Legal & Compliance
Privacy Policy
Last updated: March 4, 2026 · Quorso Tech
Important Notice
The PagePilot application is a business-to-business utility intended strictly for registered merchants and social-commerce sellers (Page Owners). It is not a consumer banking application and does not provide wallet, loan, or direct consumer financial services.
1. What Information We Process
A. MFS Transactional SMS (bKash, Nagad, Rocket)
The app requests SMS permissions solely to verify Mobile Financial Services (MFS) payment confirmations:
- Whitelisted Senders Only: Only incoming messages from recognized financial institutions are evaluated. Personal, banking, or non-MFS messages are completely filtered out.
- Fraud Check & Discard Rule: Data such as transaction timestamp and balance is used strictly in real-time to compute fraud checks. Once validated, this sensitive data is instantly discarded.
- Stored Information: We store only the transaction ID and the sender's reference phone number to reconcile orders against your catalogue.
- We do not use SMS data for advertising, nor do we sell or share SMS content with third parties.
B. Customer Delivery Information & Encryption
To automate orders for your shop, we record buyer-provided delivery details (recipient name, phone number, address):
- Zero-Knowledge Encryption: Customer details are encrypted at rest with industry-standard protocols.
- Merchant Ownership: You retain complete ownership of your customer lists. You may delete customer delivery information at any time.
- Decryption Access: Customer details are only decrypted when you view the order or when the customer interacts with your automated sales bot.
C. Technical & Diagnostic Information
We collect minimal diagnostic information (app version, device model, operating system version, sync status) to troubleshoot sync interruptions and maintain system stability.
2. Android System Permissions
Below is a comprehensive breakdown of the specific Android permissions PagePilot requires to function:
| Permission | Functional Purpose | Scope & Privacy Control |
|---|---|---|
| READ_SMS | Read MFS Transaction Messages | Strictly limited to whitelisted financial providers (e.g. bKash, Nagad, Rocket). Personal messages are never read or stored. |
| RECEIVE_SMS | Real-time Transaction Detection | Allows instant order confirmation when an incoming MFS payment SMS arrives. |
| INTERNET | Cloud Server Communication | Securely transmits verified transaction ID and sender info over encrypted HTTPS channels. |
| POST_NOTIFICATIONS | Status & Order Alerts | Displays background synchronization status and order notifications to the page owner. |
| READ_MEDIA_IMAGES | Catalogue & Product Uploads | Uploads only product images explicitly selected by the business owner. |
| FOREGROUND_SERVICE | Background Sync Reliability | Ensures payment SMS are captured promptly even when the phone is locked. |
| REQUEST_IGNORE_BATTERY_OPTIMIZATIONS | Prevent Android Background Killing | User-controlled option to maintain uninterrupted business sync. |
| RECEIVE_BOOT_COMPLETED | Service Auto-start on Reboot | Automatically restores background notification listeners when the device restarts. |
3. Data Retention & Deletion Policy
- Local Data Deletion: You can clear local SMS cached records directly in the app at any time. Local data is cleared immediately.
- Account Deletion (30-Day Grace Period): When you request account deletion, account data is held in a secure 30-day grace period to prevent accidental loss, after which all records and synced logs are permanently erased from our servers.
- Data Deletion Requests: To request complete deletion of your account and related data, email support@quorso.xyz.
4. Data Security & Storage
All data transmission between your devices and our servers is secured with TLS/HTTPS 256-bit encryption. Database clusters employ automated backups, role-based access restrictions, and continuous security auditing.
5. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the People's Republic of Bangladesh.
Contact Us
If you have questions regarding this Privacy Policy or data security practices, please contact our team:
Quorso Tech · Kumarkhali, Kushtia, Bangladesh