Privacy Policy

Last updated: March 4, 2026

1. Who We Are

This Privacy Policy explains how Upstorr Commerce India Private Limited ("Upstorr", "we", "us", "our") collects, uses, shares and protects personal data when Indian merchants and their teams use the Upstorr platform (web, mobile, POS), and when customers of those merchants interact with storefronts and services powered by Upstorr.

Registered office:
Upstorr Commerce India Private Limited
Celestia Spaces, TJ Road, Sewri West, Mumbai - 400015, Maharashtra, India.

We primarily operate for merchants based in India. Merchants may sell internationally, but Upstorr does not support inventory or warehouse locations outside India.

2. Who This Policy Covers

  • Merchant users: individuals and businesses that sign up to use Upstorr (including Basic, Pro and Managed plans).
  • Merchant staff: employees or agents with staff accounts.
  • End customers: customers who browse, place orders, or create storefront accounts.
  • Website visitors: visitors to our marketing site, documentation and support pages.

Upstorr Basic does not provide storefront creation or storefront access. Basic merchants can use limited backend features to manage business data before upgrading to Pro. End-customer storefront processing described in this Policy applies when merchants are on plans that include storefront access.

Merchants are responsible for informing their own customers about how their data is processed via Upstorr, including linking to this Policy where appropriate.

3. Information We Collect

3.1 Information you provide to us

  • Account details: name, email, mobile number, business name, GST number, billing address.
  • Business details: business type, industry, inventory locations (within India), store configurations, POS location details.
  • Content: product information, images, descriptions, pricing, offers, storefront and social media content (including Upstorr Managed).
  • Communication: support messages, feedback and survey responses.

3.2 Payment and billing information

  • We do not store full card or UPI details.
  • Payments are processed by third-party providers such as Razorpay and POS providers such as Pine Labs, including other payment methods they support (for example net banking, wallets or PayPal where available).
  • We receive limited information such as payment status, transaction IDs, payment method type and masked card details.

3.3 Information collected automatically

  • Log data: IP address, device information, browser type, operating system, timestamps, pages viewed.
  • Usage data: features used, clicks, error reports and performance data.
  • Cookies and similar technologies for login state, preferences and usage measurement.

3.4 Data about end customers of merchants

When merchants use Upstorr, we may process their customers' data on their behalf, such as:

  • Customer names, contact details, shipping and billing addresses.
  • Order history, carts, invoices and support interactions.
  • Storefront login credentials (hashed passwords only).

In this context, Upstorr typically acts as a service provider or processor for the merchant, who decides how and why customer data is used.

4. How We Use Your Information

We use personal data to:

  • Create and manage merchant and staff accounts.
  • Provide, operate and improve the Upstorr platform, POS and managed services.
  • Process payments, subscriptions, upgrades, downgrades and refunds.
  • Provide support, respond to queries and resolve issues.
  • Send service-related communications such as transactional emails, alerts and security notifications.
  • Send merchant/prospect marketing communications (email, SMS, WhatsApp) where permitted, with opt-out controls.
  • Prevent fraud, enforce Terms of Use and comply with legal and regulatory obligations.

We may aggregate or anonymise data for analytics and product improvement. Such data does not identify individuals.

5. Legal Basis and Consent

Where applicable, we rely on:

  • Performance of a contract - to provide the services you sign up for.
  • Legal obligation - to comply with tax, accounting and regulatory requirements.
  • Legitimate interests - to secure the platform, prevent abuse, improve services and run our business.
  • Consent - especially for marketing and certain optional features; you may withdraw consent at any time.

6. How We Share Information

We may share information with:

  • Payment processors (for example Razorpay, Pine Labs and related providers).
  • Hosting, infrastructure, storage, CDN, email/SMS and analytics providers.
  • Professional advisors, auditors, lawyers and accountants.
  • Government authorities or law enforcement where required by law or to protect rights, property or safety.
  • Successors in the event of a merger, acquisition or restructuring, subject to confidentiality.

We do not sell personal data.

7. International Data Transfers

Our infrastructure and some service providers may be located outside India. Personal data may be processed in other jurisdictions, subject to appropriate safeguards and contractual protections.

By using Upstorr, you understand that your data may be transferred and processed outside India as necessary to provide the services.

8. Data Retention

We retain personal data for as long as necessary to:

  • Provide the services,
  • Comply with legal, tax and accounting requirements, and
  • Resolve disputes and enforce agreements.

When data is no longer required, we delete or anonymise it in accordance with our policies and applicable law.

9. Your Rights and Choices

Subject to applicable law, you may have rights to:

  • Access personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of certain data, subject to legal retention requirements.
  • Withdraw consent for marketing at any time.

To exercise these rights, contact us at support@upstorr.com. We may need to verify your identity before responding.

For end customers of merchants, please first contact the relevant merchant, as they control their own customer data.

10. Security

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. However, no system is completely secure and we cannot guarantee absolute security.

11. Children

Upstorr is not intended for use by individuals under 18 years of age as merchants or staff. If we learn that we have collected personal data from a child without appropriate consent, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, provide additional notice. Continued use of the services after an update constitutes acceptance.

13. Contact and Grievance Officer

If you have questions, concerns or complaints about this Policy or our data practices, contact:

Upstorr Commerce India Private Limited

Celestia Spaces, TJ Road, Sewri West, Mumbai - 400015, Maharashtra, India

Email: support@upstorr.com

Grievance Officer: Ishaan Jain

Grievance Email: support@upstorr.com

Grievance Address: Celestia Spaces, TJ Road, Sewri West, Mumbai - 400015, Maharashtra, India