Privacy Policy

1. Introduction

BuildMyStore (“BuildMyStore”, “we”, “our”, “us”) values your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, process, disclose, transfer, and protect personal data when you use our websites, mobile applications, APIs, software, plugins, and related services (collectively, the “Platform”).

By using BuildMyStore, you acknowledge that you have read and understood this Privacy Policy.

2. Scope

This Privacy Policy applies to:

• Website visitors
• Merchant accounts
• Store administrators
• Employees or representatives of merchants
• Customers contacting our support
• Mobile application users
• API users
• Plugin users

For customer data collected by a merchant through a BuildMyStore-powered store, the merchant is generally the Data Fiduciary (or controller), and BuildMyStore acts as a processor/service provider on the merchant’s instructions, except where we determine the purposes and means of processing for our own services.

3. Information We Collect

3.1 Merchant Information

We may collect:

• Name
• Business name
• GST Number
• PAN
• CIN
• Aadhaar (only if legally required or voluntarily provided for specific verification; avoid collecting unless necessary)
• Business registration documents
• Email address
• Phone number
• Billing address
• Business address
• Store URL
• Profile picture
• Identity verification documents (where required)
• Bank account details (if applicable)
• UPI ID (if applicable)

3.2 Store Information

• Store name
• Logo
• Domain name
• Themes
• Store settings
• Product catalog
• Collections
• Inventory
• Pricing
• Coupons
• Taxes
• Shipping settings

3.3 Customer Information

On behalf of merchants, we may process:

• Customer name
• Email
• Mobile number
• Delivery address
• Billing address
• Order history
• Wishlist
• Reviews
• Loyalty points
• Customer support interactions

3.4 Payment Information

BuildMyStore generally does not store complete payment card details.

Payments are processed by PCI DSS-compliant third-party payment service providers.

We may receive:

• Payment status
• Transaction ID
• Payment method
• Settlement status
• Refund information

3.5 Technical Information

We automatically collect:

• IP address
• Browser information
• Device information
• Operating system
• Session logs
• Crash reports
• Device identifiers
• Time zone
• Language settings

3.6 Usage Information

We collect:

• Login activity
• Feature usage
• API usage
• Plugin installations
• Search queries
• Performance metrics
• Error logs
• Audit logs

3.7 Cookies and Similar Technologies

We use:

• Cookies
• Local storage
• Session tokens
• Device identifiers
• Analytics technologies

These help us:

• Authenticate users
• Improve security
• Remember preferences
• Measure performance
• Analyze usage
• Personalize the experience

4. How We Use Your Information

We process personal data to:

• Create merchant accounts
• Provide the Platform
• Process subscriptions
• Deliver customer support
• Enable payments
• Manage stores
• Improve services
• Prevent fraud
• Detect abuse
• Secure accounts
• Comply with legal obligations
• Send important service communications
• Provide product updates
• Generate analytics
• Train and improve internal systems using aggregated or de-identified data where permitted by law

Where required under applicable law, we will rely on your consent or another lawful basis for processing.

5. Legal Basis for Processing

Where applicable under Indian law, we process personal data based on:

• Your consent
• Performance of our contract with you
• Compliance with legal obligations
• Legitimate business purposes, where recognized and balanced with your rights

6. Sharing of Information

We may share information with:

Payment Providers

For payment processing.

Shipping Partners

For order fulfillment where enabled by the merchant.

Cloud Service Providers

For hosting and infrastructure.

SMS Providers

For transactional messages.

Email Providers

For notifications.

Analytics Providers

To understand platform performance.

Government Authorities

Where required by law.

Professional Advisors

Auditors, lawyers, accountants, and consultants under appropriate confidentiality obligations.

We do not sell personal information.

7. Third-Party Integrations

Merchants may connect third-party services, such as:

• Payment gateways
• Shipping providers
• WhatsApp integrations
• Google services
• Meta services
• Marketing platforms
• ERP systems
• Accounting software

Data shared with these services is governed by their respective privacy policies and agreements.

8. International Data Transfers

Your information may be processed or stored in India or other countries where our service providers operate, subject to applicable law and appropriate safeguards.

Where cross-border transfers are restricted by Indian law, BuildMyStore will comply with such requirements.

9. Data Security

We implement reasonable technical and organizational safeguards, including:

• HTTPS/TLS encryption in transit
• Encryption of sensitive data at rest where appropriate
• Secure password hashing
• Role-based access controls
• Multi-factor authentication for administrative access (where implemented)
• Network and infrastructure security
• Audit logging
• Security monitoring
• Regular backups
• Employee access controls

No system can guarantee absolute security, and users should also take reasonable steps to protect their accounts.

10. Data Retention

We retain personal data only as long as necessary to:

• Provide services
• Meet legal requirements
• Resolve disputes
• Enforce agreements
• Maintain business records

After retention periods expire, data will be deleted, anonymized, or securely archived, unless continued retention is legally required.

11. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Update your information
• Withdraw consent (where processing is based on consent)
• Request deletion, subject to legal and contractual limitations
• Request information about how your data is processed
• Raise grievances regarding your personal data

Requests may be subject to identity verification and applicable legal exceptions.

12. Merchant Responsibilities

Merchants using BuildMyStore agree to:

• Publish their own customer-facing privacy policy where required
• Obtain all necessary customer consents
• Process personal data lawfully
• Respect customer privacy rights
• Secure their account credentials
• Use customer data only for lawful business purposes

BuildMyStore is not responsible for a merchant’s independent processing of customer data.

13. Children’s Privacy

The Platform is not intended for individuals under 18 years of age acting as merchants.

Merchants are responsible for complying with applicable laws if they collect personal data relating to children through their stores.

14. Cookies

Cookies help us:

• Keep users logged in
• Improve website performance
• Remember preferences
• Analyze traffic
• Enhance security

Users may manage cookies through browser settings, although disabling certain cookies may affect functionality.

15. Marketing Communications

We may send:

• Product announcements
• Security alerts
• Billing notices
• Feature updates
• Newsletters
• Promotional offers (where permitted)

You may opt out of promotional communications at any time. Transactional and service-related communications may still be sent as necessary.

16. Data Breach Response

If we become aware of a personal data breach that is likely to result in significant harm or triggers notification obligations under applicable law, we will take appropriate containment measures and notify affected parties and relevant authorities as required.

17. AI Features

Where AI-powered features are used:

• Inputs may be processed to provide the requested functionality.
• We may use service providers to deliver AI capabilities.
• Merchants should avoid submitting confidential or sensitive personal data to AI features unless necessary and permitted by law.
• AI-generated outputs should be reviewed before use.

18. Third-Party Websites

Our Platform may link to third-party websites or services.

We are not responsible for their privacy practices or content. We encourage you to review their privacy policies before sharing personal data.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Material changes will be communicated through the Platform, email, or other reasonable means before or when they become effective, as appropriate.

The latest version will always be available on our website.

20. Grievance Officer

In accordance with applicable Indian law, you may contact our Grievance Officer for privacy-related concerns.

Grievance Officer

Name: [To be Updated]

Email: privacy@buildmystore.io

Address: [Registered Office Address]

We will acknowledge and address grievances within the timelines prescribed by applicable law.

21. Contact Us

For questions regarding this Privacy Policy or our privacy practices, contact:

BuildMyStore

Email: support@buildmystore.io

Privacy Email: privacy@buildmystore.io

Website: https://buildmystore.io

22. Consent

By accessing or using BuildMyStore, you acknowledge that you have read and understood this Privacy Policy and, where required, consent to the collection and processing of your personal data as described herein.