Privacy Policy

1. Who we are

Exportain operates the marketplace at exportain.com and its portals from Dhaka, Bangladesh. Questions about this policy or your data: privacy@exportain.com.

2. What we collect

Information you give us:

• Account details: name, email address, phone number, password (stored hashed), role.
• Company profile: company name, type, country, city, registration number, description, main products, declared certifications.
• Verification submissions: trade licence, export registration, tax and incorporation numbers, factory location and photo, authorised contact details, production capacity and worker count, and the documents you upload.
• Trade activity: products you list, RFQs you post, quotations and counter-offers, orders, inquiries, messages with other users, freight quote and service requests.
• Contact form submissions, trust and safety reports, and newsletter sign-ups.
• Your cart, if you are signed in as a buyer: the products, options, loading ports and quantities you add are saved to your account until you send them or empty the cart, so the cart opens on your other devices and so we can send the weekly cart reminder, which you can switch off.

Information collected automatically:

• Server logs (IP address, request path, timestamp, user agent) for security and troubleshooting.
• Audit records of administrative actions taken on your account or submissions.
• Your activity on the marketplace, used for product recommendations: the searches you run (the words and the category filter), the product and category pages you open, and the products you save, send an inquiry about or post an RFQ for, each with the time. While you are signed in it is linked to your account, unless you turn off Personalized recommendations in your portal settings; when you are signed in to your buyer, seller or provider account, exportain.com recognises it automatically in the same browser, and signing out there signs you out here too. While you are signed out it is recorded only if you allow analytics cookies, under a random identifier kept in the exportain_vid cookie. It never includes your IP address, browser or device details.

3. How we use it

• To operate your account and the marketplace features you use.
• To deliver your RFQs and inquiries to the suppliers they are addressed to or who may quote on them, and your service requests to the providers you choose.
• To review verification submissions and display the resulting level.
• To send transactional email: one-time codes, confirmations, quotation and message notices.
• To send the newsletter, only if you asked for it; every issue has an unsubscribe link.
• To suggest products related to what you searched for and viewed: “Picked for you”, “Recently viewed” and “Because you viewed” on the marketplace, and — only if you turn it on — a weekly email. The suggestions come from fixed rules applied to your own activity. They never change prices or search results, and “Similar products” on a product page are the same for everyone. “People who viewed this also viewed” is worked out from counts of product views across at least 3 different people; it stores and shows no one's identity. Your choices are on the email and privacy choices page.
• To email you, at most once a week, products related to your recent searches and the categories you looked at, only if you turn this on; every email has a link that turns it off.
• To investigate reports, prevent fraud and enforce the Terms of Use.

4. Who sees it

• Other users, to the extent you choose: a public company profile and listings are visible to anyone; an RFQ is visible to suppliers on the platform; an inquiry or message goes to the company you send it to.
• Service providers that process data for us: our hosting and content delivery provider (Cloudflare) and our transactional email provider (Resend). They act on our instructions.
• Only if you allow marketing cookies: Meta (the Meta Pixel and Conversions API, to measure our ads — hashed identifiers only, never your messages or documents) and Google, through Google Tag Manager, as described in the Cookie Policy.
• Authorities, where the law requires it.

We do not sell personal data. Analytics and advertising-measurement tools run only after you allow them on the cookie notice. Google Tag Manager never runs inside the signed-in dashboards; the Meta Pixel runs there only in a reduced mode that does not read page content.

5. Storage and security

• Connections to Exportain use TLS.
• Documents you upload for verification are stored in private storage and are served only through short-lived signed links after an authorisation check. They are never placed at a public URL.
• Passwords are stored as one-way hashes.
• Administrative access is role-based and administrative actions are logged.

6. Retention

We keep account and profile data while your account is open. RFQ, quotation, order and message records may be kept after an account is closed as records of the trade they relate to. Verification documents are kept while the verification they support is in effect. Server logs are kept for a limited period for security purposes. Your marketplace activity used for recommendations is deleted after 90 days. You can delete it sooner with “Clear my browsing history” in your portal settings, or for a signed-out browser on the email and privacy choices page.

7. Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where we have no continuing need to keep it. Write to privacy@exportain.com from the email address on your account.

8. Cookies and browser storage

See the Cookie Policy.

9. Changes

We may update this policy. The date at the top records the current version; material changes are notified to account holders by email.