Privacy policy

Last updated: 9 August 2026

ElestaBiz is operated by ElestaBiz(“we”, “us”). This policy explains what data we collect when you use ElestaBiz — as a seller building a store, or as a shopper buying from a store built on ElestaBiz — and how we use it.

Data we collect

Account data. When you create an account we store your email address, name, and (optionally) your phone number, so you can sign in and we can reach you about your account.

Store & catalog data. Content you add to your store — products, images, prices, pages, and settings — is stored so we can host and render your site.

Order & shopper data.When a shopper places an order on a store, we process the order details and delivery address on behalf of that store’s owner so the order can be fulfilled. Shoppers with an account can also save addresses and see order history.

Payments. Online payments are processed by Razorpay. We never see or store your card, UPI, or bank credentials — we only receive payment status and reference IDs.

Messages.If you contact support, use the in-app help chat, or message our WhatsApp reports line, we process your message (and for WhatsApp, your phone number) to respond. WhatsApp messaging runs on Meta’s WhatsApp Business Platform.

Usage data. We collect first-party analytics for store owners (page visits, referral sources, and orders on their own store) and basic logs needed to keep the service secure and reliable.

How we use data

To provide and improve the service: hosting your store, processing orders, sending order and account notifications by email, answering support requests, preventing abuse, and (where you have enabled an AI-assisted feature) generating content you asked for. We do not sell personal data.

Service providers

We rely on a small set of processors to run ElestaBiz: Supabase (database & authentication), Vercel (hosting), Razorpay (payments), Resend (transactional email), Meta (WhatsApp Business Platform), and Google Firebase (push notifications for mobile apps). Each receives only the data needed for its role.

Cookies

We use cookies for sign-in sessions and core functionality. We do not use third-party advertising cookies. Individual stores may optionally enable their own marketing pixels; those are controlled by the store owner.

Data retention & deletion

We keep data for as long as your account or your order relationship with a store is active. To delete your account and associated personal data, email [email protected] from your registered address and we will action it within 30 days, except where we must retain records (e.g. tax and invoicing) required by law.

Contact

Questions about this policy or your data: [email protected], or use our contact page.