Legal

Privacy policy

Last updated: February 21, 2026

This Privacy Policy explains how SellerPapa™ ("SellerPapa", "we", "us") collects, uses, and safeguards your information when you use our AI-native Commerce Operating System (the "Service"). By using the Service you agree to this policy.

1. Information we collect

  • Account data — name, email, role, company name, phone number (optional).
  • Marketplace credentials — API keys, OAuth tokens, seller IDs. These are stored encrypted at rest using AES-derived Fernet symmetric encryption; only redacted forms are ever returned by our API.
  • Operational data — orders, inventory, claims, dispatches, settlements and other commerce records synced from your connected marketplaces.
  • Usage data — pages viewed, features used, timestamps, IP address, browser/device metadata.
  • Support & communication — messages you send to us (email, WhatsApp, in-app).

2. How we use your information

  • Provide, operate, and improve the Service (order sync, TrueProfit calculations, reconciliation, AI Copilot, notifications).
  • Send transactional and operational alerts you opt into (email, WhatsApp).
  • Detect fraud, abuse and violations of our Terms.
  • Comply with legal obligations under applicable Indian and international laws.

3. Sharing & processors

We do not sell your data. We share limited data with sub-processors strictly to run the Service:

  • Cloud infrastructure — hosting provider running FastAPI, MongoDB, and object storage.
  • AI providers — Anthropic (Claude Sonnet 4.5) for the Copilot; we send a minimal, purpose-limited JSON snapshot of your dashboard state per query.
  • Communication providers — Resend (email), Twilio (WhatsApp) for alerts, when configured.
  • Payment processors — Stripe / Razorpay for billing, when applicable.

4. Data retention

We retain your data while your account is active. On deletion we purge personal data within 90 days, except records we are required to keep for legal, accounting, or dispute-resolution purposes.

5. Security

We use industry-standard controls: encryption in transit (TLS 1.2+), encryption at rest for credentials, httpOnly session cookies, role-based access, and audit logging on admin actions. No system is 100% secure — please use a strong password and enable social-login where possible.

6. Your rights

Subject to Indian data-protection law (DPDP Act 2023) and any other applicable law, you may request access, correction, deletion, or export of your personal data by emailing us at hello@sellerpapa.com. We respond within 30 days.

7. Children

The Service is not intended for individuals under 18. We do not knowingly collect data from minors.

8. Changes

We may update this policy from time to time. Material changes will be announced in-app and by email at least 15 days before they take effect.

9. Contact

Questions? Reach us at hello@sellerpapa.com or +91 97399 59565.