Security & Legal Policy
Last Updated: August 2026Version 2.0

Privacy Policy

Your privacy and data security are our top priorities. This policy explains how ReviewKmon handles your account information, review content, business verification documents, and privacy rights.

1. Information We Collect

We collect information required to deliver a reliable verified review ecosystem for Bangladesh e-commerce and f-commerce businesses and consumers.

  • Account & Profile Information: When you register, we collect your name, email address, password hash, and optional profile picture (avatar).
  • Reviews & Moderation Submissions: When you post a review or submit a moderation report, we store your ratings, detailed review text, uploaded evidence images, and moderation logs.
  • Business Claim & Ownership Verification Documents: When claiming a business profile, we collect official trade licenses, business email addresses, contact numbers, and verification proof screenshots.
  • Technical & Device Log Data: We store standard technical details like IP addresses, browser types, session tokens, and timestamp logs for anti-fraud and security auditing.

2. How We Use Your Information

We strictly use collected data to operate the platform, verify business authenticity, prevent fake reviews, and enhance buyer trust.

  • Public Trust & Review Display: Displaying authentic customer feedback, rating scores, and verified business responses on ReviewKmon public profile pages.
  • Business Ownership Verification: Verifying legitimate trade licenses and proof of ownership to grant official Business Portal access to real store owners.
  • Anti-Fraud & Scam Moderation: Detecting fake reviews, spam bots, unauthorized claim attempts, and illegal harassment to keep the directory clean and trustworthy.
  • Automated Email Notifications: Sending OTP verification codes, review moderation updates, owner reply notifications, and account security alerts via email.

3. Public vs. Private Information

Transparency is core to ReviewKmon. We clearly separate information that is publicly displayed from data kept strictly confidential.

Publicly Visible InformationStrictly Private Data
Your display name and avatar on published reviewsYour personal email address and encrypted password hash
Star ratings, review text, and review dateUploaded trade licenses, owner NID, and private claim proof
Official business owner replies to customer reviewsDetailed report comments, internal moderator logs, and IP history
Business status (Verified Blue Badge, PRO badge, Scam Alert)Email OTP verification codes and authentication session tokens

4. Data Security & Protection

We implement industry-standard technical measures to safeguard your account and verification documents.

All data transmitted between your browser and our servers is protected using HTTPS/TLS encryption. Sensitive user passwords are standardly hashed before database storage, ensuring your plain text password is never stored or visible to anyone.

Access to business verification documents and administrative moderation dashboards is strictly controlled via Role-Based Access Control (RBAC). Only authorized system administrators have access to verify submitted proof files.

5. Cookies & Local Storage

We use essential cookies and browser local storage to maintain secure user sessions and preserve your preferences.

  • Authentication Cookies: Secure HTTP-only session cookies (`access_token` and `refresh_token`) to keep you logged in securely.
  • Language & Locale Preference: Cookies storing your selected language (English or Bangla) for a seamless browsing experience.
  • Security Tokens: Anti-CSRF tokens and rate-limiting trackers to protect forms against automated bot attacks.

6. Your Rights & Account Control

You retain full control over your personal account information and communication settings.

  1. Edit your display name, avatar, and personal details anytime from Account Settings.
  2. Manage your email preferences and notification toggles in Settings.
  3. Request account deactivation or deletion by reaching out to our support team.

7. Questions & Contact Us

If you have questions regarding this Privacy Policy or wish to inquire about your data, please contact our support team.