Privacy Policy

Last updated: 23 July 2026

1. Information We Collect

To provide our services, we collect information that you directly provide to us when you create an account, list products, manage orders, or contact us. This may include:

  • Account Details: Name, email address, phone number, and business information.
  • Product Data: Product titles, descriptions, prices, images, variants (size, color), and bulk pricing tiers.
  • Order Data: Shipping addresses, billing details, and order history.
  • Catalogue Data: Catalogue names, descriptions, and cover images.
  • Technical Data: IP address, browser type, device information, and general usage analytics.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and maintain our services. Creating and managing your store, products, and catalogues.
  • To process transactions safely. Verifying orders, preventing fraud, and communicating order statuses.
  • To improve our platform. Analyzing site traffic to optimize performance and user experience.
  • To comply with legal obligations. Meeting tax and regulatory requirements.
  • To send order updates. Email/SMS notifications regarding order status.

3. Data Storage & Security

We implement appropriate technical and organizational security measures to protect your personal information:

  • Encryption: All passwords are hashed using industry-standard bcrypt before being stored in our secure database.
  • Secure Infrastructure: Our databases are hosted on secure, access-controlled servers.
  • Access Control: Data is only accessible to authenticated users and system administrators.
  • Cloud Storage: Images and media files are stored securely on Cloudflare R2 and served via CDN.

4. Cookies

We use HTTP-only cookies to authenticate your session. These are essential for the platform to function properly and cannot be turned off in your browser. We use two types:

  • Access Token (Short-lived): Valid for 15 minutes. Used to verify your identity.
  • Refresh Token (Long-lived): Valid for 7 days. Used to get a new access token without forcing you to log in again.

5. Third-Party Services

We rely on trusted third-party services to operate SellKaro. These include:

  • Cloudflare R2: Secure object storage for images and media.
  • Payment Gateways: Razorpay / Stripe for processing secure online payments.
  • Cloud Infrastructure: Vercel for frontend hosting.
  • Email/SMS Services: For sending order and OTP notifications.

These services have their own strict privacy policies. We do not control and are not responsible for the data practices of these third parties.

6. Data Sharing & Disclosure

SellKaro is a multi-tenant platform. Sellers can share their catalogues publicly. In these cases, product data is visible to anyone with the link.

We do not sell, rent, or trade user data to third-party marketers. We do not use your personal information for automated decision-making or profiling.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: You can request a copy of the personal data we hold about you.
  • Correction: You can ask us to correct any inaccurate data.
  • Deletion: You can request the permanent deletion of your account and associated data.
  • Data Portability: You can request your data in a standard machine-readable format.
  • Objection: You can restrict how your data is processed.

To exercise any of these rights, please contact us at rivantatechnology@gmail.com. We will respond within 30 days.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us:

9. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify major changes via email or platform notifications.

Last updated: 23 July 2026.