Privacy Policy
Effective Date: October 2, 2026 | Last Updated: October 30, 2026
NAYKO ("we", "our", or "us"), operating under the web domain nayko.app, is dedicated to safeguarding customer privacy and securing personal data. This Privacy Policy outlines how we collect, process, safeguard, and delete personal data across our storefront, order management systems, and third-party integrations (including Google Identity and Meta Platform services).
1. Information We Collect
To operate our e-commerce platform and deliver purchases safely, we collect:
- Customer Identity & Contact Information: Full name, verified mobile phone number, email address, and doorstep delivery street address (city, district, postal zone).
- Order Details: Item selections, garment sizes, variant specifications, item quantities, total amount in Bangladeshi Taka (৳ BDT), payment status, and courier tracking identifiers.
- Technical & Session Identifiers: IP address, device type, browser user-agent, operating system, and essential authentication cookies required to maintain shopping bag contents.
- Support Records: Inquiries submitted via email, contact form submissions, and customer service chats.
2. Social Sign-In & OAuth Authentication (Google & Meta)
We offer seamless Single Sign-On (SSO) login options via Google Identity Services and Meta (Facebook) Login so you can log into your NAYKO account without managing separate passwords:
Google Sign-In Scopes & Purpose
When you sign in with Google, NAYKO requests access only to basic profile data: your full name, primary email address, and profile picture (OAuth scopes: openid, email, profile). We do NOT request access to Google Drive files, Gmail messages, contacts, or calendars.
You can revoke NAYKO's access to your Google account at any time through Google Account Permissions.
Meta (Facebook) Login Scopes & Purpose
When you authenticate via Facebook, we access only your public profile (name, avatar) and email address (permissions: public_profile, email). We never request permission to publish on your behalf, view your friend list, or read your private messages.
Google API Services User Data Policy Compliance
NAYKO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Information received from Google APIs is used strictly to provide and improve customer identity services. It is not transferred to data brokers, advertising networks, or used for automated credit scoring.
3. Facebook / Meta User Data Deletion Instructions
In compliance with Meta Platform Terms, NAYKO provides transparent instructions for users wishing to delete their data or remove the NAYKO application from their Facebook profile:
Option 1: Remove NAYKO from your Facebook Settings
- Go to your Facebook profile and open Settings & Privacy > Settings.
- In the left sidebar or settings menu, click on Apps and Websites.
- Locate NAYKO in the active applications list.
- Click Remove to revoke authorization and unlink your account.
Option 2: Direct Server Data Erasure Request
To request the permanent deletion of your customer profile, email address, order records, and stored identifiers from our production database:
- Email our Data Protection Desk at support@nayko.app with the subject line
"User Data Deletion Request". - State your registered email address or Member ID (e.g.,
NK-XXXXXX).
Our technical team will confirm your request and permanently erase your account data within 48 hours, issuing an official confirmation code.
4. Marketing Analytics & Advertising Measurement
Our storefront uses standard measurement tools to understand how visitors engage with our merchandise:
- Standard events recorded include:
PageView,ViewContent,AddToCart,InitiateCheckout, andPurchase. - This data allows us to measure advertising effectiveness and prevent showing you repetitive ads on Facebook and Instagram.
- You can manage your advertising choices or opt out of interest-based ads via Facebook Ad Preferences.
5. Third-Party Service Providers & Logistics Partners
We share minimal necessary data strictly to fulfill commercial orders:
- Domestic Courier Partners (Steadfast, Pathao, RedX): Shared customer name, delivery address, and phone number for parcel handover and COD cash collection across all 64 districts of Bangladesh.
- Fulfillment & Dropshipping Partners (CJ Dropshipping): Shared ordered items and masked shipping destination for international dropship dispatch.
- Payment Gateways (bKash, Nagad): Direct mobile transactions operate on official gateway security rails. NAYKO never stores customer banking PINs or CVVs.
6. Data Security, Encryption & Storage Architecture
All network interactions with NAYKO are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS). Database storage is maintained on secure, encrypted cloud infrastructure with strict least-privilege security controls and continuous vulnerability audits.
7. Customer Rights & Contact Details
You have the absolute right to access your customer records, correct inaccurate data, request data portability, or demand complete account erasure. For any privacy requests or inquiries: