Seller account data. Name, email address, phone number, business name, GST number and PAN where you provide them, and your billing plan.

Marketplace and store data. When you connect a sales channel, we retrieve your orders, products, inventory levels and shipment records from that channel.

Buyer information inside your orders. This includes buyer name, delivery address, phone number, email address and order contents. We receive this because it is required to fulfil and deliver the order. We act as a processor of this data on your behalf.

Channel credentials. API keys and tokens you supply to connect a channel or courier account.

To show your orders in one place, keep inventory aligned across your channels, book and track shipments through your courier account, generate GST invoices, detect failed deliveries, and score cash on delivery orders for risk using your own order history.

We do not use buyer information for marketing, we do not build profiles across different sellers, and we do not sell or rent data.

Channel credentials are encrypted at rest using AES-256 before they are written to the database. Data in transit is protected with TLS. Databases are not publicly exposed and access is restricted to the application and to named administrators.

Each seller’s data is isolated by tenant, and every request is scoped to the authenticated seller’s account.

Administrative access is limited to the people who operate Sellvio. Where a Sellvio administrator views a seller’s account for support, that access is recorded in an audit log.

Your courier or shipping aggregator, so a shipment can be booked and tracked. This uses the account you connected.

Infrastructure providers who host the service on our behalf, including our cloud hosting and database providers. They process data under contract and may not use it for their own purposes.

We do not share buyer data with any other third party.

Seller account data is retained while your account is active. Order and buyer data is retained for as long as you need it for order management, tax and accounting obligations under Indian law.

Where a marketplace requires shorter retention of buyer personal information under its own data protection terms, we honour that requirement for data received from that marketplace.

When you close your account we delete your data within 30 days, except where we are required to retain records by law.

You can disconnect any channel at any time, which stops further data retrieval from it. You can export your orders and products as CSV. You can request deletion of your account and data by writing to us.

If we become aware of a security incident affecting your data, we will notify you without undue delay, and we will notify affected marketplaces within the time they require.

Abhishek Singh, India. Write to privacy@forbedev.com for any privacy question, data request or security report.