Privacy Policy

This Privacy Policy explains how SellByte (“we”, “us”) collects, uses, stores, and shares personal information when you visit sellbyte.in, create an account, check out, contact support, or otherwise use our services.

We aim to follow applicable Indian privacy principles, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) as it applies to us, along with other applicable laws. By using the site, you acknowledge this Policy. Where consent is required, we will ask for it in the relevant flow.

Related pages: Terms of Service · Refund Policy · Contact

Last updated: 13 August 2026

1. Who controls your data

SellByte operates this storefront and decides why and how personal data is processed for orders, accounts, shipping, invoices, and support. For privacy requests, email support@sellbyte.in with the subject line “Privacy request”.

2. Personal data we collect

Depending on how you use SellByte, we may collect:

Identity and contact data — name, email address, phone number.
Account data — password (stored in hashed form), email verification status, login sessions.
Order data — products purchased, quantities, prices, coupons, order notes, payment status, fulfilment status, GST invoice snapshots.
Shipping address data — recipient name, phone, India address lines, city, state, PIN code.
Support data — messages you send by contact form, email, or WhatsApp, including screenshots you choose to share.
Abandoned checkout data — cart contents and contact details entered during checkout if you leave before paying.
Technical data — IP address, browser type, device information, approximate location derived from IP, pages visited, referring URL, and diagnostic logs.
Marketing preferences — whether you interact with announcements, offer popups, or community channel buttons.

We do not intentionally collect full debit/credit card numbers, CVV, or other sensitive payment credentials on SellByte servers. Those details are entered on the payment provider’s checkout and are not stored by SellByte.

3. How we collect data

Directly from you at registration, checkout, profile, contact forms, WhatsApp chats, and email.
Automatically through cookies, sessions, and server logs when you browse the site.
From payment providers (payment success/failure, transaction IDs, and limited payer metadata they return to us).
From courier partners (AWB, tracking status) when Shiprocket or another courier is used.

4. Why we use your data

We use personal data to:

create and manage accounts;
process orders, verify payments, calculate GST, and issue invoices;
ship physical goods within India and share the address with warehouse, dropship, or courier partners;
contact you about order status, delivery, RTO, or problems;
prevent fraud, abuse, and unauthorised access;
improve the storefront, catalog, and support quality;
send transactional messages (order confirmation, shipped notices) when those features are enabled;
comply with accounting, tax, dispute, and legal obligations;
respond to your support and privacy requests.

We do not sell your personal information to data brokers or unrelated advertisers.

5. Cookies and similar technologies

We use essential cookies and session storage to keep you logged in, remember cart/checkout state, protect forms (CSRF), and operate the site. If analytics or advertising cookies are added later, we will update this Policy and, where required, provide controls.

You can block cookies in your browser, but checkout and login may stop working correctly.

6. Payments

Online payments are processed by independent payment providers enabled on our checkout. When you pay, you also interact with that provider’s privacy policy. They receive the information needed to complete the transaction, such as amount, order reference, and the payer details you enter on their checkout page.

SellByte does not store full card numbers on its servers. We may store payment status, transaction references, and limited confirmation details returned to us so we can mark the order paid and handle support or disputes.

Offline orders placed through WhatsApp are handled in that chat.

7. WhatsApp, email, and other messaging

If you share a phone number, we may use it for order support or, when enabled, automated transactional WhatsApp messages (for example order placed). WhatsApp is operated by Meta. Message content and metadata are also subject to Meta’s terms and privacy policy.

Email may be sent through our hosting/mail provider. Transactional mail is part of fulfilling your order.

8. Who we share data with

We share personal data only as needed:

Payment processors — to take and verify payment.
Courier and fulfilment partners — name, phone, and India address to ship the parcel.
Dropship suppliers — only the details required to fulfil that order.
Hosting, database, email, and queue providers — to run the website and send messages.
Support tools — if we use WhatsApp or similar channels you chose to contact.
Professional advisers and authorities — if required by law, court order, fraud investigation, or to establish/exercise legal claims.

Service providers are expected to use data only to perform services for us or as required by law.

9. International processing

Some processors (for example global payment or cloud providers) may store or process data outside India. Where that happens, we rely on appropriate contractual and security measures available from those providers. By using SellByte you understand that such transfers may occur to complete your order. We still deliver only within India.

10. How long we keep data

We keep personal data only as long as needed for the purposes above:

Orders and invoices — typically several years for accounting, chargebacks, and legal defence.
Accounts — until you request deletion, plus a short residual period for backups and fraud prevention, unless law requires longer.
Support chats and messages — as long as needed to resolve the issue and document the outcome.
Server logs — for a limited operational period unless needed for security investigation.

11. Security

We use reasonable technical and organisational measures such as hashed passwords, HTTPS, access-controlled admin panels, and least-privilege practices. No online service is 100% secure. You should use a unique password for SellByte.

12. Children

SellByte is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will delete it where required and feasible.

13. Your rights

Subject to the DPDP Act and other applicable law, you may request to:

access the personal data we hold about you;
correct inaccurate or incomplete data;
delete data that is no longer needed (erasure may be limited where we must keep order/payment records);
withdraw consent where processing is based on consent (this will not affect processing already completed);
nominate a contact for certain rights in line with applicable rules, where relevant;
raise a grievance about how we handle your data.

To exercise rights, email support@sellbyte.in from the address associated with your order or account and describe the request. We may need to verify your identity before acting. We will respond within a reasonable period required by law.

14. Automated decisions

We may use automated signals (for example payment-provider fraud scores or repeated failed logins) to protect the store. Fulfilment exceptions are generally reviewed by a person when something looks wrong.

15. Changes to this Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. The “Last updated” date will be revised. Continued use of SellByte after an update means you acknowledge the revised Policy. If changes are material, we will try to provide additional notice on the site.

16. Contact

Questions about privacy: support@sellbyte.in

This Policy is provided to explain our practices in plain language. It is not legal advice.