👟 SoleMart — Privacy Policy

Effective Date: 10 May 2026  |  Last Updated: 10 May 2026

1. Who We Are

SoleMart ("we", "us", "our") operates a B2B wholesale management platform for the Indian footwear industry, accessible at www.solemart.in. This Privacy Policy explains how we handle personal and business data collected through our Platform.

This Policy applies to all users of SoleMart, including Wholesalers (who create accounts directly) and Retailers (whose accounts are created by Wholesalers).

2. What Data We Collect

2.1 Wholesaler Data

Category	Data Collected	Purpose
Account	Business name, owner name, email, password (hashed)	Account creation and login
Business	GSTIN, business address, state, state code, phone	Invoice generation, GST compliance
Banking	Bank name, account number, IFSC	Displayed on GST invoices
Subscription	Plan type, expiry date, Razorpay payment ID	Access control, billing
Activity	Login times, features used	Platform security and improvement

2.2 Retailer Data (entered by Wholesaler)

Category	Data Collected	Purpose
Identity	Business name, owner name, city, phone, email	Retailer portal access, order management
Financial	GSTIN, credit limit, balance, payment history	Ledger management, invoice generation
Access	Login credentials set by Wholesaler	Retailer portal login

2.3 Business Transaction Data

• Product catalogue: names, SKUs, prices, HSN codes, sizes, colours, stock quantities
• Orders: items ordered, quantities, sizes, colours, amounts, approval status
• Payments: amounts, methods (UPI/NEFT/cash etc.), reference numbers, dates
• Invoices: auto-generated GST invoices with all above details

2.4 Technical Data

• IP address, browser type, device type (for security purposes)
• Session tokens stored in your browser's sessionStorage (cleared on tab close)
• Cart data stored in your browser's localStorage (persists across sessions)

2.5 Images

Product images uploaded by Wholesalers are stored on Cloudinary servers using a structured folder format (solemart/t_{wholesalerId}/p_{productId}/). We do not store images on our own servers.

3. How We Collect Data

• Directly from you — when you register, fill in your profile, add products, retailers, record payments, or submit orders
• Through your use of the Platform — activity logs, session data
• From your browser — sessionStorage and localStorage for session persistence and cart retention
• From third parties — Razorpay shares payment confirmation data with us to activate subscriptions

4. How We Use Your Data

We use your data only for the following purposes:

• Providing the Service — managing your account, processing orders, generating invoices, tracking inventory
• Subscription management — verifying payments, enforcing plan limits, sending renewal reminders
• Communication — responding to support queries, sending critical service notifications
• Legal compliance — retaining records as required under applicable Indian law
• Security — detecting and preventing fraud, unauthorised access, and abuse
• Platform improvement — understanding how features are used (in aggregate, not individually targeted)

5. Legal Basis for Processing

We process your data on the following legal bases under applicable Indian data protection law:

• Contract performance — to deliver the services you have subscribed to
• Legitimate interests — to operate, secure, and improve the Platform
• Legal obligation — to comply with applicable laws and regulations
• Consent — where you have explicitly consented to specific processing (e.g., marketing emails)

6. Data Sharing & Third Parties

We share your data only in the following circumstances:

Recipient	Data Shared	Reason
Razorpay	Name, email, phone, amount	Payment processing
Cloudinary	Product images	Image storage & delivery
Railway (hosting)	All data in our database	Cloud infrastructure
Legal authorities	As required by law	Court order, legal obligation

All third-party service providers are contractually bound to protect your data and may only use it for the specified purpose. We do not share your data with any other third party.

6.1 Wholesaler–Retailer Data Relationship

Wholesalers can see all data related to their registered retailers. Retailers can only see their own orders, invoices, and account balance — they cannot see data belonging to other retailers, nor can they see other wholesalers' information.

7. Image Storage (Cloudinary)

Product images are stored on Cloudinary (cloudinary.com), a US-based cloud media platform. Images are:

• Compressed client-side before upload (max 1000px width, JPEG format, ~100–300KB)
• Stored under structured paths: solemart/t_{wholesalerId}/p_{productId}/{1|2|3}
• Served via Cloudinary's CDN with version-based cache control
• Deleted from Cloudinary when you delete the corresponding product

Cloudinary's privacy policy applies to all image data stored on their servers: cloudinary.com/privacy

8. Data Retention

Data Type	Retention Period
Active account data	For the duration of your account
Transaction records (orders, payments)	7 years (as required under Indian GST law)
Inactive account data	90 days after account closure, then deleted
Product images on Cloudinary	Deleted when product is deleted by Wholesaler
Browser session data	Cleared when browser tab is closed
Cart data (localStorage)	Until order is placed or user clears browser data
Subscription payment records	7 years (financial record compliance)

9. Data Security

We implement the following measures to protect your data:

• HTTPS/TLS encryption — all data transmitted between your browser and our servers is encrypted
• PostgreSQL database — hosted on Railway with access controls and automated backups
• Environment variables — all API keys and secrets are stored as environment variables, never in code
• Password protection — we recommend using strong, unique passwords
• Data isolation — each wholesaler's data is logically separated
• No card data storage — all payment card data is handled exclusively by Razorpay

10. Your Rights

As a user of SoleMart, you have the following rights regarding your data:

• Right to Access — you can view all your data directly in the Platform dashboard
• Right to Rectification — you can update your business details, retailer information, and product data at any time
• Right to Export — you can export your data in CSV, Excel, or XML format at any time from the Reports section
• Right to Deletion — you can request deletion of your account and associated data by emailing hello@solemart.in
• Right to Object — you may object to certain processing by contacting us

To exercise any right, contact us at hello@solemart.in. We will respond within 30 days.

Note: We may be unable to delete certain data that we are legally required to retain (e.g., financial transaction records under the GST Act).

11. Cookies & Browser Storage

SoleMart does not use advertising cookies or tracking pixels. We use:

• sessionStorage — to maintain your login session within the browser tab. This is cleared when you close the tab or log out.
• localStorage — to persist your cart items across sessions for the Retailer portal. This is cleared when an order is placed or when you log out.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking tools on the Platform.

12. Children's Privacy

SoleMart is a B2B business platform intended exclusively for adults (18 years and above) engaged in lawful commercial activity. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has provided us with personal information, please contact us immediately at hello@solemart.in and we will delete that information.

13. Cross-Border Data Transfers

Your data is primarily stored on servers located in India (Railway cloud infrastructure). However, some data may be processed or stored outside India due to our use of third-party services:

• Cloudinary — servers in the United States and Europe (for CDN delivery)
• Razorpay — data centres in India

Where data is transferred outside India, we ensure that appropriate safeguards are in place consistent with applicable Indian data protection law.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Notify you by email at your registered address
• Display an in-app notice on your next login

Your continued use of the Platform after such changes constitutes your acceptance of the updated Policy.

15. Contact & Grievance Officer

For any privacy-related queries, complaints, or requests, please contact our Grievance Officer:

• Name: SoleMart Privacy Team
• Email: hello@solemart.in
• Support: support@solemart.in
• Website: www.solemart.in

We will acknowledge your query within 48 hours and provide a substantive response within 30 days of receipt.

If you are not satisfied with our response, you may approach the appropriate regulatory authority under applicable Indian data protection law.