Privacy policy

StoreSello is a commerce platform. Merchants use it to run an online store, a point of sale, inventory, purchasing, marketing and reporting from one dashboard, and we host the storefronts their shoppers buy from.

This policy explains what we do with personal information across our public website and theme store, the merchant dashboard and POS, and the storefronts we host on a merchant’s behalf. Where a separate agreement with a merchant says something different, that agreement governs their account.

Information you give us. When you create a merchant account we collect your name, phone number, email address, business name and store address. If you invite staff, we collect the same for each person you add. If you join the affiliate programme we also collect the identity and payout details you provide. If you write to us or use the contact form, we keep your message and the details you send with it.

Information you put into the platform.Products, prices, stock, orders, customers, suppliers, expenses, media, theme content and settings. Some of this is personal information about your shoppers — see section 3.

Payment information.Plan, theme and storefront payments are handled by our payment partners. Card numbers and mobile-wallet PINs are entered on the provider’s page and never reach our servers. We keep the transaction reference, amount, status and the masked identifier the provider returns.

Device and usage information. IP address, browser and device type, operating system, pages viewed, referring address and timestamps. We also keep a device identifier and a session identifier so we can tell a returning session from a stolen one.

Support information. Chat transcripts, support requests and the diagnostic details you send us when reporting a problem.

For information about merchants— the account holder, their staff and their billing — StoreSello decides why and how it is used, and this policy governs it.

For information about a merchant’s shoppers— names, phone numbers, delivery addresses and order history collected through a store we host — the merchant decides why and how it is used, and StoreSello processes it on the merchant’s behalf, to deliver the service they have subscribed to. We do not sell it, we do not use it to build our own marketing audiences, and we do not share one merchant’s shopper data with another merchant.

If you are a shopper and want your data corrected or removed, contact the store you bought from. If they cannot reach us, write to privacy@storesello.com and we will help them action it.

We use the information above to:

• create and run your account, store, POS sessions and staff permissions;
• process orders, payments, refunds, invoices and courier bookings;
• send messages you need — order updates, one-time codes, invoices, alerts and service notices — by SMS, email and push notification;
• produce the reports and analytics you see in your dashboard;
• bill you for your plan and themes, and credit affiliates for referrals;
• keep the platform safe: rate limiting, screening for fraud and fake orders, locking an account after repeated failed sign-ins, and challenging a session used from a device it was not issued to;
• answer your questions and provide support;
• improve the product using aggregated information, and meet our legal obligations.

We send product news and offers only if you have not opted out, and every such email has an unsubscribe link. We do not sell personal information, and we do not use your store’s data to compete with you.

We share only what a given job needs, and only with:

• Payment providers— to take a payment and confirm it settled.
• Courier and logistics partnersyou connect — the recipient name, phone and address needed to deliver a parcel.
• SMS and email providers— the recipient and the content of the message.
• Analytics and advertising tools a merchant switches on— for example a Meta pixel, the Conversions API, Google Analytics or Google Tag Manager. These run on the merchant’s store because the merchant configured them, with the merchant’s own IDs, and the data goes to the merchant’s account with that provider, under its policy.
• Infrastructure providers— hosting, storage, content delivery and error monitoring, bound by contract to process data only on our instruction.
• Authorities— where the law requires it, or to establish or defend a legal claim.
• A successor— if StoreSello is involved in a merger, acquisition or sale of assets, with notice to you before your data becomes subject to a different policy.

We use the cookies the platform needs to keep you signed in and to protect you from forged requests, and browser storage for things like your language choice and unsaved drafts. Sensitive values kept in the browser are encrypted. The full list, and how to control it, is in our Cookie policy.

We keep account and store data for as long as the account is open. After an account is closed we keep it for a limited period so it can be restored on request, then delete or anonymise it, except where we must keep records longer — invoices and tax records being the usual case.

Security and audit logs are kept for a shorter period. Backups are replaced on their own schedule, so a deleted record may remain in a backup for a short time after it disappears from the live system.

StoreSello is run from Bangladesh. Some of our infrastructure and service providers operate in other countries, so your information may be stored or processed outside Bangladesh. Where it is, we require those providers to protect it to the standard this policy describes.

Traffic runs over TLS. Requests that change data are additionally encrypted end to end and carry a guard against being replayed. Sensitive values held in the browser are encrypted rather than left in plain storage.

Access inside the platform is role-based, requests are rate limited, repeated failed sign-ins lock an account, and a session used from a device it was not issued to is challenged.

No system is perfectly secure. If a breach affects your personal information we will tell you and, where required, the relevant authority, without undue delay.

Our support staff cannot open your dashboard at will. You grant access from Settings, for a limited time; each visit is recorded in a log you can read; and you can revoke access at any moment, which ends the session immediately.

You can, at any time:

• view and correct your account details in the dashboard;
• export your products, orders and customers as CSV files;
• ask us for a copy of the personal information we hold about you;
• ask us to delete your account and the data in it, subject to the records we must keep;
• opt out of product and marketing emails using the unsubscribe link. Messages about your account itself cannot be switched off while the account is open.

Write to privacy@storesello.com and we will respond within 30 days.

StoreSello is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

We update this policy as the product changes. The date at the top always shows the current version, and we will give notice in the dashboard before a change that materially affects you takes effect.

Questions, requests or complaints about privacy: privacy@storesello.com, or use the contact form.