Last updated: 30 September 2026
This policy explains what personal data Softified Stores handles and why. Softified Stores is operated by Softified Software Development And Consulting Group Private Limited, Tokha 5, Kathmandu, Nepal ("Softified", "we"). It applies to visitors of our website, to shop owners and staff who use the admin, and to shoppers of the shops that run on our platform.
1. Our roles
- Website visitors, shop owners and staff: we decide how this data is used, so we are responsible for it.
- Shoppers: each shop decides why and how its shoppers' data is used, and we process it on the shop's behalf. Shoppers should read the shop's own policies for their orders, and contact the shop first about their data.
2. What we collect
From visitors of our website:
- the name, email address and message you send through the contact form or a store application;
- your answer if you tell us whether a help article was useful;
- basic technical records such as IP address, browser and pages requested, kept in our server logs to keep the site secure.
From shop owners and staff:
- name, email address, phone number and job role;
- a protected form of your password (we never store the password itself);
- sign-in and security records such as time, IP address and browser;
- a record of terms you accepted, with time, IP address and browser;
- a log of actions taken in the admin, kept for 365 days;
- business details you give us, such as the shop name, address and registration or tax numbers.
Held for each shop about its shoppers:
- name, phone, email, delivery addresses and order history;
- reviews, reward points, saved items and messages about orders;
- one-time sign-in codes, which are kept only as a protected digest.
3. Cookies
Our website does not use advertising or tracking cookies. The admin and the storefronts use only the cookies needed to keep you signed in, keep your cart and keep the service secure. You can block cookies in your browser, but signing in will not work without them.
4. Why we use it and our basis
- to run the service: sign in, process orders, send order emails and text messages, prevent fraud and abuse, and answer your messages;
- to keep the platform secure and fix problems;
- to meet legal duties and to enforce our terms.
We collect personal data with your consent or where it is needed to provide the service you asked for, and we use it only for the purposes described here. We do not sell personal data and we do not use shoppers' data for our own advertising.
5. Who else handles it
We use service providers to run the platform: cloud hosting, email delivery, text message delivery, content delivery and DNS, and the payment provider each shop chooses to connect. They may only use data to provide their service to us or the shop. We share data with authorities only when the law requires it, and we do not otherwise disclose personal data to third parties.
6. Where it is stored
Our servers and email delivery run in the Mumbai region of Amazon Web Services in India, and text messages go through the providers each shop uses. By using the service, you understand your data is processed there. We keep each shop's data separated from other shops.
7. How long we keep it
- Shop data stays while the shop is active. After a shop is closed it is kept for at least 30 days and then permanently removed.
- A shop can erase a shopper's personal details on request. Order records may remain in a form that no longer identifies the person, where the shop must keep them for tax or legal reasons.
- Messages sent through our website are kept as long as needed to answer you and keep a record of the conversation, then deleted.
- The admin activity log is kept for 365 days.
8. Security
Data is sent over encrypted connections, passwords are protected, access is limited to the people who need it, and each shop's data is separated from other shops. If a breach affects personal data, we tell the affected shop owners without undue delay. No system is perfectly secure, so we also monitor for problems and act quickly on them.
9. Children
The Service is for businesses and is not directed at children. If you think a child has given us personal data, write to us and we will delete it.
10. Your choices
You may ask to see, correct or erase your personal data, to withdraw your consent, and to stop marketing messages. Shoppers should ask the shop; visitors, shop owners and staff can contact us at contact@softifiedbusiness.com. We answer within a reasonable time and as the law requires, including the Individual Privacy Act, 2075 of Nepal. If you are not satisfied with our answer, you may complain to the authority that the law names.
11. Changes and contact
We will publish changes to this policy on this page and update the date at the top. Questions: contact@softifiedbusiness.com, Softified Software Development And Consulting Group Private Limited, Tokha 5, Kathmandu, Nepal.