Privacy Policy

1. Who we are

Exportain operates the marketplace at exportain.com and its portals from Dhaka, Bangladesh. Questions about this policy or your data: privacy@exportain.com.

2. What we collect

Information you give us:

• Account details: name, email address, phone number, password (stored hashed), role.
• Company profile: company name, type, country, city, registration number, description, main products, declared certifications.
• Verification submissions: trade licence, export registration, tax and incorporation numbers, factory location and photo, authorised contact details, production capacity and worker count, and the documents you upload.
• Trade activity: products you list, RFQs you post, quotations and counter-offers, orders, inquiries, messages with other users, freight quote and service requests.
• Contact form submissions, trust and safety reports, and newsletter sign-ups.

Information collected automatically:

• Server logs (IP address, request path, timestamp, user agent) for security and troubleshooting.
• Audit records of administrative actions taken on your account or submissions.

3. How we use it

• To operate your account and the marketplace features you use.
• To deliver your RFQs and inquiries to the suppliers they are addressed to or who may quote on them, and your service requests to the providers you choose.
• To review verification submissions and display the resulting level.
• To send transactional email: one-time codes, confirmations, quotation and message notices.
• To send the newsletter, only if you asked for it; every issue has an unsubscribe link.
• To investigate reports, prevent fraud and enforce the Terms of Use.

4. Who sees it

• Other users, to the extent you choose: a public company profile and listings are visible to anyone; an RFQ is visible to suppliers on the platform; an inquiry or message goes to the company you send it to.
• Service providers that process data for us: our hosting and content delivery provider (Cloudflare) and our transactional email provider (Resend). They act on our instructions.
• Only if you accept analytics and marketing cookies: Google, through Google Tag Manager, and the analytics and advertising-measurement tools loaded through it, as described in the Cookie Policy.
• Authorities, where the law requires it.

We do not sell personal data. Analytics and advertising-measurement tags run only after you accept them on the cookie notice, and never inside the signed-in dashboards.

5. Storage and security

• Connections to Exportain use TLS.
• Documents you upload for verification are stored in private storage and are served only through short-lived signed links after an authorisation check. They are never placed at a public URL.
• Passwords are stored as one-way hashes.
• Administrative access is role-based and administrative actions are logged.

6. Retention

We keep account and profile data while your account is open. RFQ, quotation, order and message records may be kept after an account is closed as records of the trade they relate to. Verification documents are kept while the verification they support is in effect. Server logs are kept for a limited period for security purposes.

7. Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where we have no continuing need to keep it. Write to privacy@exportain.com from the email address on your account.

8. Cookies and browser storage

See the Cookie Policy.

9. Changes

We may update this policy. The date at the top records the current version; material changes are notified to account holders by email.