Skip to content
sellza
Start selling
Legal

Privacy policy

This policy explains what personal data [Legal entity name] (“Sellza”, “we”) collects when you use sellza.in, why we need it, and the choices you have. We are the Data Fiduciary for this data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Last updated 13 October 2026
Template, have a lawyer review before launch. Text in [square brackets] must be filled in.
On this page

1. What we collect

When you buy

  • Name: printed on every page of the PDFs you buy (your personal licence stamp) and shown on your receipt.
  • Email address: to send your download link and receipt, and to show your purchases in My library when you sign in.
  • Mobile number: required by our payment partner for UPI and card payments, and used to contact you about your order if needed.
  • Order details: what you bought, the amount, payment status and the time of each download.

We never receive your full card number, UPI PIN or bank login. Razorpay handles those directly.

When you sell

  • Your name, email, store name, bio and the products you upload.
  • For payouts and tax: legal name, PAN, bank account number, IFSC and GSTIN if you have one. PAN and bank account numbers are encrypted before they are stored.

Automatically

  • Technical data such as IP address, browser type and the pages you request, kept in security logs to prevent fraud and abuse.
  • A sign-in cookie if you log in. We do not use advertising or third-party tracking cookies.

2. Why we use it

  • To process your order, deliver and stamp your file, and send receipts (performing the contract you asked for).
  • To pay sellers and meet tax, accounting and legal duties (for example under the Income-tax Act, GST laws and the IT Rules, 2021).
  • To keep Sellza secure, stop fraud and enforce our terms.
  • To answer your questions and complaints.

We do not sell your personal data, and we do not use it for advertising.

3. Who we share it with

We share only what each party needs to do its job:

  • The seller you buy from sees your name, email, phone number and order so they can support you. Sellers must not use this data for anything else.
  • Processors that work on our behalf under contract:
    • Supabase (database and sign-in)
    • Razorpay (payments, refunds and payouts)
    • Cloudflare (file storage, delivery and security)
    • Resend (transactional email)
  • Government authorities, courts or police, when the law requires it.

Some processors may store data outside India, in countries not restricted under the DPDP Act, with appropriate safeguards.

4. How long we keep it

  • Order and payment records: 8 years, because tax and accounting laws require it.
  • Security logs: up to 180 days, as required by CERT-In directions.
  • Seller account and KYC data: while your store is open, then as long as the law requires.

5. Your rights under the DPDP Act, 2023

You have the right to:

  • get a summary of the personal data we hold about you and who we have shared it with;
  • correct, complete or update your data;
  • ask us to erase data we no longer need to keep by law;
  • withdraw consent where we rely on it (this does not affect past processing);
  • nominate another person to exercise your rights if you die or become unable to;
  • have your complaint handled by our Grievance Officer, and then by the Data Protection Board of India.

To use any of these rights, email us from the address linked to your orders or account. We reply within 30 days.

6. Security

We use encryption in transit, encrypted storage for sensitive seller details, strict access rules in our database and short-lived download links. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

7. Children

Sellers must be 18 or older. Buyers under 18 should use Sellza with a parent or guardian, who gives consent on their behalf. We do not track or target advertising at children.

8. Changes

We will post any changes here with a new date, and email you about important ones.

9. Contact and Grievance Officer

Under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Consumer Protection (E-Commerce) Rules, 2020, you can raise a complaint with our Grievance Officer:

  • Name: [Grievance officer name]
  • Designation: [Designation]
  • Email: [grievance@your-domain]
  • Address: [Legal entity name], [Registered address]
  • Hours: Monday to Friday, 10:00 to 18:00 IST, except public holidays

We acknowledge every complaint within 24 hours and resolve it within 15 days of receipt. Requests to remove content that is clearly unlawful (for example, sexual content involving a person without consent) are acted on within 24 hours.