1. Who we are
Import Assistant is operated by Marketsync Global Ltd. (Reg. No. RAJC-2483/2025), Kashidanga City Gate, Rajpara, Rajshahi-6201, Bangladesh. Contact: mail@sojibahmmed.com.
2. Data we collect
- Account data: name, email, phone, organization, role.
- Operational data: RFQs, quotations, POs, shipments, invoices and related documents you upload or generate on the platform.
- Communications: messages, comments and voice-call transcripts when you use the AI voice widget (see Voice Calls section).
- Technical data: IP address, browser, device, session logs, error reports for security and reliability.
3. Lawful basis
We process personal data on the basis of contract (delivering the service), legitimate interest (security, fraud prevention, product improvement) or explicit consent (marketing, optional analytics).
4. How we use data
- To run the platform and your organization's workflows.
- To operate cross-border logistics with your counterparties (suppliers, forwarders, customs agents, banks).
- To secure the platform, prevent abuse and comply with legal obligations.
- To communicate service updates and, with consent, product news.
5. Sharing
We share data only with (a) your counterparties as required to execute a transaction, (b) sub-processors listed below, and (c) authorities where required by law. We do not sell personal data.
6. Sub-processors
- Supabase (database, authentication) — application data.
- Resend — transactional email delivery.
- Vapi — real-time voice agent, when you initiate a call.
- Firecrawl — supplier / catalogue content ingestion.
- Cloudflare — edge hosting, CDN and DDoS protection.
7. Voice calls
When you start a call from the voice widget we record and store the call transcript in your organization's audit trail for review and dispute resolution. See Security for controls.
8. Retention
Operational records are retained for the duration of your subscription plus 7 years for accounting and customs record-keeping obligations. Marketing data is retained until you unsubscribe.
9. Your rights
Access, correction, deletion, portability and objection. Email mail@sojibahmmed.com to exercise any right. We respond within 30 days.
10. Security
Row-Level Security on every tenant table, encrypted transport (TLS 1.2+), encrypted storage at rest, tamper-evident activity log, and role-based access control. See Security.
11. International transfers
Data may be processed outside Bangladesh (primarily EU, US and Singapore for infrastructure providers). We rely on standard contractual clauses and vendor DPAs for these transfers.
12. Changes
We may update this policy. Material changes are notified by email at least 14 days before they take effect.