What we collect from vendors and their shoppers, why we hold it, who we share it with, and how to get it out or have it deleted.
We collect what a store needs to run — your business details, your catalogue, and your customers' order details. We never sell personal data, never advertise on your storefront, and you can export or delete your data whenever you like.
[FILL IN: Registered business/entity name] (operating as dsauq) is responsible for the data you give us as a vendor — your account, your plan, your invoices with us. For the shoppers who buy from your store, you are the business responsible for their data and we process it on your instructions.
Questions either way reach us at support@dsauq.com.
| Category | Examples | Source |
|---|---|---|
| Registration | Name, business name, address, mobile, email, PAN, GSTIN | You |
| Verification | OTP logs, documents you upload, approval decisions | You, us |
| Store content | Products, prices, HSN codes, images, theme settings | You |
| Commerce | Orders, invoices, refunds, payouts, bank details | You, partners |
| Technical | IP address, device and browser, pages viewed, error logs | Automatic |
We do not collect card numbers — payment details are captured directly by the gateway and never touch our servers.
Names, addresses, phone numbers and order histories collected through your storefront belong to your customer relationship. We hold them so orders can be fulfilled, invoiced and delivered, and so you can see them in the dashboard.
We do not use your shoppers' data to market our own products, do not share it with other vendors, and do not build cross-store profiles. You must use it only to fulfil orders and to market with consent, and you must publish your own privacy notice.
Every partner is bound by contract to use the data only for the task we give them. We do not sell personal data, and we do not share it for advertising.
The dashboard uses strictly necessary cookies to keep you signed in and to protect the session. Storefronts use a cart cookie plus first-party analytics you can switch off in Settings. If you add your own third-party pixel or analytics tag to your theme, that tracking is yours to declare and obtain consent for.
| Data | Retention |
|---|---|
| Invoices, orders and tax records | 8 years (statutory) |
| Vendor account and store content | While active, then 90 days |
| Rejected applications | 12 months |
| Security and access logs | 180 days |
| OTP and verification logs | 90 days |
Data is encrypted in transit (TLS 1.2+) and at rest, stored in Indian data centres, and reachable only by staff who need it for support or investigation — with access logged. Bank details and PAN are masked in the interface.
If a breach affects your data, we will tell you and the relevant authority without undue delay, along with what happened and what to do.
You can ask to see, correct, export or delete the personal data we hold about you, withdraw consent for marketing, or nominate someone to act for you. Most of it is self-service in Settings; anything else, write to us and we will respond within 30 days.
dsauq is for businesses; accounts are not offered to anyone under 18. Do not upload health records, biometric data or other sensitive categories into product fields, order notes or customer records — the platform is not designed to hold them.
Material changes to this policy are notified by email and in the dashboard 30 days before they take effect, and past versions stay available on request.
Grievance Officer, [FILL IN: Registered business/entity name], [FILL IN: registered city] — support@dsauq.com. Unresolved complaints can be escalated to the Data Protection Board of India.