Privacy Policy

SnapCatalog ("we", "us") provides software that lets small sellers publish a product catalog and receive orders. For seller account data we act as the data controller. For customer order data entered into a seller's storefront, the seller is the controller and we act as a processor on their behalf.

SnapCatalog is operated by Syed Abdul Rahman, 6-1-341 Walkertown, Padmarao Nagar, Secunderabad, Telangana 500025, India.

SnapCatalog is a neutral technology platform and an intermediary only. Each storefront is published and controlled by an independent seller. We are not the seller, merchant of record, agent, broker, courier, escrow service or payment processor for any order, and we are not a party to the contract of sale. That contract is formed solely between the customer and the seller.

Where a customer pays online, the payment is a direct UPI transfer from the customer to the seller's own account. SnapCatalog never receives, holds, escrows or routes customer funds and takes no commission on orders. We do not verify sellers' identity, inventory, product quality, pricing accuracy, licences or ability or willingness to deliver, and displaying a store does not constitute any endorsement, recommendation or guarantee by us.

Accordingly, and to the fullest extent permitted by applicable law, SnapCatalog accepts no responsibility or liability for the conduct of any seller or customer or for any loss arising out of dealings between them, including fraud, misrepresentation, impersonation, scams, non-delivery, late delivery, wrong, unsafe, counterfeit or defective goods, cancellations, unpaid or unrecoverable refunds, chargebacks, payments made to an incorrect or unintended recipient, or any dispute over price, tax or service. Customers transact at their own risk and should exercise their own judgement and due diligence — including confirming the recipient name shown by their UPI app and agreeing terms with the seller — before transferring any money. Sellers are solely responsible for fulfilling their orders and honouring their own refund and delivery terms.

Disputes about an order must be raised with the seller directly. We will, on request and where lawful, help the parties identify the relevant order records, and we may warn, unpublish or terminate a seller who breaches our Acceptable Use Policy, but we cannot adjudicate disputes, reverse a completed transfer or compensate either party. Suspected fraud should also be reported to the customer's bank or UPI provider and, where appropriate, to the police or the relevant consumer authority.

Each storefront displays the seller's contact phone number and verified contact email so that customers can contact the seller directly about delivery, product, payment or refund issues. All such issues are the sole responsibility of the seller and must be resolved by the seller. A "Verified" mark means only that the seller has shown control of that email address or phone number; it is not a verification of the seller's identity, business, goods or conduct.

Customers may rate products and delivery after an order is marked delivered, and may report a seller to us. We store ratings (linked to the order) and reports, together with any contact details the reporter chooses to provide, to display store ratings, detect abuse and decide whether to suspend a store. Ratings are shown publicly in aggregate only.

• Seller account data: name, email address, hashed password, plan, and security settings such as two-factor enrolment.
• Store data: store name, slug, description, contact phone/WhatsApp number, delivery and payment preferences, branding images, and product listings.
• Customer order data: name, phone number, delivery address, order notes, cart contents, order totals, payment method and payment reference.
• Payment destination data: the UPI ID a seller asks us to display to their customers, and any payment instructions they write.
• Technical data: IP address, browser and device information, timestamps, and error diagnostics generated when you use the site.
• Local storage: your cart is stored in your own browser and never leaves your device until you submit an order.

We do not knowingly collect data from children under 13 (or the minimum age in your country), and we do not collect special-category data such as health or biometric data. We never ask for, and you must never enter, a UPI PIN, OTP, full card number or bank password anywhere on SnapCatalog.

• To provide the service and perform our contract with you: accounts, storefronts, carts, checkout and order management.
• Legitimate interests: securing the platform, preventing abuse and fraud, aggregate product analytics, and improving features.
• Consent: optional communications and non-essential cookies, where applicable.
• Legal obligation: tax, accounting and responding to lawful requests.

We share data only with service providers needed to run SnapCatalog: our hosting and database provider, our transactional email provider, and — for seller subscription billing — our payment provider. Providers are bound by contract to process data only on our instructions. We never sell personal data or share it for cross-context behavioural advertising.

When a customer or seller chooses to send an order summary or payment confirmation over WhatsApp, that message and its contents are handled by WhatsApp under its own privacy policy. A customer's order details are shared with the seller they ordered from, because the seller needs them to fulfil the order.

Our providers may process data in countries other than yours. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

• Seller accounts and stores: kept while the account is active, then deleted or anonymised within 90 days of a deletion request.
• Orders: kept while needed for the seller's records and any legal or tax retention period.
• Security and error logs: typically up to 12 months.

Depending on where you live, you may have the right to access, correct, delete, port or restrict your data, to object to processing, and to withdraw consent. Sellers can edit or delete most data directly from the dashboard; anything else can be requested by email and we respond within 30 days. Customers should contact the seller they ordered from first; we will assist that seller as their processor.

If you are in the EEA or UK you may also complain to your local data protection authority.

We use encrypted transport (HTTPS), hashed passwords, row-level database access rules so sellers can only reach their own records, optional two-factor authentication, and session-revocation controls. No system is perfectly secure; if a breach affects your personal data we will notify affected users and regulators where legally required.

We may update this policy. Material changes will be announced in-app or by email before they take effect, and the "last updated" date above will change.