Safeguarding Enterprise Trade with Structural Privacy
Mohajon's privacy architecture guarantees structural buyer-seller identity isolation, mediated order fulfillment, and military-grade document vaulting for modern B2B wholesale trade.
Enterprise Trust Privacy Pillars
Four architectural principles that safeguard your trade operations on Mohajon
Structural Identity Isolation
Sellers receive fulfillment tickets containing SKUs and quantities only. Buyer names, phone numbers, and addresses are never exposed to sellers.
Mediated Trade & Sales Managers
Order confirmations and payment receipt reviews are handled exclusively by dedicated Mohajon Sales Managers through secured internal portals.
Encrypted Document Vaulting
KYC certificates and bank payment deposit receipts are stored in private Google Drive infrastructure, accessible only via permission-checked API routes.
Database-Level RLS Security
Postgres Row-Level Security (RLS) is enforced at the database kernel level, rendering data leaks mathematically impossible even with raw credentials.
Table of Contents
Governance & Compliance
For formal privacy requests, identity queries, or compliance audits, contact our dedicated governance desk.
Which Role Applies to Me?
We Act as Data Controller
We determine the purposes and means of processing for:
- Website visitors (mohajon.com)
- Registered account holders (buyers, sellers, sales managers)
- Newsletter subscribers
- Seller applicants submitting KYC information
We Act as Processor / Service Provider
When business customers (seller entities) upload data to the platform for their own purposes — such as product catalog data — we process that data on their instructions. This relationship is governed by our DPA.
Definitions
Personal Data
Any information that identifies or could identify a natural person, directly or indirectly — including name, email address, phone number, trade license number, IP address, and device identifiers.
Customer Data
Data that a seller entity or buyer entity submits to the platform in the course of using the Services, including product listings, uploaded certification documents, and payment receipt images. Mohajon processes this data as a service provider; the uploading business is the controller.
Services
The Mohajon B2B wholesale marketplace platform, including the buyer portal, seller portal, sales manager portal, admin portal, public catalog, blog, and newsletter, accessible at mohajon.com.
What Information We Collect
We collect only the information necessary to operate legitimate B2B trade, verify identities, and keep the platform secure.
a. Information You Provide Directly
| Category | Fields Collected | Purpose |
|---|---|---|
| Account Registration | Phone number (OTP-verified, used for login), email address, full name, password (hashed by Clerk) | Identity verification & authentication |
| Basic Business Profile | Business name, business type (retail shop / dealer / distributor), business contact phone, business address, district, trade license number (optional) | Buyer onboarding & B2B trade eligibility |
| Seller Application KYC | Registered business name, business license number, tax/TIN number, website (optional), factory address, district, postal code, primary product category, production capacity, year established, certification documents (uploaded files) | Manufacturer accreditation review by admin |
| Payment Receipts | 10% advance deposit receipt (file + claimed amount + payment method), final balance receipt (file + claimed amount + payment method). No payment card or bank account number is ever collected. | Manual receipt review by Sales Manager to confirm / complete orders |
| Newsletter Subscription | Email address, name, subscription source (signup / public form) | Newsletter delivery; unsubscribe managed in Settings or via email link |
| Support Communications | Messages sent to privacy@mohajon.com or via in-platform enquiries | Responding to enquiries and resolving disputes |
b. Automatically Collected Data
- Server request logs: IP address, HTTP method, URL path, response code, timestamp
- Browser/device information: user-agent string, screen resolution (via standard web server headers — no fingerprinting library is used)
- Usage events inside authenticated portals: pages visited, actions taken, timestamps
- Session tokens (managed by Clerk; stored in HttpOnly cookies)
c. Payment Information
d. Third-Party Integrations & Data Enrichment
How We Use Personal Data
Service Delivery
Operating the marketplace: processing orders, managing fulfillment tickets, routing payment receipts to Sales Managers for review, managing seller applications.
Authentication & Security
Verifying identity at login (via Clerk OTP and password), enforcing role-based access controls (RBAC), preventing fraudulent account creation, and logging actions for audit purposes.
Support & Dispute Resolution
Responding to enquiries submitted to privacy@mohajon.com; reviewing payment receipt evidence in order disputes.
Legal Compliance
Complying with applicable Bangladeshi law; responding to lawful requests from courts or government authorities; maintaining records required by regulation.
Newsletter & Communications
Sending industry news and platform updates to subscribers (via Resend). All subscribers can unsubscribe at any time from Settings or via the signed unsubscribe link in every email. Transactional emails (order confirmations, payment status updates) cannot be disabled as they are essential to the service.
Platform Improvement
Analysing aggregated, anonymised usage patterns to improve user experience. Individual user behaviour is not sold or shared with advertisers.
Mohajon does not use personal data, Customer Data, or payment receipt data to train artificial intelligence or machine learning models.
Structural Buyer–Seller Identity Isolation
On Mohajon, buyers and sellers never see each other's personal identity, contact information, or business details. This isolation is enforced structurally at the database schema level — not merely by hiding a field in the user interface.
Fulfillment ticket ID, product SKUs, quantities, and logistics status.
Buyer name, phone number, business address, trade license, or any identifying information.
Security & Data Retention
a. Security Measures
After Account Termination
Following an account closure or deletion request, we will delete or anonymise personal data, but may retain records within the applicable retention period for legal compliance, audit trail, or dispute resolution purposes.
Your Privacy Rights & Choices
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate personal data. Most profile data can be updated directly in Settings.
Deletion
Request deletion of your personal data, subject to legal retention requirements.
Portability
Request a structured, machine-readable copy of data you provided to us.
Objection / Restriction
Object to or request restriction of processing based on legitimate interests.
Withdraw Consent
Withdraw newsletter consent at any time via Settings → Notification Preferences or the unsubscribe link in any email.
Important Notes
- Transactional emails (order confirmations, payment status updates) cannot be disabled as they are essential to the service.
- Mohajon cannot unsubscribe individuals from our seller customers' communications — contact the seller directly.
- If you wish to lodge a complaint with a supervisory authority, contact your local data protection authority.
Children's Privacy
Mohajon is a B2B trade platform not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
If you believe a minor's data has been collected in error, contact privacy@mohajon.com and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do:
Contact Us
For any questions, requests, or complaints about this Privacy Policy or your personal data:
Privacy Desk
privacy@mohajon.comResponse time
Within 30 days
Identity check
Required before release
Languages
English · বাংলা