User Consent Policy

Company: EcomSarthi Business Solutions LLP ("EcomSarthi", "we", "us", "our")
Product: Ecom10x — One Dashboard. Every Marketplace. (the "Platform" or "Service")
Effective Date: [EFFECTIVE_DATE — e.g., 1 August 2026] · Version: [VERSION — e.g., 1.0] · Next Review: [NEXT_REVIEW_DATE — e.g., 1 February 2027]

1. Purpose

This Policy describes how Ecom10x obtains, records and honours consent, consistent with the DPDP Act, 2023 and OAuth best practices.

2. When We Ask for Consent

• Account creation: acceptance of the Terms and acknowledgement of the Privacy Policy, via an unambiguous affirmative action.
• Marketplace connection: before each connection we display which Marketplace, which data categories (orders, inventory, listings, shipments, returns, settlements) and which permissions/scopes will be requested. Authorisation then happens on the Marketplace's own consent screen (e.g., Amazon Login with Amazon consent for SP-API; Flipkart's authorisation flow) — never by collecting your password.
• Optional features: features that need additional data or scopes (e.g., new integrations, AI-assisted features) request separate, specific consent before activation.
• Communications: marketing communications are opt-in / opt-out controllable; service and security notices are sent as necessary to operate the account.

3. Standards for Valid Consent

Consent requests are presented in clear, plain language; are specific to the purpose; are granular per Marketplace and per optional feature; and are never bundled with unrelated terms. Pre-ticked boxes are not used for optional processing.

4. Records of Consent

We log the fact, time, scope and interface text version of each consent event in audit logs, retained per the Data Retention Policy, so both parties can verify what was agreed.

5. Withdrawing Consent

You may withdraw consent at any time by: disconnecting a Marketplace (Settings → Connected Accounts), disabling an optional feature, unsubscribing from marketing, or writing to [PRIVACY_EMAIL — e.g., privacy@ecom10x.in]. Withdrawal is as easy as the grant. Consequences (e.g., stopped syncs, token deletion within 24 hours, reduced functionality) are shown at the point of withdrawal. Withdrawal does not affect the lawfulness of processing already carried out.

6. Consent on Behalf of Others

If you upload files or connect accounts containing personal data of third parties (e.g., buyer names and addresses inside order reports), you confirm you are entitled to provide that data to us for processing on your behalf, under the Marketplace's terms and applicable law.

7. Consent Manager Interoperability

Where the DPDP framework's Consent Manager ecosystem becomes applicable to our processing, we will support interoperability as required by the rules in force.

Governing Law & Dispute Resolution

This document is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, without regard to conflict-of-law principles.

Any dispute arising out of or in connection with this document shall first be attempted to be resolved amicably through good-faith negotiation within thirty (30) days of written notice. Failing amicable resolution, the dispute shall be referred to arbitration by a sole arbitrator appointed in accordance with the Arbitration and Conciliation Act, 1996. The seat and venue of arbitration shall be [JURISDICTION_CITY — e.g., New Delhi], India, and proceedings shall be conducted in English. Subject to the foregoing, the courts at [JURISDICTION_CITY — e.g., New Delhi], India shall have exclusive jurisdiction.

Contact

EcomSarthi Business Solutions LLP
[REGISTERED_OFFICE_ADDRESS OF ECOMSARTHI BUSINESS SOLUTIONS LLP]
Support: [SUPPORT_EMAIL — e.g., support@ecom10x.in] · Legal: [LEGAL_EMAIL — e.g., legal@ecom10x.in] · Phone: [SUPPORT_PHONE_NUMBER]