Security
Your store's data is kept apart,and every change is on record.
Before you hand a platform your orders, your customers and your money, you should know how it treats them. This page says what Bazuva does, in plain words, and nothing it does not.
- A database per store
- Two-factor sign-in
- Roles and permissions
- An activity log
In short
Four things to know before you trust a platform with your shop.
Your data in its own database
Each store's products, orders and customers live in a database of their own, never mixed with another store's.
Sign-in that resists guessing
Two-factor codes, leaked passwords refused and an address paused after repeated wrong passwords.
Each person, only their job
Roles made of permissions decide what each member of your team can see and do.
Everything on record
Orders, refunds, settings and team changes are written to an activity log you can search.
Kept apart
Every store has a database of its own.
Many platforms keep every shop's orders in one shared table and rely on the code to keep them apart. Bazuva gives each store its own database. On every request, Bazuva checks who is signed in, that they belong to this store and that their role allows the action, before it reads a single row.
- One store's data never shares a table with another's
- A person is checked as a member of the store on every request
- A team member removed from the store loses access at once
- Several stores under one account still keep separate databases
Signing in
A stolen password is not enough to get in.
Turn on two-factor sign-in with an authenticator app, and keep recovery codes for the day the phone is lost. Passwords known from public leaks are refused. Ten wrong passwords in fifteen minutes pause the address, and the answer never tells a stranger whether an address has an account at all.
- Two-factor codes, each accepted only once
- Every open session listed by browser, with the power to end it
- A history of sign-ins, wrong passwords included
- Password resets that reveal nothing about who has an account
Your team
Give each person the permissions their job needs, and no more.
Every store starts with Owner, Manager and Staff, and you can make your own roles from a list of permissions: who may refund, who may confirm cash orders, who may change prices. A new permission is given to nobody until you add it to a role. Everything your team does is written to the activity log.
- Roles built from permissions, not from job titles
- Staff added by email, removed in one step
- An activity log searchable by person, event, record and date
- Vendors and their teams see only their own products, orders and money
Payments
Nothing moves until the payment gateway confirms the money.
When a buyer pays with bKash or a card, Bazuva asks the gateway itself whether the payment went through before the order is marked paid. Gateways often send the same notice more than once; each one is counted a single time. A refund or a payout button pressed twice does the work once.
- Payments confirmed with the gateway, not taken from the browser's word
- Repeated notices from a gateway or a courier counted once
- Refunds limited to what was actually paid
- Every payment, refund and cash collection in the store's ledger
Files and private documents
Uploads are checked by what they contain, not by their name.
A file called photo.jpg has to be a photo. Bazuva reads the content of every upload to decide what it is, refuses SVG images, which can carry hidden code, and keeps the original untouched while delivering resized copies. Documents that should stay private are kept out of the public library.
- Prescriptions stored encrypted and opened only through a logged link
- Vendors' NID, TIN and trade licence numbers encrypted and masked
- Payout account numbers decrypted only in the payout sheet
- Buyers' phone numbers masked in the cash-on-delivery queue until opened
Everything included
Protection that is on for every store from the first day.
Your data
- A database for every store
- Membership checked on every request
- Several stores, each with its own database
- Products, customers and stock exportable as sheets
Signing in
- Two-factor codes with recovery codes
- Leaked passwords refused
- Repeated wrong passwords pause the address
- Sessions listed and ended one by one or all at once
Your team
- Owner, Manager and Staff, plus roles of your own
- New permissions given to nobody until you choose
- Vendors limited to their own records
- Staff removed in one step
On record
- Orders, refunds, settings and roles in the activity log
- Filters by person, event, record and date
- Support's actions in your panel named in the log
- Every money movement in the store's ledger
Money
- Payments confirmed with the gateway
- Repeated notices counted once
- A button pressed twice charges or refunds once
- Secrets such as a mail server's password never shown again
Files and pages
- Uploads judged by their content
- SVG images refused
- Formatted text cleaned before it is saved
- Your own domain served only once verified
Questions about security
Can another store on Bazuva see my data?
No. Each store has a database of its own, and every request is checked against the store's own members before anything is read.
Can Bazuva's support team see inside my store?
When the platform's support acts in your account to help, the access lasts 60 minutes at most, a banner says so on every page, and the activity log records both the support person and the account. It cannot change your sign-in or two-factor settings.
What if someone learns my password?
With two-factor sign-in on, a password alone does not open your account. You can also see every open session and end any you do not recognise.
Can a staff member see everything?
Only if their role allows it. Each role is a list of permissions, so a packer can pack orders without seeing payments or changing prices.
Does Bazuva hold my money?
No. Buyers pay into your own bKash, SSLCommerz and courier accounts. Bazuva records the payments, refunds and cash collections in your store's books.
Your store is one sign-up away. Open it today.
Register, choose a design and add your first product. Cash on delivery, couriers and your buyers' language are ready when you are.
Your domain, your brand, no code to write.