Privacy Policy
How we collect, use, store, and protect your data. Written for India's DPDP Act 2023 with alignment to Amazon Ads Partner Network Policies.
- Last reviewed ·
- 26 April 2026
- Effective ·
- 26 April 2026
1. Introduction & identity
SellerSaarthi is a product of Shreesoftic, a sole proprietorship registered at 4th floor, 20, Shree Nilkanth Business Hub, Causeway Rd, opp. D-Mart, Katargam, Surat, Gujarat 395004, India.
Contact for all privacy matters: privacy@sellersaarthi.com.
2. Data we collect
(a) Data you provide — name, email, phone, GSTIN, business address, and team member emails supplied at signup or in-app.
(b) Amazon Data we access on your behalf — via the Amazon Ads API and Selling Partner API: campaign structure, keywords, search terms, ad spend, orders, sales, ASINs, and inventory.
(c) Usage data — device, browser, session cookies, feature usage.
(d) Communications — support tickets, chat conversations with the product.
3. How we use data
We use your data to operate the service, generate recommendations, run the product (anonymised or aggregated only), send transactional communications, and prevent security/fraud abuse.
We do not sell customer data. We do not use customer data for interest-based advertising. We do not train third-party AI models on your data without explicit written consent.
4. Legal bases (DPDP + GDPR-aligned)
- Your consent for data collection and processing.
- Contract performance for subscription-related processing.
- Legitimate interest for fraud prevention and security.
5. Data sharing with third parties (sub-processors)
| Processor | Purpose | Location | | --- | --- | --- | | Amazon Web Services (AWS) | Primary infrastructure, storage, compute | ap-south-1 (Mumbai, India) | | Razorpay | Subscription billing, GST invoicing | India | | Anthropic | LLM-powered chat with zero-retention agreement | USA / EU | | Resend or Postmark | Transactional email | EU | | WhatsApp Business (Meta, via BSP) | Digest + alerts | India routing | | Sentry | Error tracking, performance monitoring | EU | | Clerk | Authentication | USA | | PostHog | Product analytics | EU |
Each processor is contractually bound to DPDP-aligned security and confidentiality standards. A current list is maintained in the Data Processing Addendum.
6. Amazon-specific clauses
- Amazon Data is handled per Amazon Ads Partner Network Policies.
- Amazon Data is deleted within 30 days of account disconnection or termination.
- Amazon Data is not combined with third-party data without Amazon's written approval.
- Access within SellerSaarthi is strictly on a need-to-know basis and role-limited.
7. International transfers
Primary storage is in AWS ap-south-1 (Mumbai, India). Backups may transit to other AWS regions under standard contractual safeguards. Users outside India consent to transfer to India by using the service.
8. Retention (summary — see Section 16 below for the full schedule)
Active-account data is retained while the account is active plus 90 days. Amazon Data on disconnected accounts is purged within 30 days. Log and audit data is retained for 2 years for security purposes, as permitted under DPDP.
9. Your rights under DPDP
You have the right to access, correct, erase, and port your data, and to seek grievance redressal through our Data Protection Officer. Write to privacy@sellersaarthi.com — we respond within 30 days per the DPDP requirement.
10. Cookies
See the separate Cookie Policy for categories and controls.
11. Children
The service is not intended for persons under 18. We do not knowingly collect children's data. If required under DPDP, we will implement a parental consent mechanism.
12. Security
AES-256 encryption at rest (AWS RDS + S3 SSE-KMS). TLS 1.2+ in transit. Role-based access control. Audit logging. Full details on the Security page.
13. Breach notification
Within 72 hours of a confirmed personal data breach, affected users are notified by email + in-app message, and the regulator is notified per DPDP timelines.
14. Changes
We give 30 days' notice of material changes to this policy via email and in-app banner.
15. Contact & Data Protection Officer
Data Protection Officer: Hiren Chheta (at MVP). Email: privacy@sellersaarthi.com. Postal: Shreesoftic, 4th floor, 20, Shree Nilkanth Business Hub, Causeway Rd, opp. D-Mart, Katargam, Surat, Gujarat 395004, India.
16. Data retention schedule (Section 47)
| Data type | Retention | | --- | --- | | Amazon Data | While account active; purged within 30 days of disconnection or termination | | Account data (name, email, billing) | 90 days post-cancellation for reactivation, then deleted | | Financial records (invoices, GST) | 8 years (Indian tax law) | | Audit logs | 2 years for security investigation | | Support tickets | 2 years | | Chat conversations with AI | 90 days; user can delete at will via settings | | Backups | 14 days; deletion from backups on next cycle after primary deletion |
To request deletion: self-serve in settings, or email privacy@sellersaarthi.com — 30-day completion SLA.
17. Effective date & version history
Effective date: 26 April 2026. This document replaces any previous privacy statements.