Your Privacy Matters
to Hushburg

Hushburg is an online marketplace based in Chittagong, Bangladesh, registered under Trade License No. 120923, Chittagong City Corporation. We have been operating since 2018 and offer escrow-protected shopping, live Highest Unique Bid auctions, HBT in-app currency, seller panels, and digital services through our Android app and website.

This Privacy Policy applies to all users of the Hushburg platform including buyers, sellers, auction participants, and visitors to hushburg.com. By using Hushburg, you agree to the practices described in this policy.

We only collect data that is necessary to operate the platform, process your transactions, and keep your account secure. Here is a clear breakdown:

We do not use your data for advertising on behalf of third parties and we do not sell your personal information to anyone.

We work with trusted third-party providers to operate the platform. Each provider only receives the data they need to perform their specific service.

The Hushburg wallet holds real BDT and is used exclusively for in-platform activity. Here is how your financial data is handled:

• Top-up transactions are processed by SSLCommerz or NowPayments. Hushburg receives only a confirmation of successful payment and the credited amount. We never see your card number, banking PIN, or crypto private key.
• Withdrawal account details (bKash number, bank account number and branch) are stored securely and used only to process your withdrawal requests. This information is not shared with anyone other than the relevant payment provider processing your withdrawal.
• Transaction history is stored in your account and visible only to you and Hushburg administrators for support, audit, and compliance purposes.
• Auction Call Security deposit and refund records are maintained for the lifetime of your account for transparency and dispute resolution.
• Top-up amounts are non-refundable to the original payment source once credited. This is clearly stated at the point of purchase.

If you choose to top up using NowPayments (cryptocurrency), additional data considerations apply:

• Your crypto wallet address and the transaction details are processed by NowPayments, not by Hushburg. Their own privacy policy governs how they handle this data.
• Hushburg receives only the order confirmation and BDT equivalent to credit to your shopping wallet.
• Blockchain transactions are publicly visible on their respective networks by nature. This is inherent to how blockchain technology works and is outside Hushburg's control.
• Users in Bangladesh and Saudi Arabia who enable crypto payments do so under their own responsibility after accepting the crypto payment agreement, as crypto transactions are not officially encouraged in those regions due to local regulations.

Hushburg uses industry-standard security practices to protect your personal data. These include:

• SSL encryption on all data transmitted between your device and our servers.
• Secure server infrastructure with access controls limiting who can view user data.
• Payment credential isolation — card details and banking PINs are never transmitted to or stored by Hushburg.
• Regular security reviews of our platform, payment integrations, and data handling procedures.
• Account-level audit logging to detect and investigate suspicious activity.

We keep your data only for as long as it is needed for the purposes described in this policy or as required by law.

• Active account data is retained for as long as your account is active.
• Transaction and wallet records are retained for a minimum of 5 years to comply with financial recordkeeping standards and to support dispute resolution.
• Auction history is retained indefinitely as part of the transparent, open auction record system.
• Deleted accounts — when you request account deletion, your personal identifiers are removed within 30 days. Transaction records may be retained in anonymised form for compliance purposes.
• Support communications are retained for 2 years to support ongoing or future disputes.

You have clear rights over your personal data. Here is what you can request at any time:

The Hushburg platform is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13 without verified parental consent.

If you believe a child under 13 has created an account or provided personal information through our platform, please contact us immediately at [email protected]. We will investigate and remove the account and associated data promptly.

The Hushburg Android app and website may use lightweight analytics tools to understand how users interact with the platform. This helps us fix bugs and improve the experience.

• App analytics may collect anonymous usage data such as which screens are visited, how long sessions last, and where errors occur. This data does not identify you personally.
• Web cookies on hushburg.com are used for session management (keeping you logged in) and basic analytics. We do not use third-party advertising cookies.
• SMS and push notifications are sent for order updates, auction alerts, and refund confirmations. You can manage push notification preferences within the app settings.
• We do not track your location in real time and we do not use GPS data for advertising.

We may update this Privacy Policy from time to time as our platform evolves or to reflect changes in applicable law. When we make changes, the "Last Updated" date at the top of this page will be revised.

• Your continued use of Hushburg after any update constitutes acceptance of the revised policy.
• For material changes affecting your rights or how we handle sensitive data, we will notify registered users via push notification or in-app alert before the change takes effect where reasonably possible.
• We encourage you to review this policy periodically at hushburg.com/bd/privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us. We are committed to responding promptly and transparently.

For data deletion or access requests, email us with the subject line "Privacy Request — [Your Registered Email]". We will respond within 14 business days.