Privacy Policy
Effective: June 2026 · KV Enterprises · Last reviewed: June 2026
1. Who we are
Ecombox is an ecommerce seller intelligence platform owned and operated by KV Enterprises, a proprietorship registered in India.
Address: 126, Block B, Hardevpuri, Shahdara, Delhi – 110093
Email: kventerprises98@gmail.com
Website: https://ecombox.in
For the purposes of the Digital Personal Data Protection Act 2023 (DPDP Act), KV Enterprises is the Data Fiduciary.
2. Data we collect
Account data: your name (optional), email address, and hashed password when you create an account.
Amazon seller reports: files you voluntarily upload — Monthly Tax Reports (MTR B2C / B2B), Settlement Reports, Inventory Ledger, Business Reports, Customer Shipments. These are processed to generate insights; we do not share them with third parties.
Usage data: pages viewed, actions taken (uploads, clicks, feature use). Collected to improve the product. We do not use third-party analytics trackers — only server-side logs.
Device / connection data: IP address, browser type, approximate location (country-level). Used for security and abuse prevention.
We do not collect payment card data directly; payments (when introduced) will be processed by a PCI-DSS-compliant provider.
3. Why we process your data
4. Where your data is stored
Your data is stored entirely within India. By using Ecombox you consent to this storage as described below.
- Database (all uploaded reports, account info): Amazon Web Services, Mumbai Region (ap-south-1) via Supabase.
- Application servers: Amazon Web Services, Mumbai Region (ap-south-1).
- Transactional email: Resend (resend.com) — your email address is shared with Resend solely to deliver account-related emails.
We do not sell or transfer your data to any other third party without your explicit consent.
5. Data retention
We retain your data for as long as your account is active. If you delete your account, we delete all associated data within 30 days, except where we are required by law to retain it longer.
6. Your rights under the DPDP Act 2023
- Right to access — request a copy of personal data we hold about you.
- Right to correction — request correction of inaccurate personal data.
- Right to erasure — request deletion of your account and all associated data.
- Right to grievance redressal — file a complaint if you believe your rights have been violated.
- Right to nominate — nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, email us at kventerprises98@gmail.com with the subject line "Data Rights Request". We will respond within 30 days.
7. Cookies
We use only strictly necessary cookies required for authentication and security. We do not use advertising or tracking cookies. See our Cookie Policy for details.
8. Children
Ecombox is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.
9. Security
We use industry-standard measures including TLS encryption in transit, encrypted storage at rest (managed by Supabase / AWS), and role-based access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
10. Grievance Officer
In accordance with the DPDP Act 2023 and the Information Technology Act 2000, the Grievance Officer is:
KV Enterprises
126, Block B, Hardevpuri, Shahdara, Delhi – 110093
Email: kventerprises98@gmail.com
Response time: within 30 days of receipt
11. Changes to this policy
We may update this policy from time to time. We will notify you via email if the changes are material. Continued use of the service after changes are posted constitutes acceptance of the new policy.