Privacy Policy

Last updated: 8 July 2026

Template notice. This is a starting-point template for SellerComet. Replace the bracketed placeholders and have it reviewed by qualified legal counsel before relying on it. It is not legal advice.

This Privacy Policy explains how [Registered Business Name] (“we”) collects, uses and protects information when you use SellerComet(the “Service”).

1. Information we collect

Account data — your name, email, password (stored only as a one-way hash), and team membership.
Business & report data — the marketplace reports and figures you upload (sales, fees, GST, advertising, shipping), used to produce your analysis.
Billing data — your plan, subscription status, and GST details for invoicing. Card/payment details are handled by our payment processor, not stored by us.
Usage data — logs of actions in the Service, used for security, auditing and support.

2. How we use it

To provide the Service — compute your P&L, GST and ads outputs.
To operate accounts, teams and per-feature access.
To process subscriptions and issue invoices.
To secure the Service, prevent abuse, and provide support.

3. Data isolation

Your Data is isolated per workspace. The Service is built so that one customer’s data cannot be accessed by another; tenant isolation is enforced at the data layer on every request.

4. Service providers

We share limited data with providers strictly to run the Service:

Hosting & database — our cloud hosting and managed PostgreSQL provider store the Service and Your Data.
Payments — Razorpay processes subscription payments.
Email — our email provider (Resend) sends transactional emails such as password and invite links.
AI processing — where you use AI features (e.g. keyword scoring), the relevant text is sent to our AI provider(s) to generate recommendations.

We do not sell your personal data.

5. Cookies

We use strictly necessary cookies to keep you signed in and to remember your active workspace. We do not use advertising cookies.

6. Data retention

We retain Your Data while your account is active and for a reasonable period afterwards to meet legal, accounting and backup obligations, after which it is deleted or anonymised. You may request deletion of your account and associated data.

7. Security

We apply administrative and technical safeguards including authentication, per-workspace isolation, hashed passwords, and encrypted transport. No method of transmission or storage is perfectly secure, but we work to protect your information.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to certain processing. Contact us to exercise these rights.

9. Changes

We may update this policy from time to time. Material changes will be notified in the Service or by email; the “last updated” date reflects the latest version.

10. Contact

Questions or requests? Email us at support@example.com. See also our Terms of Service.