This Privacy Policy explains how SmolBusiness (operated by CoPower Technologies, a Registered Partnership Firm) collects, uses, stores, and protects your information when you use our platform and services — including your seller storefront and order management tools. SmolBusiness is a software platform; we do not process or store customer payments.
This Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made thereunder. By using SmolBusiness, you (as a “Data Principal”) agree to the practices described in this Privacy Policy.
01: Information We Collect
Information You Provide
When you register or use SmolBusiness, we may collect:
- Name, email address, and phone number
- Business and store details (store name, Instagram handle, product listings)
- Shipping address and contact information
- Your store's payment details — your UPI ID, or your Razorpay key ID (encrypted at rest; never your Razorpay key secret in plain text) — shown or used to let your own customers pay you directly (we never receive or hold these payments)
- GST or business registration details (where applicable)
- Order details and, for manual UPI orders, seller-uploaded payment confirmation screenshots
Automatically Collected Information
We may automatically collect:
- IP address, browser type, and device information
- Usage activity, page views, and navigation patterns via PostHog analytics
- Cookies and session identifiers
Payment Information
SmolBusiness does not process, collect, or hold customer payments, and we never see card or bank credentials. Each store uses exactly one payment method, set by the seller: manual UPI — the customer pays the seller directly and may upload a payment-confirmation screenshot, stored alongside the order, which the seller verifies manually — or Razorpay — the customer pays via Razorpay on the seller's own Razorpay account, and Razorpay processes that payment under its own privacy policy, not ours. We may add support for other payment gateways in the future, on the same principle: the gateway processes the payment on the seller's own account, and SmolBusiness does not receive or hold the funds. We retain order amounts for the seller's record-keeping only.
02: How We Use Your Information
We use your information to:
- Set up and manage your seller storefront
- Help sellers receive and manage customer orders
- Display the seller's own payment details (UPI, or route to Razorpay/other gateway) to their customers at checkout
- Send order confirmations, support updates, and platform notifications — including, for eligible sellers, WhatsApp order-status updates to the customer, sent from SmolBusiness's own WhatsApp number and strictly limited to that customer's own order
- Detect fraud, abuse, and policy violations
- Improve platform performance and user experience
- Comply with applicable Indian laws and regulatory requirements
04: Data Security
We implement reasonable technical and organizational measures to protect your information. Data in transit is encrypted via HTTPS. However, no online platform can guarantee absolute security — please protect your account credentials and contact us immediately if you suspect unauthorized access.
In the event of a personal data breach likely to affect you, we will notify you and, where required, the Data Protection Board of India, without undue delay, as required under the Digital Personal Data Protection Act, 2023.
06: Data Retention
We retain your information for as long as your account is active, and as required to fulfill legal, tax, and dispute resolution obligations under Indian law. You may request deletion of your account and associated data at any time.
07: Your Rights
As a Data Principal under the Digital Personal Data Protection Act, 2023, you may request to:
- Access the personal information we hold about you
- Correct inaccurate or outdated information
- Delete your account or request data erasure
- Withdraw consent at any time, as easily as it was given (this does not affect processing already carried out, or processing required by law)
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
- Lodge a grievance with us, and if unresolved, with the Data Protection Board of India
To submit a request or grievance, email our Grievance Officer, Abhinav Gadekar, at support@smolbusiness.in. We will respond as soon as reasonably practicable and in any case within 30 days.
08: Cross-Border Data Transfer
Some of our service providers (including cloud hosting, storage, and analytics infrastructure) may process or store data outside India. Where this occurs, we rely on providers with appropriate security safeguards, consistent with the Digital Personal Data Protection Act, 2023, which permits transfer of personal data outside India except to countries restricted by the Central Government.
09: Third-Party Services
Our platform integrates with third-party services including PostHog (analytics), Instagram, Google APIs, cloud hosting/storage providers, authkey.io (WhatsApp order-status messaging), and — for stores that enable it — Razorpay (or another payment gateway a seller connects). We are not responsible for their privacy practices — please review their respective policies directly.
10: Children's Privacy
SmolBusiness is intended for users who are 18 years of age or older. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal information, we will delete it promptly.
11: Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the platform after updates constitutes acceptance of the revised policy.
12: Contact
For questions regarding this Privacy Policy, reach us at:
Email: support@smolbusiness.in
Registered AddressShop No. 19, Ratan PlaceAgyaramdevi Road, Ganeshpeth Colony
Nagpur 440016, Maharashtra