Account & Security Policy

Creating an account on GrowCartBD grants you access to an encrypted digital key vault, minor-unit financial ledger, and order history tracking. You are required to:

• Choose a strong, unique password consisting of at least 8 characters with a mix of uppercase letters, numbers, and symbols. • Maintain a secure, accessible email address for password resets and order notifications. • Never use shared or public email inboxes for your account credentials.

GrowCartBD implements permanent country region locking:

• Upon registration, your selected region (Bangladesh, India, or International) is permanently bound to your user UID. • This ensures gateway routing security, prevents currency exchange exploitation, and complies with financial anti-money laundering (AML) frameworks. • Legitimate region change requests (e.g. permanent relocation) require administrative review via /account/settings.

• Change Password: You can change your password at any time via /account/settings. • Forgot Password: If you lose access to your password, use our secure reset portal at /forgot-password to receive an encrypted reset link via email. • Reset Token Validity: Password reset tokens expire within 1 hour and can only be used once.

• Digital license keys stored under My Keys are encrypted using AES-256-GCM. • Never share your private panel key on public forums, Discord servers, or YouTube live chats. • Any key detected running on unauthorized simultaneous hardware will be terminated by automated anti-piracy algorithms.

• Multiple consecutive failed login attempts will trigger a temporary IP lockout to protect against brute force attacks. • If our system detects simultaneous logins from geographically distant IP addresses, account access may be restricted pending email verification.