Privacy policy

Sellix is a referral marketplace. Businesses list products, services and properties; referrers (sellers) share them with people they know; and people who are interested ask the business to contact them. Sellix is operated by iMerge (“we”, “us”).

This policy explains what personal data we collect, why, who we share it with and the choices you have. It applies to our website, dashboards and the text messages we send. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

When you create an account: your name, email address, mobile number and a password. We confirm your mobile number with a one-time code. Passwords are stored only as a secure hash; we cannot read them.

If you are a business: your company name, category, description, website, phone, city, address, GSTIN or PAN, logo, and the offers you publish (including photos, prices and commission terms).

If you are a referrer: the referral links you create, your public page (page name, display name, photo, bio and, if you add it, a WhatsApp number), and the payout details you give us for withdrawals (UPI ID or bank account name, number and IFSC).

If you ask a business to contact you: your name, mobile number, and optionally your email and a message, together with your consent to be contacted and the time you gave it. We confirm your number with a one-time code.

Automatically: when you open a referral link or a referrer's page we record the visit, your browser type and the page that sent you. We do not store your raw IP address for this; we keep a one-way keyed hash of it so we can count unique visitors and spot fraud.

Money: a ledger of every top-up, lead charge, commission, hold, release and withdrawal on your wallet.

• To create and secure your account and keep you signed in.
• To pass a lead's contact details to the business they asked to hear from, and to credit the referrer who introduced them.
• To charge businesses for qualified leads, pay referrers their commission and process withdrawals.
• To review businesses and offers before they go live, and to detect duplicate leads, fake clicks and other abuse.
• To show you statistics, such as clicks, leads and spend in your dashboard.
• To send service messages, such as verification codes and replies to your questions. We do not send marketing messages without your permission.
• To meet legal, tax and accounting obligations.

• Businesses see the full name, phone, email and message of the people who asked them to get in touch. They do not see who referred the lead.
• Referrers see the name of the people they referred and a masked phone number (for example +91*******10), plus the lead's status and their commission. Never the full number.
• Visitors to a referrer's public page see only what the referrer chose to publish: display name, photo, bio, WhatsApp number and the offers they picked.
• Service providers that run parts of the service for us: cloud hosting and database, Amazon Web Services (S3) for uploaded images, and our SMS provider for verification codes. They may use the data only to provide that service.
• Authorities, when the law requires it or to protect the rights and safety of our users.

We do not sell your personal data.

We use one essential cookie to keep you signed in. It cannot be read by scripts on the page and expires after seven days. We do not use advertising or tracking cookies.

• Signups that never confirm their mobile number are deleted after 30 minutes.
• Lead requests that never confirm their phone are deleted after 24 hours.
• Account, lead and wallet records are kept while your account is active, and afterwards for as long as tax, accounting and dispute rules require.
• Uploaded photos are kept until you replace or remove them, or your account is closed.

We protect data with encryption in transit (HTTPS), hashed passwords and one-time codes, keyed hashes instead of raw IP addresses, access limited by role, and rate limits on sign-in and verification. No system is perfectly secure; if we become aware of a breach that affects you, we will tell you and the authorities as the law requires.

You can ask us to:

• tell you what personal data we hold about you;
• correct or update it (much of it you can edit yourself);
• delete it, unless we must keep it for legal, tax or dispute reasons;
• withdraw a consent you gave, such as consent to be contacted by a business.

Email hello@sellix.app from the address on your account. We reply within 30 days.

Sellix is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.

We may update this policy as the service changes. The date at the top shows when it last changed; for important changes we will also tell you in your dashboard or by email.

Questions or complaints: hello@sellix.app. Our Grievance Officer can be reached at the same address.