Privacy Policy
How we collect, use, store, and protect your data. Written for India's DPDP Act 2023 with alignment to Amazon Ads Partner Network Policies.
- Last reviewed ·
- 26 April 2026
- Effective ·
- 26 April 2026
1. Introduction & identity
SellerSaarthi is a product of Shreesoftic, a sole proprietorship registered at 4th Floor, Shop No. 20, Shree Nilkanth Business Hub, Singanpore Causeway Road, opp. D-Mart, Katargam, Surat, Gujarat 395004, India.
Contact for all privacy matters: privacy@sellersaarthi.com.
2. Data we collect
(a) Data you provide — name, email, phone, GSTIN and business address supplied at signup or in-app.
(b) Amazon Data we access on your behalf — via the Amazon Ads API: campaign structure, keywords, search terms, ad spend, the orders and sales your ads brought, and the products (ASINs) you advertise, and a figure we compute from these each night: how much of your ad spend is recoverable. Via the Selling Partner API, only if you authorise it separately: your account's total orders and sales for each day, and the marketplaces your account sells in. We do not read your inventory, your individual orders or your buyers' details.
(c) Usage data — device, browser, session cookies, feature usage, including when you last opened the app, and each time you start connecting your Amazon account and whether that completed.
(d) Communications — the emails you send us, and the messages and button taps you send us on WhatsApp. We also keep a record of each email we send you (see Section 16).
3. How we use data
We use your data to operate the service, generate recommendations, run the product (anonymised or aggregated only), send transactional communications, and prevent security/fraud abuse.
We do not sell customer data. We do not use customer data for interest-based advertising. We do not train third-party AI models on your data without explicit written consent.
4. Legal bases (DPDP + GDPR-aligned)
- Your consent for data collection and processing.
- Contract performance for subscription-related processing.
- Legitimate interest for fraud prevention and security.
5. Data sharing with third parties (sub-processors)
| Processor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Primary infrastructure, storage, compute | ap-south-1 (Mumbai, India) |
| Razorpay | Subscription billing, GST invoicing | India |
| Resend | Transactional email | USA (account data, logs and email records); emails are sent from Resend's Tokyo region |
| WhatsApp Business Platform (Meta) | Daily message and replies | Meta's data centres, which may be outside India |
| Sentry | Error tracking, performance monitoring | USA |
| Clerk | Authentication | USA |
| Vercel | Hosting of sellersaarthi.com and app.sellersaarthi.com; page analytics on the marketing site (no cookie, no IP address stored) | USA (edge network worldwide; the Mumbai region for our deployments) |
Each processor is contractually bound to DPDP-aligned security and confidentiality standards. A current list is maintained in the Data Processing Addendum.
6. Amazon-specific clauses
- Amazon Data is handled per Amazon Ads Partner Network Policies.
- Amazon Data is deleted 30 days after you disconnect your Amazon account, or 30 days after you confirm deletion of your SellerSaarthi account, at the next nightly clean-up.
- Amazon Data is not combined with third-party data without Amazon's written approval.
- Access within SellerSaarthi is strictly on a need-to-know basis and role-limited.
7. International transfers
Primary storage is in AWS ap-south-1 (Mumbai, India). Backups are kept in the same region. Users outside India consent to transfer to India by using the service.
8. Retention (summary — see Section 16 below for the full schedule)
Your account data is kept while your account is open. Amazon Data on a disconnected account is deleted 30 days after the disconnection, at the next nightly clean-up. The record of changes made to your Amazon account, the WhatsApp messages between us, and our record of the emails we send you are kept as set out in Section 16.
9. Your rights under DPDP
You have the right to access, correct, erase, and port your data, and to seek grievance redressal through our Data Protection Officer. Write to privacy@sellersaarthi.com — we respond within 30 days per the DPDP requirement.
10. Cookies
See the separate Cookie Policy for categories and controls.
11. Children
The service is not intended for persons under 18. We do not knowingly collect children's data. If required under DPDP, we will implement a parental consent mechanism.
12. Security
AES-256 encryption at rest (AWS RDS + S3 SSE-KMS). TLS 1.2+ in transit. Access limited to the founding team on a need-to-know basis. Every change to your Amazon account is logged. Full details on the Security page.
13. Breach notification
Within 72 hours of a confirmed personal data breach, affected users are notified by email + in-app message, and the regulator is notified per DPDP timelines.
14. Changes
We give 30 days' notice of material changes to this policy via email and in-app banner.
15. Contact & Data Protection Officer
Data Protection Officer: Hiren Chheta (at MVP). Email: privacy@sellersaarthi.com. Postal: Shreesoftic, 4th Floor, Shop No. 20, Shree Nilkanth Business Hub, Singanpore Causeway Road, opp. D-Mart, Katargam, Surat, Gujarat 395004, India.
16. Data retention schedule (Section 47)
| Data type | Retention |
|---|---|
| Amazon Data | While your Amazon account is connected. Deleted 30 days after you disconnect it, or 30 days after you confirm deletion of your SellerSaarthi account, at the next nightly clean-up |
| Account data (name, email, billing) | While your account is open. Deleted from our database 30 days after you confirm deletion, at the next nightly clean-up. Cancelling a subscription does not delete your account |
| Financial records (invoices, GST) | 8 years (Indian tax law) |
| Record of changes made to your Amazon account | We keep the record of changes made to your Amazon account for as long as your account is open, because you can undo a change and review what was done at any time. When your account is deleted, this record is kept without your name, email, phone number or login. It still names the campaigns and searches that were changed. |
| WhatsApp messages | We keep a record of the WhatsApp messages we send you, and of the replies and taps you send us, for 12 months or until you delete your account, whichever is first, so that if you ever question a change, we can show what you approved and when. |
| Emails we send you | We keep a record of each email we send you: the address, its subject, its text, with the private part of each link removed, and whether our email provider accepted it. Each record is deleted 12 months after the email was sent, at the next nightly clean-up. This applies whether or not you have a SellerSaarthi account, including if you joined our waitlist or asked for a free audit. If you delete your account, the records of emails to your account's addresses are deleted with it, if that is sooner. To have them deleted earlier, write to privacy@sellersaarthi.com. |
| Emails you send us | Kept in our mailbox. We delete them if you ask |
| Backups | 14 days. Data deleted from the live database stays in backups until they expire, at most 14 days later |
To request deletion: self-serve in settings, or email privacy@sellersaarthi.com — your data is deleted 30 days after you confirm.
17. Effective date & version history
Effective date: 26 April 2026. This document replaces any previous privacy statements.
Revised 8 October 2026: removed references to team member emails and to an AI chat feature, because the product has neither and collects no such data; removed Anthropic from the sub-processor list, because no customer data is sent to it; named the email and WhatsApp providers exactly; added the WhatsApp messages you send us to the data we collect.
Revised 9 October 2026: corrected where Sentry, our error-tracking provider, stores data: the United States, not the EU as this table said before.
Revised 13 October 2026: corrected where Resend, our email provider, stores data: the United States, not the EU as this table said before. Our emails are sent from Resend's Tokyo region. Removed PostHog from the sub-processor list: we do not use it and no data has been sent to it. Replaced "India routing" for WhatsApp with what Meta's own documentation states. Stated how long we keep the record of changes made to your Amazon account and our WhatsApp messages, in place of "Audit logs: 2 years". Corrected the list of Amazon Data: we do not read inventory. Corrected the retention periods to what our systems do: removed "plus 90 days", "90 days post-cancellation" and "Support tickets: 2 years", which nothing enforced; said that deletion runs at the nightly clean-up after 30 days; said that backups stay in the same region and expire within 14 days.
Revised 17 October 2026: added Vercel to the sub-processor list. Vercel has hosted both sites since launch and the marketing site has carried Vercel Web Analytics since June 2026; the table did not name it. It sets no cookie and stores no IP address; what it holds is a daily hash it cannot reverse.
Revised 21 October 2026: added our record of the emails we send you, and how long we keep it: 12 months, whether or not you have an account.
Revised 26 October 2026: named two things we now keep, each under an existing heading: under Amazon Data, the figure we compute each night of how much of your ad spend is recoverable; under usage data, when you last opened the app, and each time you start connecting your Amazon account and whether that completed. Both are deleted with your account, as before.