Privacy Policy

Introduction

SellerUncle ("we," "our," or "us"), operated by Zahita Labs LLP, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform on web (www.selleruncle.com) and our mobile application.

By accessing or using our platform, you consent to the practices described in this policy. If you do not agree with any part of this policy, please discontinue use of our services.

1. Information We Collect

1.1 Personal Information

• Account Information: Name, mobile number, email address (if provided), and business details for seller accounts.
• Profile Information: Profile pictures, business descriptions, and any additional details you choose to share.
• Identity Verification: Phone number verified via OTP, or identity verified through Google sign-in.
• Communication Data: Messages exchanged with other users through our in-app chat system, and support interactions.

1.2 Transaction Information

• Order details, listing history, and purchase/sale records.
• Payment transaction records processed through Cashfree (our payment gateway partner).
• Subscription plan and add-on purchase history.

1.3 Technical & Device Information

• Device type, operating system, browser type, and app version.
• IP address and approximate location derived from your IP.
• Usage analytics — pages visited, features used, search queries, and interaction patterns.
• Cookies and local storage tokens (web platform).

1.4 Location Information

• Approximate location derived from your IP address.
• Precise location if you grant location permissions (used for nearby ad listings and location-based search).
• Saved location preferences within the app.

1.5 Third-Party Social Media Data (Meta/Instagram API)

If you choose to link your professional or business Facebook / Instagram account to the Platform, we collect and process authorised data via Meta APIs. This may include your public profile information, media assets (such as Instagram Reels, images, and video content), captions, and aggregated performance metrics required to display synchronised content on your local listings.

2. How We Use Your Information

• Provide, maintain, and improve our marketplace services.
• Facilitate transactions between buyers and sellers.
• Enable real-time communication between users via our chat system.
• Send OTP verification codes for secure authentication.
• Personalise your experience — show relevant ads, nearby listings, and recommendations.
• Process payments and manage subscriptions through Cashfree.
• Monitor platform activity to detect, prevent, and address fraud, abuse, or technical issues.
• Send service-related notifications (order updates, listing status changes, chat messages).
• Comply with legal obligations under applicable Indian law.

3. Data Sharing and Disclosure

3.1 Service Providers

We share information with third-party vendors who help us operate our platform:

• Cashfree — Payment processing. We do not store your payment card or bank account details.
• Cloud infrastructure providers — Hosting and data storage.
• OLA Maps / Google Maps — Location services and geocoding.
• Meta Platforms, Inc. — Data is exchanged with Meta APIs to maintain authorised data pipelines, verify user authentication, and synchronise business assets directly chosen by the user.
• Analytics tools — Anonymised usage data to improve platform performance.

3.2 Other Users

When you post a listing, your public profile information (name, profile picture, verification status) is visible to other users. Messages are shared only between conversation participants.

3.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe such action is necessary to protect the safety of our users or the public, or to enforce our Terms and Conditions.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets of Zahita Labs LLP, user data may be transferred as part of the transaction. We will notify affected users before personal information becomes subject to a different privacy policy.

4. Data Security

• All API communication is encrypted using HTTPS/TLS.
• Authentication tokens (JWT) are stored securely using encrypted storage.
• Passwords are never stored — authentication uses OTP or Google sign-in.
• Payment data is handled entirely by Cashfree's PCI-DSS compliant systems.
• We implement role-based access controls to limit internal access to user data.

While we take all reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to keep your device secure and avoid sharing your authentication credentials.

Where required under applicable Indian law and regulatory directions, we will report severe cybersecurity incidents and data breaches to the Indian Computer Emergency Response Team (CERT-In) within prescribed timelines (including within 6 hours of detection, where applicable), and we will notify affected individuals (Data Principals) of compromises to sensitive information such as verified mobile numbers.

5. Data Retention

• Active account data is retained for as long as your account remains active.
• Transaction records are retained for a minimum of 8 years as required under Indian tax and commerce regulations.
• While payment instruments/tokens are handled by Cashfree, Zahita Labs LLP retains transaction metadata (such as amounts, timestamps, and internal user/order identifiers) to satisfy statutory audit trails and financial record retention requirements.
• Chat messages are retained for 1 year after the last activity in a conversation.
• If you delete your account, your personal data will be removed within 30 days, except where retention is required by law.

6. Meta/Instagram Data Deletion Request Protocol

6.1 Meta/Instagram Data Deletion Instructions

Users who have linked their accounts and wish to revoke authorisations and request the erasure of cached Third-Party Social Media Data derived via Meta APIs may do so by:

• Navigating to the Account Settings menu on the Platform and selecting Disconnect Social Accounts, or
• Submitting an explicit data deletion request via email to privacy@selleruncle.com.

Upon receipt of a valid request, our technical systems will expunge cached Meta-derived media assets and metrics from our production databases within thirty (30) days, subject to lawful retention requirements.

7. Your Rights (Data Principals)

Under applicable Indian data protection law (including the DPDP Act, 2023 where applicable), you may have rights as a Data Principal, such as:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete personal data via your account settings or by contacting us.
• Erasure: Request deletion of your personal data (subject to legal retention obligations).
• Restriction: Request limitation of processing in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing of your data for direct marketing purposes.
• Withdraw Consent: Withdraw consent for location access or notifications at any time through your device or browser settings.

To exercise any of these rights, contact us at privacy@selleruncle.com. We will respond within 30 days, as required by law.

8. Cookies and Tracking

Our web platform uses cookies and local storage for:

• Essential cookies: Authentication tokens, session management.
• Functional cookies: User preferences (location, theme).
• Analytics cookies: Anonymised usage data to improve our services.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

Our mobile application uses secure local storage for authentication tokens and user preferences. No third-party advertising trackers are used in the app.

9. Children's Privacy

Our platform is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will take steps to remove their data and close their account.

10. Policy Changes

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting a notice on our platform and updating the "Last updated" date above. Continued use of our services after such changes constitutes your acceptance of the revised policy.

11. Grievance Redressal Mechanism & Contact (DPDP Act, 2023)

For the purposes of the DPDP Act, 2023 (where applicable), Zahita Labs LLP is the Data Fiduciary and users are Data Principals.

If you have questions, complaints, or wish to exercise your rights as a Data Principal, you may contact our designated Grievance Officer:

If your grievance is not resolved within the statutory timeline, you may have the right to escalate to the appropriate authority (including the Data Protection Board of India), subject to applicable law.