Skip to content

Privacy Policy

How we collect, use, and protect your data.

Last updated 12 July 2026
The Storemate is a software-as-a-service e-commerce platform operated by Adhirohaah Industries, a sole proprietorship of Yashh Mittal (GSTIN 07BDZPM9464M1ZA), based in Delhi, Delhi – 110032, India ( “The Storemate”, “we”, “us”). This Privacy Policy is an electronic record under the Information Technology Act, 2000 and does not require any physical or digital signature. Full postal address available on request. Questions? Email hi@thestoremate.com.

1Who we are and scope

This Privacy Policy explains how Adhirohaah Industries (The Storemate), the Data Fiduciary, collects, uses, shares and protects your personal data when you use our platform. It is published under the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

This policy covers merchants and users of The Storemate. For personal data of your own customers that we process on your behalf, you are the Data Fiduciary and we act as a Data Processor — see section 6.

2Data we collect

We collect the following categories of personal data:

  • Account details — your name, email address and phone number.
  • Store and business information you provide — including business name, GSTIN and payout details.
  • Billing and payment information — processed by our third-party payment gateway; we do not store your full card details.
  • Usage and technical data — IP address, device and browser information, log data, and cookies needed to run and secure the service. Where you accept analytics cookies, this also includes which pages you visit and which setup steps you complete.
  • Communications — messages you send us for support or enquiries.

3How we use your data

We use your personal data to provide, maintain and secure the service, process billing, send transactional and account emails, provide support, comply with legal obligations, and improve the product.

4Legal basis and consent

Under the DPDP Act, we process your personal data on the basis of the consent you give when you create an account and use the service, and for legitimate uses permitted by law. You may withdraw your consent at any time by contacting us; withdrawing consent needed to run the service may mean we can no longer provide it to you.

5Sharing and disclosure

We share personal data with Data Processors that help us run the service (such as hosting, email delivery and payment processing) under contract, and where required by law, regulation or valid legal process, or in connection with a business transfer. We do not sell your personal data.If you accept cookies, we tell Meta Platforms when you sign up, create a store, or pay for your first plan, so we can measure our advertising. We send a one-way scrambled (hashed) form of your email address and account number, Meta’s cookie identifiers, your browser type and, when you sign up or create a store, your IP address, and, for a payment, its amount. Meta cannot read your email from the hashed form, but can match it to a Meta account you already have. We send nothing if you reject cookies on thestoremate.com, or if your browser sends a Global Privacy Control signal. If you withdraw later, or turn on Global Privacy Control, we stop from then on, with one exception: the payment for a store’s first plan is still reported if you had accepted when you created that store.Ads on Facebook and Instagram. If you receive marketing emails from us, we may send Meta a one-way scrambled (hashed) form of your email address so that we can show you relevant ads for The Storemate on Facebook and Instagram, or find people similar to our customers. If you unsubscribe from marketing emails, we take you off these lists, normally within a day. If you have an account with The Storemate, we also send the hashed form of your account email so that we do not show you ads inviting you to sign up; this list is kept for as long as you have an account, whether or not you receive marketing emails, and is never used to show you ads. Meta uses the hashed form only to match it to a Meta account you already have and deletes it if there is no match; it still counts as your personal data. To stop us using it to show you ads, unsubscribe from marketing emails; to be removed from the sign-up exclusion list, delete your account with The Storemate.

6Data of your customers (our processor role)

When you use The Storemate to run a store, we process personal data of your customers (such as their names, contact details and order information) on your behalf and on your instructions. For that data you are the Data Fiduciary and we act as a Data Processor: we process it only to provide the service to you and in line with this policy and applicable law.

7Data security

We maintain reasonable security practices and procedures as required under Rule 8 of the SPDI Rules, 2011, including encryption of data in transit and access controls, to protect your data against unauthorised access, disclosure or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8Data retention

We keep your personal data for as long as your account is active and for up to 30 days after your account is closed, after which it is deleted or anonymised — except where we are required to retain records for longer under applicable law (for example, tax and GST invoice records, which are retained for the statutory period of around 8 years).

9Your rights

Under the DPDP Act, as a Data Principal you have the right to:

  • Access a summary of the personal data we process about you.
  • Seek correction, completion or updating of your personal data.
  • Seek erasure of your personal data.
  • Withdraw consent and nominate another person to exercise your rights.
  • Grievance redressal (see section 12).

To exercise any of these rights, email hi@thestoremate.com. We will respond within 30 days. You may also lodge a complaint with the Data Protection Board of India.

10Children’s data

The service is intended for business users aged 18 and over. We do not knowingly process the personal data of children (persons under 18) without verifiable consent of a parent or lawful guardian as required under the DPDP Act.

11Cookies

We use cookies for authentication (sessions) and essential functionality, and — only where you have accepted them — optional Google Analytics cookies that tell us how the platform is used so we can improve it. We send Google no directly identifying information and use these cookies for no advertising purpose. With the same choice, Meta’s advertising cookies measure our own ads, as described in section 5 and in our Cookie Policy. You can change or withdraw that choice at any time. For details, see our Cookie Policy.

12Grievance Officer and contact

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are set out below. You may contact the Grievance Officer for any complaint or query regarding the service or your personal data.

Grievance Officer: Yashh Mittal
Adhirohaah Industries
Delhi, Delhi – 110032, India

We acknowledge every grievance within 24 hours and endeavour to resolve it within 15 days of receipt.