Privacy Policy

Last updated 30 October 2026. Sellify is in public beta.

This policy explains how Debayan Ghosh (“Sellify”) handles personal data under India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Two roles

• Merchants, staff and developers: we decide how your account data is used, so we are its data fiduciary.
• Shoppers of Sellify stores: each store decides how its customers' data is used. We process it on the store's behalf, only to run the store. Contact the store for requests about your data; we will help it respond.

2. What we collect

• Account details: name, email, password (stored only as a one-way hash), and Google account ID if you sign in with Google.
• Store data you add: products, orders, customers, settings and content.
• Technical data: IP address, device and browser details, and logs needed for security and to fix problems.
• Storefront analytics: page views and shopping events, tied to a random session ID, not to a name.

3. Why we use it

To provide and secure the service, send you account and transactional emails (sign-in, password reset, order updates), prevent fraud and abuse, comply with law, and improve Sellify. We do not sell personal data and do not use shoppers' data for our own advertising.

4. Who we share it with

Service providers that run Sellify for us — hosting (Vercel), database (Layerbase), email delivery (Brevo), and Google for sign-in — under contracts that limit their use; payment providers and apps that a merchant connects; and authorities when the law requires it.

5. Keeping and deleting data

We keep data while your account is active and as needed for legal obligations (for example logs for at least 180 days as required by CERT-In directions). When you close your account we delete or anonymise your data within 90 days, unless the law requires us to keep it.

6. Security

Data is encrypted in transit; passwords and access tokens are hashed; payment and email credentials are encrypted at rest; access is limited to people who need it. If a breach affects you, we will tell you and the Data Protection Board of India as the law requires.

7. Your rights

You can ask to access, correct or erase your data, withdraw consent, and nominate someone to act for you. Write to debayanghosh408@gmail.com; we reply within 30 days. If you are not satisfied, contact our Grievance Officer, and then the Data Protection Board of India.

8. Cookies

The admin uses essential cookies to keep you signed in. Stores may use analytics and marketing cookies, which they control through their cookie banner.