Privacy Policy

Orisup ("we," "our," or "us") operates the orisup.com website and related services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform.

By using Orisup, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

Account Information

• Full name
• Email address
• Phone number (Bangladesh mobile number, required for verification and delivery coordination)
• Password (stored in hashed form — we never see or store your plain-text password)
• Google account ID (if you sign in with Google)

Order & Transaction Data

• Shipping address
• Order history, product selections, and payment amounts
• Payment method choice (bKash, Nagad, SSLCommerz, Stripe) — we do not store card numbers or mobile wallet PINs
• Communication preferences

Automatically Collected Data

• IP address and approximate location
• Browser type, device type, operating system
• Pages visited, time spent, and referring URLs
• Cookies and similar tracking technologies

• Account management: Create and maintain your account, verify your identity via email and SMS
• Order fulfillment: Process pre-orders, coordinate sourcing from China, arrange shipping and delivery to Bangladesh
• Communication: Send order confirmations, shipping updates, delivery notifications, and customer support responses
• Security: Detect and prevent fraud, unauthorized access, and abuse
• Improvement: Analyze usage patterns to improve our platform, products, and services
• Legal compliance: Comply with applicable laws, regulations, and legal processes

We do not sell your personal information. We share data only in these circumstances:

• Merchants: When you place an order, we share your name, shipping address, and phone number with the merchant fulfilling your order
• Payment processors: bKash, Nagad, SSLCommerz, and Stripe receive necessary transaction data to process your payments
• Shipping partners: Delivery services receive your name, address, and phone number for package delivery
• SMS provider: Your phone number is shared with our SMS service provider (BulkSMSBD) to deliver verification codes and order notifications
• Legal requirements: When required by law, court order, or government regulation

We implement industry-standard security measures to protect your data:

• Passwords are hashed using scrypt with unique salts
• All connections use HTTPS/TLS encryption
• Session tokens are cryptographically random and expire after 7 days of inactivity
• Verification codes expire within 10–15 minutes
• Administrative access is restricted and logged

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

We use cookies for:

• Essential cookies: Session management and authentication (required for the site to function)
• Preference cookies: Theme preference (light/dark mode), recently viewed products
• Analytics cookies: Understanding how visitors use our site to improve the experience

You can disable cookies in your browser settings, but some features may not work properly.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data (contact support@orisup.com)
• Export your order history
• Withdraw consent for marketing communications at any time

We retain your account data for as long as your account is active. Order records are kept for 3 years for warranty, dispute resolution, and legal compliance purposes. After account deletion, we may retain anonymized data for analytics.

Orisup is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the platform after changes constitutes acceptance of the revised policy.

For privacy-related questions or requests, contact us at:

• Email: support@orisup.com
• Website: orisup.com