Privacy Policy

Account Information

When you create an account, we collect your name, email address, phone number, and password (stored encrypted). For vendors, we also collect shop name, description, logo, banner image, and business contact details.

Product Information

Vendors upload product names, descriptions, prices, images, and categories. This information is publicly visible on your storefront.

Payment Information

Subscription payments are processed securely through Razorpay. We do not store your credit card or bank account details — Razorpay handles all payment data under PCI-DSS compliance.

Usage Data

We collect analytics data including pages visited, features used, browser type, device type, and IP address to improve our platform. We use Microsoft Clarity for session analytics.

Cookies

We use essential cookies for authentication (login sessions) and preference storage (theme settings). We do not use third-party advertising cookies.

To create and manage your account and storefront

To display your products and shop information to potential customers

To process subscription payments via Razorpay

To send important updates about your account and subscription status

To provide customer support via WhatsApp and email

To improve our platform based on usage analytics

To detect and prevent fraudulent or abusive activity

Public Information

Your shop name, description, logo, banner, products, contact details (phone, WhatsApp, email), and social links are publicly visible on your storefront. This is the core function of the platform.

Service Providers

We share data with trusted third-party services: AWS S3 (image storage), Razorpay (payment processing), Microsoft Clarity (analytics), and MongoDB Atlas (database hosting). Each provider has their own privacy policy.

We Never Sell Your Data

We do not sell, rent, or trade your personal information to any third party for advertising or marketing purposes.

All data is stored securely on MongoDB Atlas (cloud database) with encryption at rest.

Images are stored on Amazon Web Services (AWS S3) in the EU-North-1 region.

Passwords are hashed using bcrypt — we cannot read your password.

Authentication uses JWT tokens with short expiry and secure HTTP-only cookies.

All connections use HTTPS/TLS encryption.

We implement rate limiting and security headers to prevent attacks.

Access & Export

You can view all your data from your dashboard. Contact us to request a full data export.

Update

You can update your profile, shop details, and products from the dashboard at any time.

Delete

You can request complete account deletion by contacting us. We will delete all your data including products, images, and personal information within 30 days.

Unsubscribe

If your subscription expires, your shop goes offline but your data is preserved. You can resubscribe anytime to restore everything, or request deletion.

StoreStudio is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18. If we discover that a child under 18 has provided us with personal data, we will delete it promptly.

We may update this privacy policy from time to time. If we make significant changes, we will notify registered users via email or in-app notification. Continued use of StoreStudio after changes constitutes acceptance of the updated policy.

If you have any questions about this privacy policy or how we handle your data, please contact us at our contact page or reach out via WhatsApp.