LotDesk Privacy PolicyOfficial Policy
Last updated: September 2026 • Effective for all LotDesk Web and Mobile users.
LotDesk Business & Profit Manager Platform
Operated by ABDULLAH AL MORSHED NAYEEM (Dhaka, Bangladesh). This Privacy Policy governs how personal and commercial business information is processed across the LotDesk web dashboard and mobile applications.
1. Information We Collect
1.1 Information You Provide Directly
When you register for and operate your store on LotDesk, you provide:
- Account Identity: Full name, verified mobile phone number, email address, and encrypted password.
- Store & Business Records: Commercial shop name, business category, trade license / BIN number, and outlet address.
- Operational Inventory Data: Product SKUs, purchase lot costs, transport carrying fees, customer orders, and return damage logs.
- Support Inquiries: Messages, feedback, and attachments submitted through our Help & Support desk.
1.2 Device & Geolocation Information
To provide regional delivery calculations and counter hardware integrations:
- District & City Location: We collect store district/city location to auto-calculate regional courier delivery fees (inside vs outside Dhaka/district). Location is never tracked in the background and is never sold to advertisers.
- Hardware & Camera: Access to camera/storage is used solely when scanning barcodes or uploading store logos for invoices.
2. How We Use Your Information
We process your data exclusively for essential business operations:
- Automating First-In, First-Out (FIFO) stock depletion and unit purchase costing.
- Generating thermal POS counter memos, PDF commercial invoices, and Mushak 9.1 tax audit logs.
- Managing team staff permissions (Owner, Manager, Cashier).
- Preventing fraudulent access and enforcing rate limits on SMS verification OTPs.
3. Data Sharing & Third-Party Integrations
We do not sell, lease, or monetize your commercial records. We integrate only with standard cloud infrastructure providers:
- Google Sign-In / Firebase: For secure OAuth 2.0 authentication and push alerts.
- Google Mobile Ads (AdMob): Optional rewarded video ads on mobile/web allowing merchants to unlock 30-day feature passes for free.
4. Data Security & Storage
We enforce enterprise-grade security protocols:
- All network communication is encrypted using HTTPS / TLS 1.3.
- Authentication utilizes JSON Web Tokens (JWT) with token expiration and blacklisting.
- Passwords are hashed using Django’s cryptographic algorithms (PBKDF2 SHA-256).
- Multi-tenant architecture ensures strict database isolation between organizations.
5. Account Deletion & Data Rights
Merchants have absolute authority over their data:
- Access & Correction: You can edit store credentials and owner profiles anytime in Settings.
- Permanent Account Deletion: You can delete your account from the Settings > Danger Zone by typing "confirm". This immediately and irreversibly wipes all products, lots, orders, and customer records from our databases.
6. Contact & Inquiries
If you have questions regarding this Privacy Policy or your data, please contact our legal representative:
Operator: ABDULLAH AL MORSHED NAYEEM
Email: lotdeskbd@gmail.com
Address: Mirpur 1215, Dhaka, Bangladesh