Storecub
Legal

Privacy Policy

We built Storecub to help Instagram sellers grow their business. Here is exactly how we handle your data — clearly, honestly, without the legalese.

Effective: May 25, 2026
Applies to storecub.com
Governed by Indian IT Act 2000
01

Who We Are

Storecub ("we", "us", "our") is a SaaS platform that helps Instagram sellers create product links, manage orders, and accept payments. Storecub is operated by ArunKumar V.

This Privacy Policy applies to all users — whether you are a seller (someone who creates a store on Storecub) or a buyer (someone who purchases from a Storecub store).

By using Storecub, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our platform.

02

What We Collect

Information you provide directly

🏪
Sellers

Name, email, password, Instagram handle, phone, store name, UPI IDs, payment QR codes, product details and images, shipping address, Razorpay account ID (if connected via OAuth)

🛍️
Buyers

Name, phone number, email (optional), delivery address, order details and payment method used

📱
WhatsApp

Phone numbers used for order notifications and abandoned cart recovery sent via WhatsApp Business API — Pro sellers only

Information collected automatically

Product page views and click counts (aggregated, not personal)
Device type and browser when you visit Storecub
IP address for security and fraud prevention
Order timestamps and transaction metadata

Payment information

Storecub supports two payment methods:

Manual UPI (all plans) — Payments go directly from buyer to seller via GPay, PhonePe, or QR code. Storecub does not process or store these payments. Storecub only records the payment method used (e.g. GPay) for order records.

Razorpay (Pro plan only) — Pro sellers connect their own Razorpay account via OAuth. Payments go directly into the seller's Razorpay account. Storecub stores only the OAuth connection tokens (encrypted) and the Razorpay account ID. Storecub never stores card numbers, UPI PINs, or bank account details.

Razorpay charges their standard payment processing fee (~2% + 18% GST on that fee) on transactions processed through Razorpay checkout. Storecub does not charge any additional transaction fees. Storecub only charges the subscription fee of your chosen plan.

03

How We Use Your Information

To run the platform — create your store, manage products, process orders
To send notifications — WhatsApp alerts for new orders, status updates, and low stock
To show order tracking — buyers can track orders via unique order links
To prevent fraud — rate limiting on orders, detecting suspicious activity
To improve Storecub — aggregated analytics to understand which features are used most
To comply with Indian law — tax records, GST compliance as required
To process Razorpay payments — using seller's OAuth access token to create payment orders on their behalf (Pro sellers only)
To recover abandoned carts — saving partial checkout data to help buyers complete their purchase (Pro sellers only)

We do not sell your personal data to third parties. We do not use your data for advertising. Storecub is completely ad-free.

04

Who We Share Data With

We share data only with trusted service providers who help us run Storecub:

Infrastructure and Storage

Supabase — database, authentication, and file storage
Bolt — web hosting and deployment

Communication

WATI — WhatsApp Business API for order notifications and abandoned cart recovery (Pro sellers only)

Payment Processing

Razorpay — Pro sellers connect their own Razorpay account via OAuth. Buyer payment data is handled directly by Razorpay under their own privacy policy. Storecub only facilitates the OAuth connection and stores the seller's access token securely.
Razorpay applies their standard payment processing charges (~2% + 18% GST on that fee). Storecub does not charge any additional transaction or platform fees beyond the subscription fee of your plan.

Between Sellers and Buyers

When you place an order, your name, phone number, and delivery address are shared with the seller so they can fulfil your order. This is essential to the service.

All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

05

Data Storage and Retention

All data is stored on Supabase infrastructure with encryption at rest and in transit (TLS/SSL)
Seller account data is retained as long as the account is active
Order data is retained for 7 years to comply with Indian GST and tax regulations
If you delete your account, personal data is deleted within 30 days except where required by law
Product images are stored in Supabase Storage with public read access
Razorpay OAuth tokens are stored encrypted and automatically refreshed before 90-day expiry
Abandoned cart data is retained for 30 days then automatically deleted
OAuth states used during Razorpay connection expire in 10 minutes and are purged hourly
06

Cookies and Local Storage

Storecub uses minimal cookies and browser storage:

Authentication session — to keep you logged in as a seller (essential, cannot be disabled)
Cart data — stored in your browser so your cart persists across page reloads
Sidebar preference — whether your dashboard sidebar is collapsed or expanded
Checkout session data — temporarily stored in localStorage during checkout, deleted after order is placed
Abandoned cart session ID — stored in sessionStorage to track partial checkouts

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

07

Your Rights

Under the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023 (India), you have the right to:

Access — request a copy of all personal data we hold about you
Correct — update incorrect information via your Settings page
Delete — request deletion of your account and personal data
Portability — export your order history and product data as CSV
Withdraw consent — opt out of WhatsApp notifications at any time via Settings

To exercise any of these rights, email us at support@storecub.com. We will respond within 30 days.

08

Security

All data is encrypted in transit using TLS 1.3
Passwords are hashed using bcrypt — we never store plain text passwords
Seller payment details (UPI IDs) are only accessible to authenticated sellers
Order access tokens are randomly generated 32-character hex strings
Row-level security (RLS) is enabled on all database tables
Razorpay OAuth access tokens are stored server-side only — never exposed to browsers
Public Razorpay tokens used at checkout are read-only and cannot initiate payouts or refunds
Payment amounts are always calculated server-side — frontend values are never trusted
Replay attack protection — each Razorpay payment ID can only be used once

If you discover a security vulnerability, please report it responsibly to support@storecub.com

09

Children's Privacy

Storecub is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

10

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

Update the "Last updated" date at the top of this page
Send a notification to registered sellers via email
Show an in-app banner for 7 days after the change
11

Contact Us

If you have any questions about this Privacy Policy, reach out to us:

Storecub Support

We typically respond within 1 to 2 business days.