Privacy Policy

Last updated: 28 July 2026 · Version 1

1. Two different roles

This policy covers data StoreMink holds as a controller — your merchant account, your billing, your use of our dashboard.

For the personal data your customers give to your store — names, addresses, order history — the merchant is the controller and StoreMink is a processor acting on their instructions. If you shopped at a store built on StoreMink and want your data changed or removed, contact that store first; we will assist them.

2. What we collect

Account data: name, email address, phone number, password (hashed — we never see it in the clear), and the business location you give at signup.

Store data: what you create in the product — products, pages, orders, customers, and settings.

Usage and technical data: IP address, browser and device information, and logs of requests, errors and emails sent. Some of this is security evidence rather than analytics — for example, we record the IP and browser used when someone accepts our Terms.

Payment data: we do not store card numbers. Payments are handled by payment providers; we store only identifiers and status returned by them.

3. Why we use it

To provide and secure the service; to bill you; to send transactional messages you need (order alerts, security notices, billing); to support you when you ask; to detect abuse and fraud; and to meet legal obligations.

We do not sell personal data.

4. Who we share it with

Service providers who process data on our behalf under contract, currently including: Google Cloud (hosting, database, file storage), Google Identity Platform (authentication), Resend (email delivery), Razorpay (payments), and Google Maps (address lookup, when used).

We may disclose data where required by law, or to protect the rights and safety of our users or the public.

5. Where it is held, and for how long

Data is hosted on Google Cloud infrastructure. Some providers may process data outside your country; where they do, we rely on the safeguards those providers offer.

We keep data for as long as your account is active, then for a period afterwards where we need it for legal, tax or dispute-resolution reasons. Operational logs are pruned on a rolling basis — activity records after one year, notification and email records after ninety days.

6. Your rights

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a use. Write to support@storemink.com and we will respond within the period the applicable law allows.

Some data cannot be deleted on request — a record that you accepted our Terms, or an invoice we must keep for tax, are examples.

7. Security

We use encryption in transit, tenant isolation enforced in the database, hashed credentials, and least-privilege access. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

8. Children

The service is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes and contact

We publish each version of this policy with a version number and effective date. Questions or requests: support@storemink.com.