This Privacy Policy applies to EcomShadow, a product of
Raoofa Innovation Pvt. Ltd. ("we", "us", "our"). By creating an account or using EcomShadow at
ecomshadow.com, you agree to the terms described in this policy. Please read it carefully.
EcomShadow is an AI-powered seller productivity platform designed for Indian e-commerce sellers operating on marketplaces including Amazon India, Flipkart, Meesho, Myntra, Snapdeal, and others. The platform offers tools for keyword research, product research, listing building, listing analysis, inventory management, and AI-powered seller insights.
EcomShadow is owned and operated by Raoofa Innovation Pvt. Ltd., a company incorporated under the laws of India. We are committed to protecting the personal and business data of every seller who uses our platform, in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian laws.
We collect only the data necessary to provide and improve our services. This includes:
| Category | What We Collect | Source |
|---|
| Account Info | Name, email address, phone number, business name, password (hashed) | You provide directly on sign-up |
| Marketplace Data | Seller IDs, store names, product listings, SKUs, pricing, categories, inventory levels, order history, marketplace performance metrics | Marketplace APIs (via your authorization) or manual import |
| API Credentials | API keys and tokens used to connect your marketplace accounts to EcomShadow | You provide during account connection |
| Usage Data | Features used, pages visited, actions taken within the platform, session duration, IP address, device/browser type | Automatically collected during use |
| AI Interaction Data | Inputs you provide to AI-powered features (e.g., listing builder prompts, product descriptions, keyword queries) | You provide when using AI features |
| Payment Data | Subscription plan, billing details (processed securely by payment gateway; we do not store card numbers) | Provided at checkout |
| Communications | Messages sent to our support team, feedback, and survey responses | You provide when contacting us |
We use the data we collect for the following purposes:
- Provide our services — Power all platform features including inventory management, listing builder, keyword research, product analytics, and AI-generated suggestions.
- Sync marketplace data — Connect to your authorized marketplace accounts to fetch and mirror inventory, orders, and listing data in real time.
- Generate AI insights — Process your product and listing data through AI models to generate SEO-optimized listings, keyword suggestions, and seller recommendations.
- Process orders and notifications — Track order status and trigger inventory updates through our processing pipeline.
- Improve our platform — Analyze aggregated, anonymized usage patterns to improve features, fix bugs, and enhance performance.
- Customer support — Respond to your queries, troubleshoot issues, and maintain your account.
- Billing and subscriptions — Manage your plan, process payments, and send invoices or renewal reminders.
- Legal compliance — Meet our obligations under applicable Indian laws, including the DPDPA 2023.
- Security — Detect and prevent fraud, unauthorized access, and abuse of our platform.
We do not sell your personal or business data to any third party. Your marketplace data and seller information are used solely to provide the EcomShadow service to you.
We share your data only in the following limited circumstances:
- Service Providers: We use trusted third-party infrastructure providers to operate EcomShadow. These include:
- Amazon Web Services (AWS) — Cloud infrastructure and order processing queue (SQS)
- Supabase — Database hosting and authentication
- Anthropic (Claude AI) — AI-powered features including listing generation and seller suggestions. Data sent to Anthropic is governed by their privacy policy
- Payment Gateway — For processing subscription payments securely
- Vercel — Frontend hosting and delivery
- Marketplace APIs: When you connect your seller accounts, we interact with Amazon India, Flipkart, Meesho, Myntra, Snapdeal, and other marketplaces on your behalf. Data exchanged is limited to what is necessary to provide the service you requested.
- Legal Requirements: We may disclose your data if required by law, court order, or a competent government authority under applicable Indian law.
- Business Transfers: In the event of a merger, acquisition, or sale of Raoofa Innovation Pvt. Ltd., your data may be transferred to the successor entity. You will be notified of any such change.
All third-party service providers are bound by contractual obligations to protect your data and are prohibited from using it for any purpose other than providing services to us.
Your data is stored on secure cloud infrastructure (primarily AWS and Supabase) with servers located in data centers that comply with international security standards. We implement the following measures to protect your data:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Secure storage of API keys and marketplace credentials (encrypted at rest)
- Role-based access controls — only authorized personnel can access sensitive data
- Regular security reviews of our infrastructure and codebase
- Background job architecture that minimizes live API exposure to marketplace credentials
While we take commercially reasonable steps to protect your data, no system is 100% secure. If you suspect unauthorized access to your account, please contact us immediately at
[email protected].
We retain your data for as long as your account is active or as needed to provide our services. Specifically:
- Account data — Retained for the duration of your account and for up to 90 days after deletion to allow account recovery.
- Marketplace and inventory data — Retained while your account is active. Upon account deletion, this data is purged within 30 days.
- Order and transaction history — Retained for up to 7 years for financial record-keeping as required under Indian law.
- Usage logs — Retained for up to 12 months for security and performance monitoring, then deleted.
- AI interaction inputs — Not stored permanently. Processed in real time and not used to train AI models.
You may request deletion of your data at any time by contacting us (see Section 12). We will process deletion requests within 30 days, subject to any legal retention requirements.
Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights with respect to your personal data:
- Right to Access — Request a copy of the personal data we hold about you.
- Right to Correction — Request correction of inaccurate or incomplete personal data.
- Right to Erasure — Request deletion of your personal data, subject to legal retention requirements.
- Right to Withdraw Consent — Withdraw consent for data processing where consent is the legal basis, without affecting the lawfulness of prior processing.
- Right to Grievance Redressal — Raise a grievance with our Grievance Officer (see Section 11). You may also approach the Data Protection Board of India after exhausting internal remedies.
- Right to Nominate — Nominate another individual to exercise your rights on your behalf in case of death or incapacity.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
EcomShadow uses cookies and similar technologies to operate the platform effectively. We use:
- Essential Cookies — Required for login sessions and platform functionality. Cannot be disabled.
- Analytics Cookies — Used to understand how sellers use the platform so we can improve it. Aggregated and anonymized.
- Preference Cookies — Remember your settings and preferences within the platform.
We do not use third-party advertising cookies or sell cookie data to advertisers. You may manage cookie preferences through your browser settings, though disabling essential cookies will impact platform functionality.
EcomShadow is a business productivity tool intended for use by adults (18 years of age or older) who are registered sellers on e-commerce marketplaces. We do not knowingly collect personal data from individuals under the age of 18.
If you believe a minor has provided us with personal data, please contact us at [email protected] and we will promptly delete such information.
We may update this Privacy Policy from time to time as our platform evolves or as required by law. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email or an in-platform notification at least 14 days before the changes take effect
- For significant changes, request fresh consent where required under the DPDPA
Continued use of EcomShadow after the effective date of updated terms constitutes your acceptance of the changes.
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns regarding your personal data:
If you have any questions, concerns, or requests related to this Privacy Policy or how we handle your data, please reach out to us:
This Privacy Policy is governed by the laws of India. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of competent courts in India.