Privacy Policy

Effective Date: June 11, 2026

1. Who we are

LaunchGrid (“we”, “us”) provides an ecommerce platform that lets merchants create and operate online stores. This policy explains what data we collect, why, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data we collect

Merchant account data: name, email, password (hashed), business name, GSTIN (if provided), WhatsApp number, and payment configuration (UPI ID; Razorpay keys are stored encrypted).

Store visitor data (on merchant storefronts): anonymous usage events (page views, product views, cart activity), a random session identifier, referrer URL, and campaign (UTM) parameters. We do not require store visitors to create accounts.

Buyer order data: name, phone, email, and delivery address — collected at checkout solely to fulfil the order, and shared with the merchant you are buying from.

3. Roles under the DPDP Act

For merchant account data, LaunchGrid is the Data Fiduciary. For end-customer data collected through a merchant's store, LaunchGrid acts as a Data Processor on behalf of the merchant, who is the Data Fiduciary for their customers.

4. Cookies, analytics & advertising

We use essential cookies to keep you logged in. On our own marketing pages we use Google Tag Manager and analytics tools to understand how visitors use the site and to measure advertising campaigns. You can decline non-essential cookies via the consent banner.

Merchant storefronts: merchants may connect their own Meta Pixel or Google Analytics to their store. When a merchant enables these, standard ecommerce events (product views, cart adds, purchases) on that store are sent to the merchant's ad accounts under the merchant's own privacy responsibility. Look for the store's own privacy policy linked in its footer.

5. Third-party processors

We share data only with service providers needed to run the platform: Supabase (database hosting), Vercel (web hosting), Razorpay (payment processing), Resend (transactional email), and Sentry (error monitoring). Each processes data under contract and only on our instructions. We never sell personal data.

6. Retention

Account data is retained while your account is active and for up to 90 days after deletion to handle disputes and legal obligations. Order records may be retained longer where tax law (GST) requires it.

7. Your rights

You may request access, correction, or erasure of your personal data, withdraw consent, or nominate a representative, by writing to privacy@launchgrid.in. We respond within 30 days.

8. Grievance Officer

As required by the DPDP Act and IT Rules, grievances may be addressed to our Grievance Officer at grievance@launchgrid.in. We acknowledge complaints within 48 hours and resolve them within 30 days.

9. Changes

We will notify registered merchants by email of material changes to this policy. Continued use after changes take effect constitutes acceptance.