Privacy Policy

Seller7 Studio (“Seller7”, “we”, “us”) is an AI product-image service for small-business sellers, operated as a VertexVista product from India. This policy covers the website and app at www.seller7.in.

Account details. When you sign up we collect your name, email address and a password. Your password is stored only as a one-way bcrypt hash — we cannot see or recover it, only reset it.

Content you upload. Product photos (JPG, PNG or WebP, up to 5 MB) and the optional text instruction you attach to a generation request.

Payment records. When you buy credits, Razorpay processes the payment. We store the credit pack, amount, currency, payment status and Razorpay's order/payment identifiers — never your card number, UPI PIN or banking credentials.

Messages you send us. If you use the contact form, we store the name, email, subject and message you submit, along with the IP address the message was sent from, in our database — so we can read and reply to it, and to prevent abuse of the form.

Usage & technical data. Standard server logs (IP address, browser type, request timestamps) used for security, rate limiting and abuse prevention, plus your credit balance and generation activity.

We use your data only to run the service:

• to create and secure your account and sign you in;
• to generate your creatives — your photo and instruction are sent to our AI partners solely to fulfil your request;
• to process credit purchases and maintain your balance;
• to send transactional email only, such as password-reset links — we do not send marketing email;
• to read and reply to messages you send via the contact form;
• to prevent fraud and abuse, and to fix problems;
• to meet legal obligations such as tax and accounting.

We do not sell or rent your personal data to anyone.

Your uploaded photo is processed in memory: it is analysed to plan four creative scenes, images are generated, and the results are returned directly to your browser. We do not permanently store your uploaded photos or the generated creatives on our servers — download the ones you want to keep. If we add a cloud library feature to save your work, this policy will be updated first and storage will be clearly indicated in the app.

Generation is powered by third-party AI providers (listed in section 7). They receive only what is needed to fulfil your request, process it under their API terms, and we never use your images to train models of our own. The creatives you generate are yours to use commercially.

All payments are handled by Razorpay under their own privacy policy. Checkout happens in Razorpay's interface; your card, UPI or netbanking details go to Razorpay, not to us. We verify the payment signature, credit your account, and keep the transaction record required for GST invoicing and accounting.

We use a single essential cookie: an httpOnly session (refresh) cookie that keeps you signed in. It is not readable by scripts and is rotated automatically for security. Your theme preference (light/dark) is kept in your browser's local storage.

We currently use no advertising cookies and no third-party analytics cookies. Because we only set cookies that are strictly necessary, there is no cookie-consent banner to click through.

We rely on a small number of processors to run Seller7 Studio:

Your account and payment records live in our managed MongoDB database. Each provider processes data only to deliver its part of the service.

• Account data is kept while your account is active and deleted when your account is deleted.
• Uploaded photos and generated creatives are not retained after your request completes (section 4).
• Contact-form messages are kept until we have resolved them, then periodically cleaned up.
• Payment records are retained as long as Indian tax and accounting law requires.
• Server logs are retained for a limited period for security and troubleshooting.

All traffic is encrypted with HTTPS. Passwords are stored as bcrypt hashes. Sign-in uses short-lived access tokens with rotating refresh tokens — if a used token is ever replayed, the session is invalidated automatically. Sensitive operations are rate-limited, and AI provider keys live only on our servers, never in your browser. No system is perfectly secure, but we design so that a single failure exposes as little as possible.

In line with India's Digital Personal Data Protection Act, 2023, you can:

• Access the personal data we hold about you;
• Correct your name and password anytime from Settings;
• Delete your account and associated personal data by emailing us;
• Complain — raise a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these, email vertexvista0@gmail.com from your registered address. We aim to respond within 7 working days.

Seller7 Studio is a business tool intended for users aged 18 and above. We do not knowingly collect data from children; if you believe a minor has created an account, contact us and we will remove it.

Our hosting, database and AI providers operate global infrastructure, so your data may be processed outside India (for example, in the United States) with safeguards under each provider's terms. By using Seller7 Studio you consent to this processing.

When we change this policy we will update the “Last updated” date above, and for significant changes — such as introducing image storage or analytics — we will notify you in the app or by email before they take effect.

For privacy questions, data requests or grievances, contact our grievance officer at vertexvista0@gmail.com. Seller7 Studio is a VertexVista product, made in India.