Privacy policy

Evara Ecom Solutions (“Evara”, “we”, “us”) is an e-commerce account management agency based in India. We manage seller accounts on Meesho, Meesho Mall, Flipkart, Amazon, Myntra, quick-commerce platforms (Blinkit, Zepto, Swiggy Instamart) and Shopify on behalf of our clients.

For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as a Data Fiduciary in respect of data collected through this website, and as a Data Processorin respect of marketplace and financial data we access on a client’s instruction under a service agreement.

Registered entity name, CIN, GSTIN and registered address: TODO — to be supplied by the operator.

We collect only what a visitor chooses to give us, plus basic analytics.

Information you submit to us

• Free audit form: your name, WhatsApp number, and the marketplaces you sell on. Optionally your brand or store name, the problems you selected, and a monthly sales range.
• Contact form: your name, WhatsApp number, an optional email address, an optional brand name, and your message.
• Any information you volunteer when you contact us by WhatsApp, phone or email.

Information collected automatically

• Standard server and request logs held by our hosting provider, including IP address, user agent and requested URL. These are used for security and debugging.
• Meta Pixel events, described in section 7 below.

We do not ask for, and you should not send us, payment card numbers, government identity numbers, or marketplace passwords through any form on this website.

When a client engages us to manage their seller account, we access data inside that account in order to perform the service. This is the section most relevant to marketplace platform reviewers.

• Order and transaction data: order IDs, order status, dispatch and delivery timestamps, returns and RTO records.
• Settlement and financial data: payout statements, commission and fee deductions, shipping charges, claim and reimbursement records, TCS and GST deduction summaries.
• Catalogue data: listings, titles, product images, pricing, inventory levels and category mappings.
• Performance data: impressions, clicks, conversion rates, advertising spend and returns.

We do not download, store or process end-customer personally identifiable information. Buyer names, delivery addresses and contact numbers are viewed only inside the marketplace’s own seller interface where a task strictly requires it — for example, responding to a specific customer complaint. This data is never exported, copied into our own systems, retained after the task, or used for any other purpose.

We access marketplace data solely to deliver the contracted service to the seller who owns that account. We do not use it to train models, to build competitive datasets, or for any purpose the client has not instructed.

• To respond to an audit request or enquiry, normally within 24 hours.
• To prepare the free account audit you asked for.
• To deliver contracted account management: reconciling settlements, identifying and filing claims, optimising listings, and managing advertising.
• To produce the reporting we owe a client under their agreement.
• To meet our own legal, tax and accounting obligations.

We do not sell personal data.We do not share it with third parties for their own marketing, and we do not disclose one client’s data to another client. Aggregate figures are never published in a form that identifies a client without that client’s written permission.

• Data in transit is encrypted with TLS. This website is served over HTTPS only.
• Marketplace credentials are never stored in plain text and never stored in this website's codebase or database. Our credential handling is described in full on our security page.
• Client reports and reconciliation working files are held in access-controlled cloud storage, restricted to the team members assigned to that account.
• Website enquiry data is retained for 24 months from last contact, then deleted, unless you became a client — in which case client records are retained for 8 years from the end of the engagement to meet Indian tax and accounting requirements.
• On termination of a client engagement we revoke our access to the client's marketplace accounts and delete working copies of their data within 90 days, except records we are legally required to keep.

We use the following third parties. Each is named individually, with what it processes and why.

• Vercel Inc. — hosts this website and runs its server-side form handling. Processes request logs and the contents of forms in transit.
• Zoho Corporation — our email provider. Lead notifications and all client correspondence are delivered and stored in Zoho Mail.
• Google LLC — Google Workspace and Google Sheets, used for internal record-keeping of enquiries and for client reporting files.
• Meta Platforms, Inc. — the Meta Pixel on this website, and advertising campaigns we run for clients who ask us to. See section 7.

We require every sub-processor to provide protections consistent with this policy. We will update this list before adding a new sub-processor that handles personal data.

This website uses the Meta Pixel, a tracking technology provided by Meta Platforms, Inc. It sets cookies and reports events — page views, and submissions of the free audit and contact forms — back to Meta. We use it to measure whether our advertising is reaching sellers who actually need our help.

Meta may use this data to build advertising audiences. Their handling is governed by Meta’s Privacy Policy.

You can prevent the Pixel from loading by using a browser that blocks third-party trackers, an ad-blocking extension, or your browser’s “do not track” and cookie controls. The website works fully without it. We do not use cookies for any other advertising or profiling purpose.

If you are in India, the Digital Personal Data Protection Act, 2023 gives you the following rights over personal data we hold about you as a Data Fiduciary:

• The right to access a summary of the personal data we hold about you and how it is being processed.
• The right to correction of inaccurate or incomplete data, and to completion or updating of it.
• The right to erasure of your personal data where we no longer need it for the purpose it was collected, or where you withdraw consent.
• The right to withdraw consent at any time, as easily as you gave it.
• The right to nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• The right to grievance redressal — see section 9.

Where we act as a Data Processor for a client, requests about that client’s account data should be directed to the client. We will support them in responding.

To exercise any right above, to ask a question about this policy, or to raise a grievance, contact our data protection contact:

• Email: team@evaraecomsolutions.com — please put “Data request” in the subject line.
• Phone / WhatsApp: +91 92508 15889
• Named grievance officer and registered postal address: TODO — to be supplied by the operator.

We acknowledge every request within 7 working days and aim to resolve it within 30 days.

Our services are sold to businesses. This website is not directed at children, and we do not knowingly collect the personal data of anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

We will update this page when our practices change, and will revise the “last updated” date at the top. Material changes affecting existing clients will also be communicated by email.

Related pages: Security, Terms of service and Refund and cancellation policy.