Privacy Policy

Zabr is a multi-tenant e-commerce platform that enables merchants to create and operate online stores. This Privacy Policy explains how Zabr collects and uses data from merchants who use the platform and from customers who shop at Zabr-powered stores.

For the purposes of this policy, "we", "us", and "Zabr" refer to the Zabr platform operator.

When you create a Zabr merchant account, we collect:

• Name and email address (for account creation and communications) • Business details (store name, address, GST number where provided) • Payment information (subscription billing details processed via our payment provider — we do not store card numbers) • Store configuration (products, categories, settings, policies you create) • Usage data (how you interact with the dashboard, features used)

When a customer places an order at a Zabr-powered store, we collect on behalf of the merchant:

• Name, email address, and phone number • Shipping and billing address • Order details (products, quantities, prices) • Payment method (COD or online — card details are processed by the payment gateway, not stored by Zabr)

This data is collected to process orders and belongs to the merchant. Zabr processes it as a data processor on the merchant's behalf.

We use merchant data to: • Operate and provide the Zabr platform • Process subscription payments • Send account-related emails (order notifications, system alerts) • Improve the platform based on usage patterns • Comply with legal obligations

We use customer data to: • Process and fulfil orders • Send order confirmation and status emails • Enable merchants to manage their customer relationships

We do not sell your data to third parties.

We share data with: • Payment processors (to handle subscription and order payments) • Email service providers (to send transactional emails) • Cloud infrastructure providers (to host the platform) • Cloudinary (to store and serve product images)

All third-party providers are contractually required to protect data and use it only for the purposes we specify.

Merchant account data is retained for the duration of the subscription and for 30 days after termination, after which it is deleted.

Order data is retained for 7 years to comply with Indian tax and accounting requirements.

You may request deletion of your personal data at any time, subject to our legal retention obligations.

Zabr uses industry-standard security practices including: • SSL/TLS encryption for all data in transit • Encrypted storage for sensitive data at rest • Access controls limiting who can access your data • Regular security reviews

No system is completely secure. In the event of a data breach affecting your data, we will notify you as required by applicable law.

Zabr uses essential cookies to operate the platform (session management, authentication). We do not use tracking or advertising cookies.

Analytics on the Zabr marketing website (zabr.in) may use anonymised cookies to understand traffic patterns. These do not track individual users across sites.

You have the right to: • Access the personal data we hold about you • Correct inaccurate data • Request deletion of your data (subject to retention requirements) • Export your data in a portable format • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@zabr.in.

We may update this Privacy Policy from time to time. Material changes will be communicated via email. The date at the top of this page reflects the most recent update.

For privacy-related queries, contact us at privacy@zabr.in or write to us at our registered address.