Privacy Policy

1. About Agavian Ecommerce

Agavian Ecommerce is an ecommerce technology platform that allows businesses and individuals to create, operate and manage online stores. Depending on the features selected by a merchant, the Services may include:

• Hosted ecommerce storefronts
• Product and inventory management
• Order and customer management
• Payment gateway integrations
• Shipping and delivery integrations
• Discount, coupon and promotional tools
• Analytics and business reports
• Marketing and communication tools
• Third-party application integrations
• Customer support and technical services

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information relating to:

• Merchants, store owners and their authorised staff who use the Agavian administration panel
• Customers who purchase products or interact with a store powered by Agavian
• Visitors to our websites, applications and merchant storefronts
• Partners, developers, service providers and integration providers
• Individuals who contact Agavian for support, sales or other enquiries

This Privacy Policy does not apply to websites, applications or services operated independently by third parties, even when they are connected to or accessible through the Services.

3. Agavian’s Role and the Merchant’s Role

The organisation responsible for deciding why and how personal information is processed may differ depending on the circumstances.

3.1 Merchant account information

When a merchant creates and manages an account with Agavian, Agavian generally determines how the merchant’s account, subscription, security, billing and support information is processed.

3.2 Store customer information

When a customer purchases from or interacts with a merchant’s storefront, the merchant generally determines why and how the customer’s information is collected and used. In such situations, Agavian normally processes the information to provide the Services on the merchant’s instructions.

Agavian may independently process limited storefront information where necessary to:

• Secure and maintain the platform
• Prevent fraud, abuse and prohibited activities
• Comply with legal requirements
• Improve the reliability and performance of the Services
• Enforce our agreements and platform policies

Customers should first contact the relevant merchant regarding an order, refund, product, delivery or request concerning information collected by that merchant.

4. Personal Information We Collect

The information collected depends on how you interact with the Services and which features are enabled.

4.1 Merchant and account information

We may collect:

• Full name and display name
• Email address and mobile number
• Username and encrypted or hashed authentication credentials
• Business name, business type and industry
• Business registration and tax-related details
• GSTIN, PAN or other verification information where required
• Registered, billing and operational addresses
• Store name, store URL, logo and business profile information
• Information about account owners, employees and authorised users
• Subscription plan and billing history
• Communication and customer support history

4.2 Store customer and order information

When a customer places an order or interacts with a merchant’s storefront, we may process:

• Customer name
• Email address and mobile number
• Billing and delivery addresses
• Products viewed, added to cart or purchased
• Order number, order value and order status
• Shipping, delivery and tracking information
• Discounts, coupons and promotional information
• Refund, cancellation and return information
• Customer notes and merchant communications
• Invoice and tax-related details
• Transaction references and payment status

4.3 Payment and billing information

Agavian may collect billing information required to charge merchants for subscriptions, platform services or other purchased features.

Customer and merchant payments may be processed through third-party payment gateways selected by Agavian or the merchant. Payment information submitted through a payment gateway is also governed by that provider’s privacy policy and terms.

Depending on the payment integration, Agavian may receive limited payment-related information such as:

• Transaction identification number
• Payment status
• Payment method category
• Bank or card network name
• Last few digits of a payment card, where provided
• Refund and settlement status
• Fraud and risk-related indicators

Agavian does not intentionally request merchants or customers to send complete payment card numbers, CVV values, PINs, OTPs or internet banking passwords through email, chat or customer support.

4.4 Device and technical information

We may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Device identifiers
• Language, country and approximate location
• Login time and account activity
• Pages, products and features accessed
• Referral URLs and navigation information
• Application events, error logs and diagnostic data
• Security and fraud detection information

4.5 Communications and support information

When you contact us, we may collect your contact details, support requests, screenshots, attachments, call recordings where lawfully permitted, feedback and other information you provide.

4.6 Information from integrations

When a merchant connects a third-party service, Agavian may receive information from that service in accordance with the merchant’s permissions. Examples may include:

• Payment gateway transaction information
• Shipping and courier information
• Marketplace order information
• Accounting and invoicing information
• Social media and advertising information
• Authentication information from sign-in providers
• Information from merchant-installed applications

5. How We Collect Personal Information

We may collect information:

• Directly from you
• From merchants using the Services
• Automatically through websites, applications and cookies
• From payment, shipping and technology providers
• From connected third-party applications
• From authorised employees and account administrators
• From publicly available business sources
• From fraud prevention, identity verification or security partners

6. How We Use Personal Information

We may process personal information to:

• Create, authenticate and manage accounts
• Provide and operate ecommerce storefronts
• Process and manage orders
• Enable payment, refund and settlement integrations
• Enable shipping, tracking and delivery services
• Manage subscriptions, invoices and billing
• Provide technical and customer support
• Send service-related notices and account notifications
• Personalise account and storefront functionality
• Maintain platform availability and performance
• Detect and prevent fraud, spam, abuse and security incidents
• Investigate violations of our terms and policies
• Monitor and improve products, services and user experience
• Generate analytics, reports and aggregated insights
• Develop and test new features
• Comply with taxation, accounting and legal requirements
• Respond to lawful requests from authorities
• Protect Agavian, merchants, customers and third parties
• Send promotional communications where permitted by applicable law

7. Grounds for Processing

Depending on the applicable law and processing activity, we may process personal information based on:

• Your consent
• The need to perform a contract or provide requested Services
• Compliance with legal obligations
• Legitimate business purposes that do not override applicable individual rights
• Prevention and investigation of fraud or security incidents
• Other lawful grounds available under applicable law

Where processing is based on consent, you may withdraw your consent by contacting us or using the controls provided within the Services. Withdrawal will not affect processing already completed lawfully.

8. Cookies and Similar Technologies

Agavian and its technology providers may use cookies, pixels, local storage, SDKs and similar technologies to operate and improve the Services.

8.1 Essential cookies

These cookies support login, authentication, shopping carts, checkout, security, fraud prevention and other essential features.

8.2 Preference cookies

These cookies remember settings such as language, location, account preferences and storefront selections.

8.3 Analytics cookies

These cookies help us and merchants understand how users interact with websites, storefronts and platform features.

8.4 Advertising cookies

Where enabled by a merchant and permitted by law, advertising technologies may be used to measure campaigns, personalise advertising or understand conversions.

You may manage cookies using your browser settings or a cookie consent tool provided on the relevant website. Disabling essential cookies may prevent parts of the Services from functioning correctly.

9. How We Share Personal Information

We may share personal information only where reasonably necessary for the purposes described in this Privacy Policy.

9.1 With merchants

Customer and order information is shared with the merchant from whom the customer purchases or requests products and services.

9.2 With service providers

We may engage service providers to assist with services such as:

• Cloud hosting and data storage
• Content delivery and website performance
• Authentication and account security
• Payment processing
• Shipping and logistics
• Email, SMS and communication delivery
• Analytics and error monitoring
• Customer support
• Identity verification and fraud prevention
• Accounting, legal and professional services

These providers may process information only for the services they provide to us, subject to applicable contractual and legal requirements.

9.3 With merchant-installed applications

A merchant may install or connect third-party applications to their store. Those applications may access store, customer, order or other information based on the permissions approved by the merchant.

Third-party application providers are responsible for their own privacy and security practices. Merchants should review an application’s permissions and privacy policy before enabling it.

9.4 For legal and safety purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law or a legal process
• Respond to lawful government or regulatory requests
• Enforce our contracts, terms and policies
• Investigate fraud, abuse or security incidents
• Protect the rights, safety and property of relevant parties

9.5 Business transactions

Personal information may be disclosed or transferred as part of a merger, acquisition, financing, restructuring, sale of assets or similar business transaction, subject to appropriate safeguards.

9.6 With your direction or consent

We may share information when you direct us to do so or provide valid consent.

10. Payment Processing

Payment gateway services may be provided by independent third-party payment processors. Their handling of payment information is governed by their respective privacy policies, security standards and contractual terms.

Agavian may transmit transaction details between the merchant and the selected payment provider to support payment initiation, confirmation, refunds, reconciliation and fraud prevention.

Merchants are responsible for selecting, configuring and lawfully using their payment providers and for complying with payment-network and financial-service requirements applicable to their businesses.

11. Merchant Responsibilities

Merchants using the Services are responsible for:

• Providing customers with an accurate storefront privacy policy
• Providing all legally required notices and obtaining valid consent
• Using customer information only for lawful and disclosed purposes
• Responding to customer privacy and data-rights requests
• Keeping account credentials and administrator access secure
• Managing staff, application and integration permissions
• Complying with consumer, ecommerce, tax and data-protection laws
• Avoiding the collection of unnecessary or prohibited information
• Configuring suitable retention and deletion practices for store information

Merchants must not use the Services to collect or process information unlawfully or in a manner that violates Agavian’s terms and policies.

12. International Data Transfers

Agavian, its affiliates and its service providers may process or store information in India or other countries where our infrastructure and service providers operate.

When personal information is transferred across borders, we will take reasonable steps to use appropriate safeguards required by applicable law. These may include contractual protections, security measures and assessments of service providers.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide the Services
• Maintain active merchant and customer relationships
• Complete transactions and fulfil contractual obligations
• Maintain financial
• Provide the Services
• , tax and accounting records
• Prevent fraud and maintain platform security
• Resolve disputes and enforce agreements
• Meet legal and regulatory requirements

Retention periods may vary based on the type of information, the merchant’s settings, the nature of our relationship and applicable legal requirements.

When information is no longer required, we may delete, anonymise or securely isolate it. Information may remain temporarily in backups until the backup is overwritten or securely deleted.

14. Data Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

These safeguards may include:

• Encryption during transmission
• Encryption or other protections for stored information
• Role-based access controls
• Authentication and password protections
• System monitoring and logging
• Backup and recovery procedures
• Vulnerability and security assessments
• Employee confidentiality obligations
• Incident response procedures

No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.

Merchants and authorised users are responsible for protecting their passwords, authentication methods, devices and account access. You should notify us immediately if you suspect unauthorised access to your account.

15. Personal Data Breaches

If we become aware of a personal data breach affecting information within our responsibility, we will investigate the incident, take reasonable steps to limit its impact and provide notifications where required by applicable law.

Where Agavian processes information on behalf of a merchant, we may notify and assist that merchant so the merchant can meet its own legal obligations.

16. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request information about how your personal data is processed
• Request access to your personal data
• Request correction of inaccurate or incomplete information
• Request deletion or erasure of eligible information
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing activities
• Request a portable copy of eligible information
• Opt out of certain marketing communications
• Raise a grievance concerning our processing
• Nominate another individual to exercise eligible rights where provided by applicable law
• Submit a complaint to an appropriate regulatory authority

These rights are not absolute and may be restricted where retention or processing is required for legal, security, contractual or other lawful reasons.

16.1 Requests concerning a merchant’s storefront

If your request concerns an order or information submitted to a merchant’s storefront, contact that merchant first. The merchant is generally responsible for responding to such requests.

We may assist the merchant in locating, correcting, exporting or deleting information processed through the Services.

16.2 Requests concerning Agavian

To exercise rights relating to information controlled directly by Agavian, contact us at agaviansoftware@gmail.com.

We may need to verify your identity and request additional information before completing a request. We may also retain a record of the request for legal and security purposes.

17. Marketing Communications

We may send merchants information about product updates, offers, events and related services where permitted by law.

You may unsubscribe using the link provided in a promotional email or by contacting us. You may still receive essential communications relating to account security, billing, transactions, outages and changes to the Services.

Marketing messages sent by an individual merchant are controlled by that merchant. Customers should contact the merchant or use the unsubscribe option provided in the communication.

18. Children’s Privacy

Agavian’s merchant administration Services are intended for individuals who are legally capable of entering into a binding agreement.

The Services are not intended to enable merchants to collect children’s personal information without the notices, consent and safeguards required by applicable law.

If you believe that information relating to a child has been collected unlawfully through the Services, contact the relevant merchant and notify Agavian at agaviansoftware@gmail.com.

19. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites, applications, payment services, social networks, shipping providers and other services.

Agavian does not control the privacy, security or content practices of independent third parties. You should review their privacy policies and terms before providing information or enabling an integration.

20. Aggregated and De-identified Information

We may aggregate or de-identify information so that it does not reasonably identify an individual. We may use such information for analytics, research, security, reporting, product development and improving the Services.

We will not attempt to re-identify properly de-identified information except where necessary to test our de-identification processes or as permitted by applicable law.

21. Sale of Personal Information

Agavian does not sell personal information for monetary consideration.

We may share information with merchants, processors, integration providers and other parties as described in this Privacy Policy to operate and support the Services.

22. Account Closure and Store Deletion

Merchants may request account closure through the available account controls or by contacting Agavian support.

Before closing an account, merchants should export information they are legally or operationally required to retain. After closure, certain information may continue to be retained for:

• Legal and regulatory compliance
• Tax and financial recordkeeping
• Fraud prevention
• Security investigations
• Dispute resolution
• Backup and disaster recovery processes

Closing an account does not automatically cancel obligations owed to customers, payment providers, shipping providers or other third parties.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, business operations, legal requirements or privacy practices.

The revised version will be published on this page with an updated “Last updated” date. Where required, we may provide additional notice through email, the administration panel or another appropriate method.

Your continued use of the Services after an updated policy becomes effective is subject to the updated policy, except where applicable law requires additional consent.

24. Contact Agavian

For questions about this Privacy Policy or Agavian’s privacy practices, contact:

25. Grievance Redressal

If you have a complaint or grievance concerning Agavian’s handling of personal information, contact our Grievance Officer using the details below:

Please include your name, contact information, the relevant merchant or store name, a description of your concern and any supporting details. We will review and respond within the period required by applicable law.