Privacy Policy
Last updated: 29 July 2026
This policy explains what personal data Seller Tools India (“we”, “us”) collects, why, and your rights. It is written to comply with India’s Digital Personal Data Protection Act, 2023 (DPDP Act). We keep it in plain English on purpose.
1. What we collect
If you only use the free tools without an account, we do not collect personal data that identifies you (beyond ordinary, non-identifying server logs). If you create an account or buy a plan, we collect:
| Data | Why |
|---|---|
| Account email (and name, if you provide it) | To create your login, show your plan, and contact you about your account. |
| Plan and payment status (plan type, start/expiry, payment/order IDs, amount) | To give you access to what you paid for and show your billing history. Card/UPI details are handled by our payment provider, not stored by us. |
| Login events — time, IP address, browser/OS (user-agent), and a device identifier | Security, and to enforce our “one active session” and limited-devices rules that keep prices low and prevent account sharing. See section 3. |
| Usage heartbeat — a random per-tab session id, the page you're on, and timestamps (no IP, no cookies; linked to your account only while you're logged in) | To see how many people are using the site right now and how long visits last, so we can size and improve the Service. |
| Nothing from your uploaded files | Files are processed only in your browser (see the box above). |
2. Device identifier and login tracking — disclosed
To prevent one paid account being shared across many people, we record a device identifier for each browser you log in from, along with your login time, IP address and browser/OS. The device identifier is a one-way hash derived from your browser and device characteristics plus a random value stored in your browser; it is used only to recognise your own devices for this account. We do not use it to track you across other websites. A paid account is limited to a small number of known devices (you can ask us to reset them), and to one active session at a time — logging in elsewhere signs out the previous session. We disclose this clearly because it is your right to know.
3. Why we process your data (legal basis)
- To provide the Service and the plan you signed up for (performance of our agreement with you).
- To keep accounts secure and prevent sharing/abuse (our legitimate interest and yours in fair pricing).
- To meet legal, tax and accounting obligations (e.g. keeping payment records).
4. Sharing
We share data only with service providers who help us run the Service — our hosting provider, our authentication/database provider, and our payment provider — and only as needed. We do not sell your personal data. We may disclose data if required by law.
5. Retention
We keep account and payment records for as long as your account is active and for as long afterwards as needed to meet legal and tax requirements. Everything else is deleted automatically on a schedule:
- Login and device records (time, IP, browser/OS, device identifier) — 180 days, then deleted.
- Usage heartbeat (per-tab session id and page, no IP) — 2 days, then deleted.
- Error reports (the message and file when our own code throws; anonymous) — 30 days, then deleted.
You can ask us to delete your account at any time (see below), subject to records we must keep by law.
6. Your rights
Under the DPDP Act you have the right to access the personal data we hold about you, to have it corrected or completed, and to have it erased. You may also withdraw consent and nominate someone to exercise your rights. To make any request, email us at gossiistudio@gmail.com and we will respond within a reasonable time.
7. Grievance / Data Protection contact
For any privacy question, complaint or grievance, contact our grievance officer at gossiistudio@gmail.com. (Business name and registered address to be added here.)
8. Children
The Service is for business use by sellers and is not directed at children under 18.
9. Changes
We may update this policy. We will change the “last updated” date above and, for significant changes, tell account holders by email.