1. Data we collect
- Account: name, email, mobile number, password (stored only as a one-way hash).
- Business: legal and brand name, GSTIN, PAN, address, category, marketplace store names and seller IDs.
- Documents and content: files you upload, chat messages, tickets, product data and images.
- Marketplace and order data: reports, settlements, inventory and order data needed for the services you request.
- Payments: processed by Razorpay. We receive payment status and IDs — never your card, UPI PIN or bank credentials.
- Technical: IP address and security logs for sign-in protection and audit.
2. Why we use it
To provide and bill the services you subscribe to, issue GST invoices, communicate with you, protect accounts (rate limiting, audit logs, two-factor authentication for staff), meet legal obligations and improve our processes. We do not sell personal data or use your buyers' data for unrelated marketing or profiling.
3. Buyer data on orders and labels
Where we process orders and shipping labels, we use buyer information only to fulfil those orders as your processor. Thank-you notes are non-personalised by default; personalisation uses the minimum data (such as first name) only with your approved basis, and is not retained longer than needed.
4. Sharing
We share data only with: Amazon and Flipkart (to perform services on your accounts), Razorpay (payments), our hosting, email and document-storage providers, and authorities where law requires. Any other third-party sharing needs your explicit approval.
5. Access inside SOLLUNA
Staff see only clients they are assigned to or working for, by role. Staff downloads of client files are logged. Access is revoked immediately when an employee leaves.
6. Security
Data is encrypted in transit (HTTPS). Secrets such as authentication seeds are encrypted at rest. Uploads are checked by content type. Each client's data is isolated from every other client's.
7. Retention
We keep account and service records while you are a client and afterwards as long as needed for tax, accounting and legal purposes (invoices and financial records: at least 8 years under GST law). You may ask us to delete other data when you leave.
8. Your rights
You may request access to, correction of, or erasure of your personal data, withdraw consent, and nominate a person to exercise these rights. Write to our grievance contact below; we respond within 30 days.
9. Grievance officer
Aaditya Jitendrabhai Sorathia (Proprietor), trading as Solluna · solluna.play@gmail.com · Anjar, Kachchh, Gujarat 370110.