1.What this covers
This policy explains what information Stashq collects when you buy a digital product, run a store, or visit our website. Stashq operates in India and serves buyers and sellers in India, in accordance with Indian law and GST record-keeping requirements.
2.What we collect from buyers
You do not need an account to buy. When you make a purchase, we create a buyer record so we can deliver your files and let you access them later. We collect:
- your email address, which is used to deliver your purchase and give you access to your library;
- your name and phone number, if provided;
- the state you select at checkout (see section 3);
- details of your purchase, payment, tax invoice, and file download timestamps; and
- any refund requests and messages you submit.
If you later create an account using the same email address, your past guest purchases are automatically linked to your account.
3.Your state, and why we need it
During checkout, you must select your state. Under Indian GST law, any online sale to an unregistered customer requires the supplier to record the customer's state on the tax invoice as the place of supply, regardless of the purchase amount.
Your state determines which government receives the GST on your purchase and is printed on your tax invoice. We do not ask for your street address or business registration details.
Your state is saved with your purchase record for invoicing. We never auto-fill or look up your state from an email address entered at guest checkout, so no one can enter your email address at checkout to see where you live.
4.Reviews you write
If you submit a review for a product you purchased, it is published on the product’s public page and includes:
- your star rating and written review;
- the display name you enter on the review form, or “Anonymous” if you leave it blank; and
- the date the review was posted.
Your email address and buyer details are never shown publicly.
Reviews cannot be edited once posted. You can delete your review at any time from your purchase library, which removes it from the product page (though you cannot submit a new review for the same purchase). If your purchase is refunded, the review is removed automatically.
5.What we collect from sellers
- your account profile, uploaded products, descriptions, and files;
- your store name, subdomain, design settings, and preferences;
- your sales records, payout statements, and subscription invoices; and
- your state, which is required on tax invoices Stashq issues for paid seller plans.
Stashq does not store your bank account details. Your bank account and payout verification details are stored directly by our payment provider (Razorpay Route) to process payouts. We also do not ask sellers for a GSTIN.
6.What is collected automatically
- Signed-in devices. For each active session on your account, we record the IP address, browser, operating system, and last active time so you can review active devices in your security settings and sign out remotely.
- Rate limiting. Public actions such as checking store name availability, applying a coupon, or starting checkout use temporary IP-based rate limits to prevent abuse.
- Page analytics. We use Vercel Analytics and Speed Insights to measure aggregate traffic and page performance without building individual user profiles.
Our emails do not track opens or link clicks. We only record delivery bounces and spam complaints so we stop sending to invalid addresses.
7.How we use it
- To deliver purchased files and provide ongoing library access
- To process payments, issue tax invoices, and send seller payouts
- To handle refund requests and payment disputes
- To secure accounts and prevent fraud or abuse
- To send transactional and account emails (see section 9)
- To comply with tax, accounting, and legal obligations
8.Who else processes it
Stashq does not sell your personal information or share it for third-party advertising. We share data only with the infrastructure providers needed to run the platform:
- Razorpay for payments, refunds, and seller payouts (including seller bank details)
- Supabase for authentication and database hosting
- Cloudflare R2 for file storage and downloads
- Resend for transactional email delivery
- Vercel for application hosting and aggregate performance analytics
We may also disclose information when required by law or to establish or defend a legal claim.
9.Email preferences
Sellers can turn off optional notification emails in settings, including purchase updates, product notices, payout notices, and storage alerts.
Essential transactional emails cannot be turned off. These include purchase receipts and download links, refund request updates, notices when a purchased product is being removed, alerts about paused payouts or billing issues, and login or password-reset verification emails.
10.How long we keep it
Account and store data is kept for as long as your account remains open. Product files are kept while the product is listed; if a product is deleted, existing buyers receive a grace period to download their files before they are permanently deleted.
Purchase, invoice, and payout records are retained for 72 months. Indian GST law requires supply and tax records to be kept for 72 months from the due date of the relevant annual return. Account deletion removes your profile and files, while required tax records are retained for this statutory period.
11.Your choices, and contact
- Update your profile, view signed-in devices, and sign out of other sessions from your account settings
- Manage optional email notifications in your notification settings
- Request a copy or deletion of your personal data (subject to the tax retention rules in section 10)
- Close your account at any time
For privacy requests or questions, email hello@stashq.in from the email address associated with your account or purchase.