Privacy Data Governance Pipeline
1. Introduction
This Privacy Policy explains how Prodarchy (Sofyrus Technologies, a Partnership firm, GSTIN 09AEBFS0375P1ZI, operating as "Prodarchy", "we", "us", "our") collects, uses, discloses, stores, and protects information when you access or use the Prodarchy website, application, dashboard, or APIs (collectively, the "Services"). This Policy forms part of, and should be read together with, the Prodarchy Terms of Service at https://prodarchy.com/legal/terms.
Prodarchy is a multi-tenant Catalog Intelligence Platform used by marketplace sellers, brands, and agencies to structure, enrich, and publish product catalog data across marketplaces such as Amazon, Flipkart, Myntra, Meesho, and Shopify.
2. Who This Policy Covers
This Policy applies to: (a) visitors to prodarchy.com and related domains; (b) registered Users and Workspace Administrators; (c) individuals whose personal data appears within Customer Data uploaded by a Workspace (for example, a name appearing in a product review field or a supplier contact in catalog metadata). Where Prodarchy processes such third-party personal data solely on behalf of a Workspace, the Workspace owner is the data controller / data fiduciary for that data, and Prodarchy acts as a processor / data processor, as further described in Section 12.
3. Information We Collect
3.1 Information you provide directly
Name, email address, phone number, company name, billing address, payment details (processed by our payment provider — Prodarchy does not store full card numbers), Workspace and team member information, support communications, and any information you choose to submit through forms, chat, or email.
3.2 Customer Data you upload
Product names, descriptions, specifications, images, identifiers, SKU information, category and taxonomy data, pricing, inventory information, catalog files, and other content you or your Workspace upload for processing. This may incidentally include personal data (e.g., a supplier or client contact) if you choose to include it — see Section 8.
3.3 Marketplace-connected data
Where you connect a Marketplace account (such as via Amazon's Selling Partner API or a Flipkart seller integration), we receive catalog, listing, and account-configuration data returned by that Marketplace's API, strictly within the scope of the permissions you authorize.
3.4 Technical and usage data
IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, features used, timestamps, session identifiers, crash and error logs, and API request logs.
3.5 Cookies and similar technologies
Collected via Google Analytics 4, Google Tag Manager, Microsoft Clarity, and authentication cookies. See our Cookie Policy at https://prodarchy.com/legal/cookies for full detail.
3.6 Information from third parties
Where applicable, information from identity providers (if you sign in via a third-party login), payment processors, and Marketplace platforms you choose to connect.
4. How We Use Information
We use the information described above to: provide, operate, and maintain the Services; authenticate accounts and secure Workspaces; process AI-assisted catalog enrichment, extraction, and generation (Sift engine); process billing and manage subscriptions; provide customer support; send transactional and, where consented, marketing communications; monitor, analyze, and improve platform performance and reliability; detect, investigate, and prevent fraud, abuse, and security incidents; comply with legal obligations; and produce aggregated, de-identified analytics about platform usage.
5. AI Processing of Data
Product and catalog content you submit may be processed by third-party and internally orchestrated AI model providers as part of the Sift enrichment pipeline (vision extraction, attribute inference, and content generation layers) to produce structured catalog output. We do not knowingly submit sensitive personal data (Section 8) to AI processing as part of ordinary catalog workflows, and you should not include such data in uploaded catalog content. See Section 22–26 of the Terms of Service for further detail on AI Output.
8. Personal and Sensitive Data You Upload
Prodarchy is designed for structured product and catalog data, not for personal data processing. You must not upload sensitive personal data (health information, financial account numbers, government identity numbers, biometric data, or similar) into catalog fields, images, or file uploads. Where Customer Data incidentally includes ordinary personal data (such as a supplier contact name), you are responsible, as the Workspace owner, for having a lawful basis to process and disclose that data to Prodarchy. See also Sections 29–30 of the Terms of Service.
9. International Data Transfers
Prodarchy's infrastructure and subprocessors may be located outside your country. Where personal data is transferred internationally, we rely on the data-transfer mechanisms and safeguards required under applicable law (including, where relevant, standard contractual clauses or equivalent mechanisms), and we take reasonable steps to ensure recipients apply an appropriate standard of protection.
10. Data Retention
We retain personal data and Customer Data for as long as reasonably necessary to provide the Services, fulfil the purposes described in this Policy, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Account and Workspace data is generally retained for the duration of an active subscription plus a reasonable post-termination window as described in Sections 51–52 and 78 of the Terms of Service, after which it is deleted or anonymized, subject to backup cycle timing.
11. Data Security
We apply reasonable technical and organizational measures to protect information, including tenant-isolation controls at the application layer, encryption in transit, access controls, and infrastructure security (including DNS/CDN/WAF protection). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your Role and Ours — Controller / Processor Roles
Where you use Prodarchy to process your own business's catalog and customer-related data, you are generally the data controller (or "data fiduciary" under Indian law) for that data, and Prodarchy acts as a processor performing your instructions. For account, billing, security, and platform-usage data that Prodarchy collects and uses for its own purposes (such as improving the Services or preventing fraud), Prodarchy acts as the controller. Where applicable and requested, a Data Processing Addendum is available — contact us using the details in Section 17.
13. Your Rights
Depending on your location and applicable law, you may have rights to: access the personal data we hold about you; correct inaccurate data; request erasure of your data, subject to legal retention requirements; withdraw consent where processing is based on consent; object to or restrict certain processing; receive a copy of your data in a portable format; and lodge a grievance or complaint.
13.1 Rights under India's Digital Personal Data Protection Act, 2023
If you are a Data Principal under the DPDP Act, you have the right to obtain a summary of personal data processed and the processing activities carried out; to correction, completion, updating, and erasure of your personal data; to grievance redressal through our Grievance Officer (Section 17) before approaching the Data Protection Board of India; and to nominate another individual to exercise your rights in the event of death or incapacity, where such functionality is made available.
To exercise any of these rights, contact us using the details in Section 17. We may need to verify your identity before actioning a request.
14. Marketing Communications
If you receive marketing communications from us, you may opt out at any time using the unsubscribe link in the email or by contacting us directly. You will continue to receive transactional and service-related communications necessary to operate your Account even after opting out of marketing.
15. Children's Privacy
The Services are intended for business use and are not directed at children. We do not knowingly collect personal data from individuals under the age of majority in their jurisdiction for the purpose of creating an Account. If you believe a child's data has been submitted to us, contact us using the details in Section 17 so we can investigate and remove it as appropriate.
16. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the website, in-product notice, or email, and the "Last Updated" date will be revised accordingly. Continued use of the Services after an update constitutes acceptance to the extent permitted by law.
17. Grievance Officer and Contact Information
In accordance with applicable Indian law, Prodarchy has designated a Grievance Officer to address privacy-related complaints and grievances.
- Grievance Officer: [INSERT NAME]
- Email: [INSERT PRIVACY / GRIEVANCE EMAIL]
- Registered Address: Hamdard Nagar, 4/583, Firdaus Complex, Aligarh, Uttar Pradesh 202001, India
- General privacy inquiries: [INSERT PRIVACY EMAIL]
- Security inquiries: [INSERT SECURITY EMAIL]
Schedule — Completion Checklist
Before publishing: insert registered entity/address (resolved — Sofyrus Technologies, Aligarh, Uttar Pradesh, GSTIN 09AEBFS0375P1ZI); insert Grievance Officer name and contact details (a named individual is required under the DPDP Rules — this cannot remain blank at launch); confirm and publish the current subprocessor list; confirm applicability of GDPR/international frameworks if targeting customers outside India; finalize and link the Data Processing Addendum; and have this Policy reviewed by qualified counsel alongside the Terms of Service.