Privacy Policy

What we collect, why, and what we never do with your product photos.

Last updated 30 October 2026

Short version: your photos are processed to make your listing image and then deleted. We keep your email, your credit balance and your payment records. We don't sell data, and we don't train AI models on your images.

1. Who we are

SellShot (“we”, “us”) is an online tool for preparing product photos for marketplaces, operated from Kolkata, India. Contact: hello@sellshot.app.

2. What we collect

Account: email address and a hashed password (we cannot read your password).
Usage: a ledger of credits spent and purchased, the operation type (e.g. “background removal”), timestamps, and API-key names if you create keys.
Payments: handled by Razorpay (India) or Stripe (international). We receive a payment id, amount, currency and status — never your card or UPI details.
Photos: the images you upload, only for as long as it takes to process them (see §4).
Technical: standard server logs (IP address, browser type, request time) kept for up to 30 days for security and abuse prevention.

We do not use advertising trackers. We may use a privacy-friendly, cookie-less analytics tool that counts page views without identifying you.

3. Why we use it

To run the service: log you in, process your images, keep your credit balance correct.
To bill you and to send receipts, renewals and password-reset emails. We don't send marketing email unless you opt in.
To prevent abuse (rate limits, fraud checks) and to fix bugs.

4. Your photos

Uploaded images are held in memory or temporary storage only while being processed and are deleted automatically afterwards — typically within minutes, and never longer than 24 hours. Results are returned to your browser; we don't keep a copy unless a feature explicitly says it saves history. We never use your images to train machine-learning models, never share them with third parties, and no human looks at them except when you ask us to debug a specific problem.

5. Who we share data with

Razorpay and Stripe — payment processing (their own privacy policies apply).
Our hosting provider — servers located in India/Europe where the app runs.
Email delivery provider — only to send transactional emails (receipts, password resets).
Authorities, if required by law.

We do not sell or rent personal data.

6. Cookies & local storage

We store a login token and your preferences (theme, region, brand kit logo) in your browser's local storage. These are needed for the app to work and are not used for tracking across sites.

7. Retention

Account and billing records are kept while your account is active and for up to 7 years afterwards where tax law requires (invoices). Server logs: 30 days. Photos: see §4.

8. Your rights

You can view your usage history and manage API keys inside the app. Email us to export or delete your account and data; we respond within 30 days. If you are in the EU/UK you have the rights set out in the GDPR, including to complain to your local data-protection authority. If you are in India, the Digital Personal Data Protection Act 2023 applies.

9. Security

Traffic is encrypted (HTTPS). Passwords are stored with bcrypt. API keys are stored as hashes. Payment data never touches our servers.

10. Children

SellShot is for business use and not directed at anyone under 18.

11. Changes

We'll post changes here and update the date above. Material changes will be announced in the app.