Privacy Policy
Last updated 15 August 2026 · Applies to the OctoMargin Solution dashboard and this website.
The short version. We connect to your marketplace seller accounts, read your sales and inventory reports, and show them back to you in one dashboard. We do not sell your data, we do not share it with other sellers, and we delete it when you ask us to.
1. Who we are
OctoMargin ("we", "us") provides a marketplace analytics dashboard to sellers in India. We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 for the account information of our own customers, and as a Data Processor for the business data we retrieve on their behalf from marketplaces.
Contact for any privacy question, correction or deletion request: asterorganicsindia@gmail.com
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, username, email, plan, subscription dates | To create and run your account |
| Marketplace business data | Orders, SKUs, quantities, prices, returns, stock levels, listing content, advertising spend and performance | This is the product — it is what the dashboard displays |
| Integration credentials | API client IDs, secrets and refresh tokens for Amazon, Flipkart, Shopify and similar | To fetch your reports on your behalf |
| Technical data | Error messages, the page an error occurred on, browser type, timestamps | To find and fix faults before they affect you |
What we do not collect
- We do not store your marketplace password. Integrations use API credentials or OAuth, never your login.
- We do not collect your customers' names, phone numbers, email addresses or delivery addresses. Where a marketplace report contains them, we discard those columns and keep only the state or region, which we use for regional sales analysis.
- We do not collect payment card numbers. Subscription payments are handled outside the dashboard.
- We do not use advertising trackers or third-party analytics scripts on this site.
3. Amazon data specifically
Where you connect an Amazon account, we access Selling Partner API and Advertising API data only for the seller account you authorise, and only to produce the reports, charts and recommendations shown inside your own dashboard.
- Amazon Information is never shared with any other seller, client or third party.
- It is never used to build cross-seller benchmarks, market research, or any dataset sold or given to others.
- It is never used to train machine learning models.
- Access is encrypted in transit (TLS) and restricted to the workspace belonging to your account.
- You can revoke our access at any time from Amazon Seller Central, and separately ask us to delete the stored copy.
4. How your data is separated
Every customer has their own separate data workspace. One customer's dashboard reads only from their own workspace and has no route to another customer's. Administrative access is limited to the operators of OctoMargin, and is used only to provide support and fix faults.
5. Where it is stored, and for how long
- Data is stored on Google Cloud infrastructure (Google Workspace / Google Apps Script), which encrypts data at rest and in transit.
- We keep your business data for as long as your subscription is active, plus 90 days after it ends, so an account can be restored if you return.
- Error logs are kept for a rolling window and are automatically trimmed.
- After the 90-day window, business data and integration credentials are deleted.
6. Your rights under the DPDP Act 2023
You may, at any time and free of charge:
- Access — ask for a copy of the personal data we hold about you.
- Correct — ask us to correct anything inaccurate or incomplete.
- Erase — ask us to delete your data and close your account.
- Withdraw consent — disconnect an integration, or withdraw consent entirely. Withdrawing consent does not affect processing already carried out.
- Nominate — nominate another person to exercise these rights if you are unable to.
- Complain — raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.
Email asterorganicsindia@gmail.com. We respond within 7 working days and complete deletion requests within 30 days.
7. Sharing
We do not sell, rent or trade your data. We share it only with:
- Infrastructure providers (Google) that host the service;
- The marketplaces you connect, when we call their APIs on your behalf;
- Legal authorities, where we are required by Indian law to do so.
8. Security
We use TLS for all transport, keep API secrets out of the browser and out of client-facing screens, enforce two-factor authentication on operator accounts, and log failures so they can be investigated. No system is perfectly secure; if a breach affects your data we will notify you and the Data Protection Board of India as required by the DPDP Act.
9. Cookies
The dashboard stores a single session token in your browser so you stay signed in. There are no advertising or tracking cookies on this site.
10. Children
This is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.
11. Changes
If we change this policy materially we will update the date at the top and notify active customers by email.
12. Grievance Officer
Rohit Kumbhare · OctoMargin · India
asterorganicsindia@gmail.com