Privacy Policy
Ecomtory ("we", "us", "our") operates ecomtory.com and the Ecomtory multi-channel inventory management platform ("Service"). This Privacy Policy explains what data we collect, how we use it, how our multi-tenant architecture isolates your business records, and your rights regarding your data.
01.Information We Collect
Account Information
- Name and email address (via Google Sign-In and Firebase Authentication).
- Business profile details: shop/business name, business category/type, GST number (optional), contact phone/email, business address, and store logo.
Business Data You Provide
- Product and inventory records: SKUs, stock levels, cost price, selling price, categories, and dynamic variant attributes.
- Order and return data, including order details extracted automatically from shipping manifest/label PDFs you upload.
- Partner and team member information you invite (name, email, ownership share percentage, and module permission levels).
- Expense records you or your invited partners log in the ledger.
- Custom templates, cards, and branding content created using platform tools (e.g. Thank You Card designs).
Payment Information
Subscription and billing data is processed directly by Razorpay, our certified payment processor. We do not store your credit card, debit card, UPI PIN, or bank account credentials on our servers. Razorpay handles all recurring transaction tokens securely under RBI/PCI-DSS standards.
Automatically Collected Information
Basic telemetry and audit logs (such as authentication timestamps, IP addresses, browser agent, and critical ledger actions) strictly to maintain system security, track audit trails, and ensure reliable platform operations.
02.How We Use Your Information
We use the collected information exclusively to:
- Operate the inventory ledger, auto-sync stock, and process order manifests.
- Process subscription billing and manage quota limits (Free vs Pro).
- Enforce team role-based permissions and partner ledger distributions.
- Send transactional emails (partner invitations, quota notices, payment receipts).
03.Third-Party Services We Use
We partner with industry-leading infrastructure providers to deliver reliable services:
Each of these service providers processes data under their own independent privacy policies and security safeguards.
04.Data Sharing
We do not sell, rent, monetize, or trade your inventory, customer information, or sales volume with third parties or data brokers.
Data is shared strictly:
- With the core service providers listed in Section 3 to operate the platform.
- With your invited partners and staff members, strictly limited to the role permissions (Order, Return, Expense, Catalog, Reports) you configure.
- When required by law, court order, or regulatory compliance mandates.
05.Multi-Tenant Data Isolation
Ecomtory is built from the ground up as a multi-tenant platform. Every database query, aggregation, and file access is scoped to your unique tenantId. No merchant can view, query, or leak another tenant's product catalog, financial metrics, or customer records.
06.Data Retention
- Your business data is retained as long as your workspace account remains active.
- If your account is on the Free tier or cancelled, existing data remains safely accessible in view-only mode; new record creation is bounded by plan quotas.
- You may request complete deletion of your workspace account and associated records at any time.
07.Data Security
We implement comprehensive technical and administrative security controls: HTTPS TLS 1.3 encryption in transit, Firebase OAuth token validation, salted password hashing (bcrypt 10+ rounds for local partners), and isolated database indexes. While we adhere to strict standards, no electronic transmission is 100% immune from external risks.
08.Your Rights
As a merchant on Ecomtory, you have the right to:
- Access, update, or edit your business profile and product catalog directly from the dashboard.
- Export and download your order history, inventory ledgers, and return reports in standard CSV/PDF formats.
- Request full account and data deletion (subject to statutory tax and financial record-keeping mandates).
To exercise any of these rights, contact us at support@ecomtory.com.
09.Children's Privacy
The Service is designed strictly for business operations by adults (merchants, sellers, business owners, and authorized partners) and is not intended for individuals under 18 years of age.
10.Changes to This Policy
We may update this Privacy Policy periodically to reflect feature enhancements or regulatory changes. Material revisions will be communicated via in-app banner or email. Continued use of Ecomtory following any update constitutes agreement to the revised policy.
11.Contact Us
If you have questions or inquiries regarding this Privacy Policy or your data, please contact our privacy desk: