Privacy Policy

1Introduction & Scope

Welcome to Malicc ("Company", "we", "our", or "us"). This Privacy Policy explains how Malicc collects, uses, discloses, and safeguards personal data when you visit our platform domain (tiny.malicc.com), use our merchant management dashboard, access customer storefront subdomains (e.g., <subdomain>.tiny.malicc.com), or interact with our API services.

By accessing or using the Malicc platform as a Merchant, Buyer, Affiliate Partner, or Visitor, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any terms of this policy, please discontinue use of our services immediately.

2Information We Collect

We collect information you directly provide to us when setting up an account, purchasing infrastructure access, or transacting on a storefront:

A. Information Provided by Merchants & Affiliates

• Full name, legal business identity, phone number, and verified email address.
• Encrypted authentication passwords and access credentials.
• Linked Razorpay Account ID (`acc_xxx`) for merchants accepting storefront customer payments.
• Uploaded storefront digital media, product images, digital downloads, and store settings.

B. Information Provided by Buyers / Store Customers

• Customer name, contact phone number, and shipping address for physical delivery fulfillment.
• Email address for receipt delivery, order status updates, and digital product delivery links.

C. Transaction & Payment Data

Payment card numbers and banking credentials are processed directly by Razorpay. Malicc does not store or process raw credit/debit card numbers or CVVs on our application servers.

3How We Use Your Information

We process your personal and business data for legitimate platform operations, including:

• Automated provisioning of merchant subdomains, multi-tenant databases, and isolated storage buckets.
• Processing credit deductions (300 credits/month) and verifying upfront platform setup fees.
• Routing buyer order payments directly to merchant linked Razorpay accounts.
• Managing the affiliate referral network and calculating valid commission payouts.
• Sending transactional emails (order confirmations, digital access links, invoice receipts) via Resend.
• Enforcing system security, detecting fraud, and preventing unauthorized access or abuse.

4Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal information. We share data only with trusted third-party infrastructure providers necessary to run Malicc:

5Data Security & Retention

Malicc employs industry-standard administrative, technical, and physical security measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

• All web traffic is encrypted in transit using SSL/TLS protocols.
• Merchant passwords are hashed using high-cost bcrypt salt rounds.
• Digital product files are stored in private storage buckets and accessible only via time-restricted presigned S3 tokens (`expiresIn = 900s`).
• We retain merchant and customer transaction logs for as long as necessary to fulfill contractual obligations, resolve disputes, and comply with tax and legal requirements.

6Cookies & Tracking Technologies

We use essential cookies and local storage tokens (`auth_token`) to maintain merchant session authentication, shopping cart state, and tenant domain routing. We do not use third-party cross-site tracking cookies.

7Your Data Rights & Choices

Depending on your jurisdiction (including rights under India's Digital Personal Data Protection Act and GDPR principles), you have the right to:

• Access and receive a copy of your personal data stored on Malicc.
• Request correction or updating of inaccurate personal data.
• Request deletion of your merchant account and associated store data (subject to statutory record-keeping obligations).

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or data protection practices at Malicc, please contact our Data Protection team at: