Legal
Privacy Policy
Effective 1 August 2026
This policy explains what data Slaby collects and how we use it when you use the platform and its stores.
1. What we collect
Account data (name, email, phone) for merchants and buyers; store configuration and catalog; order and usage data needed to operate the Service. We do not collect payment card numbers — payments are handled by our payment provider.
2. How we use it
To provide and secure the Service, process orders, prevent abuse, and communicate about your account. We do not sell personal data.
3. Tenant isolation
Store data is logically isolated per tenant. A merchant sees only their own store's customers and orders; buyers see only stores they interact with.
4. Sharing
We share data only with processors needed to run the Service (hosting, payments, messaging) under appropriate agreements, or where required by law.
5. Retention & your rights
We retain data for as long as your account is active and as required by law. You can access, export, correct, or request deletion of your data, subject to legal retention duties.
6. Your rights under the DPDP Act (India)
As a data principal under the Digital Personal Data Protection Act, 2023, you may request access to a summary of your personal data and how it is processed, request correction or erasure, nominate a person to exercise your rights, and withdraw consent for processing that relies on consent (some platform functions may then be unavailable). Requests go through the contact page and are honoured within statutory timelines.
7. Security
We use industry-standard measures including encryption in transit, access controls, and per-tenant scoping. No system is perfectly secure; report concerns via the contact page.
8. Contact & grievances
For privacy questions or grievances, use the contact page. We aim to respond within statutory timelines.