Privacy Policy

Last updated: February 14, 2026

1. Introduction

Storevana (“we,” “us,” or “our”) operates the storevana.shop platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform as a merchant or as a shopper visiting a Storevana-powered store.

2. Information We Collect

Account information. When you create an account we collect your name, email address, and password. Merchants also provide business details such as store name, address, and tax identifiers.

Transaction data. We process order details including items purchased, shipping addresses, payment method (last four digits only), and order history. Full payment credentials are handled by our PCI-compliant payment processors (Stripe, Razorpay) and never stored on our servers.

Usage data. We automatically collect device type, browser, IP address, pages viewed, and actions taken to improve performance and detect fraud.

Uploaded content. Product images, descriptions, and other media you upload to your store or Virtual Studio are stored on our infrastructure.

3. How We Use Your Information

  • Provide, operate, and maintain the platform and your online store.
  • Process transactions and send order confirmations and shipping updates.
  • Generate AI-powered product imagery and campaign content via Virtual Studio.
  • Prevent fraud, abuse, and unauthorized access to accounts.
  • Analyze usage patterns to improve features and reliability.
  • Send service-related communications (not marketing, unless you opt in).

4. How We Share Your Information

We do not sell your personal information. We share data only as follows:

  • Payment processors (Stripe, Razorpay) to complete transactions.
  • Infrastructure providers (hosting, CDN, email delivery) under strict data-processing agreements.
  • AI service providers for Virtual Studio image and video generation, subject to their privacy commitments.
  • Law enforcement when required by applicable law or to protect rights and safety.

5. Data Retention

We retain account data for as long as your account is active. Transaction records are kept for the period required by applicable tax and commercial law (typically 5–7 years). You may request deletion of your account and associated data at any time by contacting us.

6. Security

We use industry-standard measures including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security audits. However, no method of transmission or storage is 100% secure.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies (if any) are anonymized.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, restrict processing, or port your data. To exercise these rights, contact us at the address below.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the platform. Continued use after changes constitutes acceptance.

10. Contact

Questions about this policy? Email us at [email protected].