Privacy Policy
Last updated 21 September 2026
Who we are
FullStopBD is operated by SoftKarrot, a trading name based in Bangladesh. This policy covers the FullStopBD Android app (com.softkarrot.fullstopbd) and the FullStopBD website. When this page says “we”, it means SoftKarrot; when it says “you”, it means the person using FullStopBD.
If you want anything on this page explained, or a copy of what we hold about you, email support@fullstopbd.com.
What we collect, and why
You can browse products and fill a cart without an account. Everything below starts only once you sign in, place an order, or choose to add it.
| Data | Needed? | What it is for |
|---|---|---|
| Phone number | Required | It is your sign-in identity. We send a one-time code to it by SMS, use it to reach you about an order, and the last six digits form your referral code. |
| Name | Required | Shown on your profile, to the courier as the recipient of a delivery, next to anything you post in the community, and to the person who referred you. |
| Email address | Optional | Only if you add one. Used to reach you about your account and orders. |
| Delivery address | Required to order | Street address plus division, district and upazila, to deliver what you buy and to work out the delivery charge. |
| WhatsApp number | Optional | Only if you add one. An extra way for us to reach you about an order. |
| Profile photo | Optional | Only if you add one. Shown on your profile and next to your community posts and reviews. |
| Photos and files you upload | Optional | Photos on a review or a community post, photos and files you send in support chat, and a photo you use to search for a product. Only when you choose to send one. |
| User ID | Required | The internal account number that ties your cart, orders, wallet and messages together. |
| Orders and purchase history | Required to order | To deliver, show you your orders, handle returns, and keep the business’s accounting records. |
| Wallet and transactions | Required | Your balances, ReCommerce earnings, referral bonuses, recharges, transfers and withdrawal requests — so the money in your wallet is accounted for and can be paid out to you. |
| Referral relationships | Required | Who referred you and whom you referred, because referral bonuses are paid along that chain. The person who referred you can see your name and phone number in their referral list. |
| Community posts, comments and reactions | Optional | Only if you post. Visible to other signed-in members, with your name and photo. |
| Reviews and ratings | Optional | Only if you write one. Published on the product you reviewed, with your name and photo. |
| Support chat messages | Optional | Only if you message us. So the conversation is still there when you come back. |
| Reports and blocks | Optional | If you report a post, comment or review, or block another member, we keep that so moderators can act on it and so the blocked member’s posts stay hidden from you. |
| In-app activity | Required | Signed-in users only: products you view and search for, and when and from which kind of device you last used FullStopBD, to understand what gets used and to improve the service. |
| Push notification token | Optional | Only if you allow notifications. It identifies your device so an order or wallet update reaches it. |
What we do not collect
- Your location, precise or approximate (you type your delivery area yourself)
- Your contacts, calendar, SMS messages or call logs
- Audio or video recordings — the app does not use the microphone
- Health or fitness data
- Your browsing history outside the app
- Card numbers or bank details — orders are paid in cash on delivery
- The list of other apps installed on your device
- Crash logs or diagnostics (the app ships no analytics, advertising or crash-reporting SDK)
Who else sees it
We do not sell your data, and we do not share it with anyone for their own marketing. These people and services see parts of it, for the reason given:
- Our staff — to process orders and payouts, answer your messages, and moderate reviews and community posts.
- The courier delivering your order — your name, phone number and delivery address, because a parcel cannot arrive without them.
- Supply partners who fulfil some orders — when an order is fulfilled by a partner, the name, phone number and delivery address on it go to that partner so they can deliver it.
- Other members — your name and photo next to your community posts, comments and reviews; and your name and phone number to the member who referred you.
- The companies that run our infrastructure, on our instructions and for no purpose of their own: Amazon Web Services stores the data (Asia Pacific, Singapore region) and runs photo search (Asia Pacific, Mumbai region); Google Firebase Cloud Messaging delivers push notifications; an SMS gateway delivers your one-time sign-in codes; bKash processes a wallet recharge if you choose to pay one that way.
Anything you post — a review, a community post or comment, and any photos on them — is visible to other users, alongside your name and profile picture. Please do not post anything you would not want others to see.
How it is protected
Everything travelling between your device and our servers is encrypted in transit (HTTPS and WSS). Uploaded photos and files are stored privately and shown through short-lived signed links. Access to the admin tools is restricted to staff accounts.
We sign you in with a one-time code sent by SMS, so there is no password of yours for anyone to steal or reuse.
Deleting your account
You can delete your account yourself from inside the app: open Profile, scroll to the bottom and tap Delete account. If you no longer have the app, use our account deletion page. Because FullStopBD holds money for you, an account can only be deleted once your wallet is empty, no withdrawal or recharge is waiting, no order is still on its way, and you do not run a shop — the app tells you which one applies.
Deleting removes your profile details, saved addresses, cart, wishlist, saved items and photos, support chat, notifications, push tokens, reviews, your community posts (with their comment threads) and comments, your reactions and poll votes, your reports and blocks, your activity record, and the photos and files you uploaded. This happens immediately and cannot be undone.
Some records are kept, without your personal details:
- Orders you already placed. Your name, phone number, WhatsApp number, email and street address are erased from them and replaced with a placeholder; the items, totals, status and delivery region remain, because we must keep accurate sales records for accounting and tax purposes.
- Your wallet ledger. The record of past earnings, recharges, transfers and withdrawals (with a zero balance) is kept as a financial record.
- Your place in the referral chain. People you referred keep their accounts, and their own referral chain keeps working. Your entry in it is kept only as an anonymous “Deleted account” with no name, phone, email or photo.
These remaining records are linked only to an internal account number that no longer leads to any personal details.
How long we keep things
While your account is open, we keep your data for as long as you use FullStopBD. When you delete your account, everything listed above goes at once, apart from the anonymised records just described. One-time codes expire within minutes, and sign-in sessions end on their own after at most seven days.
Children
FullStopBD is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the date at the top. Significant changes will also be announced in the app.
Questions about this page? Email support@fullstopbd.com.