photo and account ID. That's all — we don't get your password, your friends list or your messages, and we never post anything for you.
• The pickup and delivery addresses you give us.
• For a phone you sell or exchange: its model, your answers about its condition, the photos you upload and its IMEI. We keep only the last four digits of the IMEI and a hash of it, never the full number.
• Your orders, sell requests and exchanges, and payment records. Online card payments happen on SSLCommerz's page, so we never see your card number or PIN — only a transaction reference and the masked card number.
• Your IP address and browser, recorded when you sign in or change your account, to help us spot misuse.

2. How we use it

We use your information to:

• check prices, inspect phones, and arrange payment, pickup and delivery;
• run your account and sign you in;
• contact you about your requests and orders;
• prevent fraud and stop stolen phones being sold.

We don't sell your information and we don't show ads.

3. Who we share it with

We use a few outside services to run Manganiz. Each one only gets what it needs:

• Vercel (website hosting) and Neon (database) store our data. Their servers are outside Bangladesh, in Singapore.
• Cloudflare R2 stores the photos you upload.
• Gmail sends our account and order emails.
• Google Gemini gives the AI price estimate. It receives only the phone's model and your condition answers — not your name, contact details or photos.
• SSLCommerz processes online payments.
• Courier services get your name, phone number and address to deliver or collect a phone.

We'll also share information with the police or a court if the law requires it, for example about a stolen phone.

4. Cookies

We only use the cookies the site needs to work: one keeps you signed in, one remembers your language, and two short-lived ones are used during Google or Facebook sign-in. No advertising or tracking cookies.

5. How long we keep it

We keep your information while you have an account. When you delete it, your personal details are erased. Records we have to keep for accounting — payments, completed sales and inspection results — stay, but are no longer linked to your name, email or phone number.

6. Your choices

You can see and change your name, phone number, photo and addresses at any time in your dashboard. If you want a copy of your data or something corrected that you can't change yourself, contact us. You can also disconnect Manganiz from your Google or Facebook account in that account's settings.

7. How to delete your data

You can delete your account and everything personal in it, including what we received from Facebook or Google:

• Sign in, go to Dashboard → Profile and tap “Delete my account”. It's deleted right away.
• If you can't sign in, email rafi.cse.ahmed@gmail.com with the subject “Delete my data” and tell us the email, phone number or Facebook name on your account. We'll delete it and reply to confirm, usually within 7 days.
• Removing Manganiz in Facebook (Settings & privacy → Settings → Apps and websites) stops Facebook sharing anything new with us, but doesn't delete what we already have — use one of the options above for that.

If you have a sale, order or exchange still in progress, we'll need to finish or cancel it first, since we need your address and phone number to get the phone to you.

8. Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top. For bigger changes we'll also let you know by email.

9. Contact us

Questions about this page or your data? Email rafi.cse.ahmed@gmail.com, or call or WhatsApp +880 1334-292754. We're based in Bangladesh.