Privacy Policy
Last updated: October 12, 2026
1. Two roles
- Merchants and our website visitors: we decide how your data is used (we are the "controller").
- Shoppers in our merchants' stores: the store owner decides how their customers' data is used. We process it on their behalf (we are the "processor"). Each store has its own privacy policy; please contact the store for questions about your data there.
2. Data we collect about merchants
- Account details: name, email address, password (stored securely hashed), and login history.
- Store details: store names, addresses, domains, settings, staff members and the content you upload.
- Billing: plan and subscription status. Payments are handled by Paddle.com as Merchant of Record; we do not see or store your full card details.
- Support: messages you send us and notes from support sessions.
- Technical: IP address, browser, device and usage information, used for security and to improve the service.
3. Why we use it
- To provide and secure the service (contract).
- To bill your subscriptions through Paddle (contract).
- To send account, billing and important service messages (contract and legitimate interest).
- To prevent fraud and abuse and keep the platform safe (legitimate interest and legal obligation).
- To send product news if you agree; you can unsubscribe at any time (consent).
4. Support access
To help with a problem, a SellOrchard team member may open a time-limited support session in your store's admin. Support sessions are shown with a banner, expire automatically and are recorded in our audit log.
5. Who we share data with
We use trusted service providers who process data for us under contract, including:
- Paddle.com (subscription payments, invoices and tax)
- Hosting and database providers (such as Vercel, Railway and Neon)
- File storage (such as Cloudflare)
- Email delivery providers
- Error monitoring and analytics tools
We don't sell personal data. We may share data if required by law or to protect our rights and users.
6. International transfers
Our providers may store data in other countries, including the United States and the European Union. Where required, we use appropriate safeguards such as standard contractual clauses.
7. How long we keep it
We keep account data while your account is open. Store data is kept for 30 days after a store closes, then deleted. Some records (such as billing and audit logs) are kept longer where the law requires or to resolve disputes.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent. Email privacy@sellorchard.com. You can also complain to your local data protection authority.
9. Cookies
Our website and admin use only the cookies and browser storage needed to keep you signed in and remember your preferences. If we add analytics or marketing cookies, we will ask for consent where the law requires it.
10. Security
We use encryption in transit, hashed passwords, access controls, audit logs and regular backups to protect data. No system is perfectly secure, so please use a strong, unique password.
11. Children
SellOrchard is not intended for anyone under 18, and we don't knowingly collect their data.
12. Changes
We may update this policy and will notify merchants of important changes.
13. Contact
Privacy questions: privacy@sellorchard.com · [COMPANY LEGAL NAME], [REGISTERED ADDRESS], Pakistan.