Privacy Policy

Welcome to Ecomify ("we", "our", "us", or "Ecomify Technologies Pvt. Ltd."). We are committed to protecting the privacy, confidentiality, and security of our merchants, their customers, and visitors who interact with our website, platforms, APIs, and cloud services (collectively, the "Services").

1. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information received from third-party integrations.

A. Information You Provide Directly

• Account & Profile Data: Name, business name, GSTIN, billing address, phone number, email address, and account credentials.
• Store & Catalog Data: Product listings, inventory levels, pricing, digital media, collections, and custom domain configurations.
• Payment & Payout Information: Bank account numbers, IFSC codes, UPI IDs, and billing details necessary for merchant payouts and subscription billing (processed via PCI-DSS certified partners).
• Communications: Messages, feedback, tickets, and correspondence sent to our customer support or sales teams.

B. Information Collected Automatically

• Device & Usage Data: IP address, browser type, operating system, referring URLs, access timestamps, and session interactions within the dashboard.
• Cookies & Tracking Identifiers: Session cookies, preference cookies, and analytical tokens used to maintain authentication and improve platform performance.

C. Information From Your Store Visitors (End Customers)

When end customers purchase products from an Ecomify-powered storefront, we process checkout details (name, shipping address, contact number, order items, and payment status) on your behalf as a Data Processor.

2. How We Use Your Information

We process personal and transactional data for the following lawful business purposes:

• Provisioning, operating, maintaining, and enhancing our commerce platform and cloud infrastructure.
• Facilitating order fulfillment, real-time inventory synchronization, and courier integrations (e.g., Shiprocket, Delhivery).
• Processing subscription fees, merchant payouts, and automated invoicing.
• Preventing fraudulent checkouts, DDoS attacks, unauthorized access, and malicious activities.
• Powering AI Sidekick features with strictly isolated context that does not train public models on your proprietary business records.
• Complying with statutory tax laws, GST filing regulations, and regulatory mandates under Indian law.

3. Data Sharing & Third-Party Processors

We do not sell personal data. We only share necessary data with trusted service providers under strict data protection agreements:

4. Data Security & Storage

We enforce enterprise-grade security protocols including 256-bit TLS/SSL encryption in transit, AES-256 encryption at rest, automated vulnerability scanning, role-based access controls (RBAC), and multi-factor authentication (MFA).

5. Your Rights & Data Controls

Depending on your location and applicable privacy regulations (including India's Digital Personal Data Protection Act and GDPR), you have the right to:

• Access, correct, or update your personal account information via your dashboard.
• Export a machine-readable copy of your product catalogs, orders, and customer lists.
• Request the permanent deletion of your account and associated personal data.
• Opt-out of marketing communications at any time.

6. Contact Us Regarding Privacy

If you have any questions, grievances, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer: