Privacy policy
ShopShare (“we”, “us”) is run by ShopShare. This policy explains what personal data we handle when you use shopshare.in, the ShopShare owner app (web and Android), and the shop pages we host at *.shopshare.in and on sellers' own domains. We act as the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023 for data about shop owners. For buyers visiting a shop, both we and the seller who runs that shop make decisions about the data, as explained below.
1. If you run a shop (shop owners)
We collect:
- Account details: your email address and password. We store the password only as a salted hash, never in readable form.
- Your WhatsApp number, so buyers can message you through the WhatsApp button. It isn't shown on your shop page.
- Shop content: shop name, description, city, logo, product names, prices, descriptions, photos and videos, and your links (social media, Google Business Profile, footer links).
- Your shop's location, only if you set it (by searching your area or tapping “Use my current location”), and how far you deliver. Buyers see only the distance to your shop, never your exact location.
- Team members you add to your shop (their ShopShare account).
- Tracking IDs you choose to add: a Meta Pixel ID and a Google Analytics ID.
- Security data: sign-in sessions, failed sign-in counts, and the result of the Cloudflare Turnstile check that blocks bots.
- Notifications: the alerts we create for your shop (such as “New WhatsApp enquiry”) and, only if you turn on phone alerts, the push address your browser or phone gives us to deliver them.
We use this to run your account and publish your shop, keep the service secure, stop abuse, contact you about your account, and provide paid add-ons you ask for.
2. If you visit a shop (buyers)
You don't need an account to browse a shop, and we don't ask for your name, phone number or address.
- Your area, for “near you” on ShopShare Market: an approximate location from your internet connection, or your phone's location if you tap “Use my current location”. We use it only to sort and filter shops by distance and don't store it with your identity.
- WhatsApp taps. When you tap a WhatsApp button we record which shop and product it was for, the size you picked, the time, and the ad campaign name from the link you arrived through (if any). We don't record who you are. Sellers see these as totals, such as “14 chats this week”.
- Visits. We count how many people visit each shop and product per day, so sellers see totals like “25 visitors today”. A cookie holding only today's date stops us counting the same visit twice. We don't record who you are.
- Your WhatsApp conversation happens in WhatsApp, between you and the seller. We never see it. The seller handles your order, payment and delivery, and is responsible for the details you share with them there.
- Reports. If you report a shop, we store your reason and comments, and a one-way hash of your IP address so we can spot repeated abuse reports. We don't store the IP address itself.
- Seller-added tracking. If a seller adds a Meta Pixel or Google Analytics ID, their shop pages load Meta's or Google's code. That code may set cookies and send Meta or Google information about your visit, such as pages viewed and WhatsApp taps, under those companies' own privacy policies. The seller chooses to turn this on.
3. Cookies
| Name | Where | Why | Lasts |
|---|---|---|---|
| ss_session | app.shopshare.in | Keeps shop owners signed in | 30 days |
| ss_vd | Shop pages | Holds today's date so a visit is counted once a day | 2 days |
| ss_c | Shop pages | Remembers the ad campaign you arrived from, so a later WhatsApp tap is credited to it | 30 days |
| Meta / Google cookies | Shop pages, only if the seller added a Pixel or Analytics ID | Advertising and analytics for that seller | Set by Meta or Google |
4. Who we share data with
- Cloudflare, Inc. hosts ShopShare and stores our database, photos and videos. It processes data on our behalf, on servers that may be outside India.
- Google Fonts serves the typefaces on our pages, so your browser contacts Google's servers.
- Meta and Google, only where a seller has added their Pixel or Analytics ID, as described above.
- Authorities, when the law requires it, or to protect people from fraud or harm.
We don't sell personal data.
5. How long we keep it
- Owner accounts and shop content are kept until you delete your account. We then delete them, apart from records we must keep by law.
- WhatsApp tap records are kept while the shop exists, so sellers can see trends over time.
- Reports and moderation records are kept for as long as we need them to deal with abuse.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your personal data, withdraw consent, nominate someone to act for you, and raise a grievance. Shop owners can edit most of their data directly in the app and can delete their account at any time in Settings › Delete account (see how to delete your account). For anything else, email automatyaa@gmail.com. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
7. Security
Data is encrypted in transit (HTTPS), passwords are hashed, and access is limited to the people who need it to run the service. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.
Error reports: when the app or a shop page hits an error, we record the error message, the page and your browser or phone type so we can fix it. These reports don't include your name, number or messages and are kept for up to 30 days.
8. Children
You must be 18 or over to open a shop. We don't knowingly collect data from children.
9. Changes
If we change this policy in a way that matters, we'll update the date above and tell shop owners by email or in the app.
10. Contact and Grievance Officer
Questions: automatyaa@gmail.com
Grievance Officer: ShopShare Support, automatyaa@gmail.com