Privacy policy
What we hold, why we hold it, and the things we do not do with it.
Last updated 16 August 2026
What we collect from resellers
When you sign up we collect your name, business name, email, mobile number, address and — if you provide it — your GSTIN. We need these to create your account, raise correct invoices and contact you about your store.
When you pay we store the reference number of the transfer and the screenshot you upload. We never see or store your card details, UPI PIN or bank password — the transfer happens entirely inside your own bank or UPI app.
What we hold about your customers
When someone buys from your storefront, we store their name, email and what they bought, because the licensing system has to know who is entitled to what.
We do not market to them, sell their details, or contact them for any reason other than delivering their purchase. They are your customers.
How we keep it safe
Passwords are hashed and never stored in a form anyone can read, including us. Sessions expire quickly and can be revoked instantly. Product files are stored privately and reached only through short-lived signed links issued after a licence check.
Each store's data is separated at the database level, so one reseller can never see another's customers, orders or products.
Who else sees it
We use third parties for hosting, file storage and email delivery. They process data only to provide those services. We do not sell data to anyone, ever.
We disclose data only where the law requires it, and we will tell you when we are allowed to.
How long we keep it
Account and order records are kept while your store exists and for as long afterwards as tax law requires. Payment screenshots are kept as long as the transaction they prove.
Your rights
You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete your account. Deletion removes your personal data except records we are legally required to retain.
Write to [email protected] and we respond within seven working days.
Cookies
We use one cookie to keep you signed in. It is not used for advertising and is not shared. Clearing it signs you out — nothing else breaks.