01
Who we are
Modulus Seventeen (7th Cross, Tavarekere Rd, BTM 1st Stage, Bengaluru - 560029, Karnataka) builds SELL and BUY. For data we collect to run our own Services we act as the Data Fiduciary. Store owners decide how they use their own customers' data inside SELL; for that data we process it on the store owner's behalf.
02
Data we collect
- Account details: name, mobile number, email and language preference.
- Store owner details: business name, address, GSTIN (optional), KYC documents and bank account details for settlements.
- Business data in SELL: products, stock, bills, expenses, staff, attendance and customer ledgers you choose to record.
- Customer order data on BUY: delivery address, order history, cart and contact number.
- Payment data: transaction ID, amount, status and payment method type (full card numbers and UPI PINs are never stored by us).
- Device & usage data: app version, device model, IP address, crash logs and approximate location (only if you allow it, to show nearby stores or delivery areas).
- Things you send us: support messages, suggestions and call-back requests.
03
How we use it
- To create your account and run SELL and BUY.
- To process orders, payments, T+2 settlements and refunds within 3 business days.
- To send order updates, delivery OTPs and important service messages by SMS, WhatsApp, email or in-app.
- To prevent fraud, keep accounts secure and meet legal, tax and regulatory requirements.
- To improve our products using aggregated, de-identified usage trends.
- To send product news or offers — only if you opt in, and you can opt out anytime.
04
Consent & legal basis
We process personal data with your consent, given when you sign up or place an order, and for certain legitimate uses permitted under the Digital Personal Data Protection Act, 2023 — such as completing a transaction you asked for or complying with the law. You can withdraw consent at any time; this won't affect processing already done, but some Services may stop working without the data they need.
05
Who we share it with
We share only what's necessary, only for the purpose described:
- The store you order from — your name, phone number, address and order details, so it can pack and deliver your order.
- The delivery partner assigned by the store — your name, address and phone number for that delivery only.
- Payment partners and banks — to collect payments, settle store owners and issue refunds.
- Service providers — cloud hosting, SMS/OTP and support tools, bound by contracts to protect your data.
- Authorities — when required by law, court order or to prevent fraud or harm.
We never sell or rent personal data, and one store can never see another store's business data.
06
Payments data
Online payments are processed through the Modulus Seventeen payment gateway with PCI-DSS compliant, RBI-regulated partners. Card details and UPI PINs are entered on our partners' secure pages and are never stored on our servers. We keep transaction records needed for settlements, refunds, accounting and tax law.
07
Storage & security
Your data is stored on secure cloud servers located in India. We use encryption in transit (TLS) and at rest, role-based access for our team, OTP-based login and regular security reviews. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as required by law.
08
How long we keep it
We keep personal data only as long as your account is active or as needed to provide the Services. When you delete your account, we erase or anonymise your data, except records we must retain by law — such as invoices and transaction records, which are generally kept for up to 8 years under Indian tax laws.
09
Your rights
- Get a summary of the personal data we hold about you and how it's used.
- Correct, complete or update inaccurate data.
- Ask us to erase your data, or export your SELL business records.
- Withdraw consent and opt out of marketing.
- Nominate someone to exercise these rights on your behalf.
- Raise a grievance with us, and if unresolved, with the Data Protection Board of India.
Write to sarfarazahmedkl@modulusseventeen.com from your registered email or contact us with your registered mobile number. We'll verify your identity and respond within 30 days.
10
Cookies & analytics
Our website uses essential cookies to work properly and, with your permission, privacy-friendly analytics to understand which pages are useful. We don't use your data for third-party advertising profiles. You can block or clear cookies in your browser settings.
11
Children
Our Services are meant for people aged 18 and above. We don't knowingly collect personal data from children. If you believe a child has shared data with us, contact us and we'll delete it.
12
Changes to this policy
We'll update this policy when our Services or the law changes, and show the new "Last updated" date at the top. For material changes we'll notify you in the app or by SMS/email before they take effect.
13
Grievance Officer
For any privacy question, request or complaint, contact our Grievance Officer. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.