Legal & Compliance

Privacy Policy

Last updated: September 2026

Regulatory Notice: This privacy policy has been drafted in preparation for the Digital Personal Data Protection Act, 2023 (DPDP Act) and relevant information technology regulations in India. This policy should be reviewed by qualified legal counsel before production launch.

1. Overview and Purpose

SellMyWeb ("Platform", "we", "our", or "us") operates an online discovery and direct-connection marketplace for founders and buyers of digital properties, websites, micro-SaaS, and online tools. This Privacy Policy details how we collect, use, process, and safeguard your personal information when you access or use our services.

2. Information We Collect

(a) Account and Profile Information: When you register on SellMyWeb, we collect your email address, display name, avatar, bio, and optional location information.

(b) Marketplace Listing Information: When you list a digital asset, we collect details regarding the business, including title, description, category, asking price, tech stack, business model, live URLs, and self-reported or provider-verified revenue and traffic figures.

(c) Direct Communications: Direct messages exchanged between registered buyers and sellers regarding deal negotiation and due diligence are stored securely to enable real-time messaging.

(d) Technical and Analytics Data: We collect first-party aggregate metrics. Anonymous identifiers in browser session and local storage record page views and deduplicated visits without storing raw IP addresses or full query strings.

(e) Billing and Transaction Records: When you purchase platform listing subscriptions, our payment gateways (Razorpay and PayPal) process transactions. We retain transaction IDs, timestamps, amounts, and plan tiers, but never store credit card numbers or banking passwords.

3. How Information Is Used

To present public digital property listings to prospective buyers worldwide.
To provide authenticated, real-time messaging between prospective buyers and sellers.
To verify subscription status, process platform listing fees, and prevent billing fraud.
To monitor marketplace safety, investigate violations or fraudulent listings, and moderate reports.
To deliver important administrative notices, security alerts, and system updates.

4. Third-Party Infrastructure & Payment Providers

We rely on trusted third-party service providers to deliver secure platform infrastructure:

Database & Authentication: Supabase (PostgreSQL with strict Row-Level Security).
Cloud Hosting & Edge Network: Cloudflare (SSL/TLS encryption, edge routing, and bot protection).
Payment Gateways: Razorpay (INR payments, UPI, cards) and PayPal (USD transactions). All transactions are encrypted according to PCI-DSS standards.

We do not sell, rent, or trade your personal information to third parties for commercial advertising.

5. Data Storage, Security & Retention

We implement industry-standard encryption in transit (HTTPS / TLS 1.3) and at rest. Access to platform administration tools is restricted to authorized personnel using role-based access control and token-based authentication.

We retain account data for as long as your account remains active. If an account is closed or a listing is removed, relevant records are retained only for the duration required by applicable statutory, tax, or fraud-prevention requirements.

6. User Rights & Digital Personal Data Protection Act, 2023 (India)

Under applicable Indian data protection frameworks, including the Digital Personal Data Protection Act, 2023, data principals enjoy specific rights regarding their personal data:

Right to Access: You may request a summary of the personal data we hold about you.
Right to Correction & Erasure: You may request the correction of inaccurate data or the deletion of data no longer necessary for marketplace operations.
Right of Grievance Redressal: You may address grievances directly to our designated Grievance Officer.
Right to Nominate: In the event of death or incapacity, data principals may designate an authorized representative.

7. Account & Data Deletion Workflow

You have the right to request the permanent deletion of your SellMyWeb account and associated personal data at any time:

How to Request Deletion:

Send an email from your registered account address to: cjaydesign063@gmail.com.
Specify "Account & Data Deletion Request" in the subject line.
Our operations team will verify your ownership and process the deletion within 30 days.

Note: Any public listings authored by the user will be unlisted or permanently archived. Transactional billing records required by tax authorities will be retained strictly in accordance with legal obligations.

8. Children's Privacy

SellMyWeb is intended exclusively for individuals aged 18 years or older who are legally capable of entering into binding acquisition contracts. We do not knowingly collect personal data from minors.

9. Grievance Redressal & Contact Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may contact our designated Grievance Contact for any privacy inquiries, data requests, or complaints:

Grievance & Privacy Officer

Platform Operations & Compliance

Email: cjaydesign063@gmail.com

We will acknowledge your grievance within 48 hours and endeavor to resolve it within the statutory timeline.

10. Policy Updates

We reserve the right to amend this Privacy Policy periodically to reflect technological, legal, or marketplace modifications. Significant changes will be announced on this page with an updated revision date.