Privacy Policy

1. Introduction & Scope

Growth Catalyst Pvt. Ltd. is a legally registered entity under the laws of Nepal, headquartered at Sital Height, Mahalaxmi 06, Lalitpur, Bagmati Province. We operate the RUN-Ecommerce software platform, which provides merchants with tools to establish, manage, and scale online retail storefronts.

This policy applies to merchants who register for a RUN-Ecommerce account, visitors who browse our marketing website, and consumers who transact on storefronts powered by RUN-Ecommerce.

2. Information We Collect

We collect information in the following categories:

• Merchant Account Details: Full name, email address, phone number, physical address, business name, and Permanent Account Number (PAN) or Value Added Tax (VAT) registration details.
• Store Customer Order Information: Customer name, shipping address, recipient contact phone, order contents, and billing details provided during checkout on merchant storefronts.
• Technical & Telemetry Data: IP addresses, browser types, operating systems, referring URLs, device identifiers, and platform navigation logs collected for security and analytics.

3. Payment & Financial Data Handling

All online digital payments on RUN-Ecommerce storefronts are securely routed through Nepal Rastra Bank (NRB) authorized Payment Service Providers (PSPs) and Payment System Operators (PSOs), including eSewa, Khalti, and Fonepay. Transactions are tokenized and verified via cryptographically signed callbacks.

4. Multi-Tenant Architecture & Data Isolation

RUN-Ecommerce employs a strict database-per-tenant isolation architecture. Each merchant store has its own dedicated database schema.

Your store's customer lists, order records, profit margins, inventory levels, and transaction histories cannot be accessed by, shared with, or leaked to any other merchant on the platform.

5. How We Use Your Information

We process your data for lawful purposes including:

• Provisioning and maintaining your online storefront and admin dashboard.
• Processing monthly/annual SaaS subscription payments in Nepalese Rupees (NPR).
• Generating automated order confirmations and transactional SMS/email alerts.
• Detecting, investigating, and preventing fraudulent transactions or platform abuse.
• Delivering responsive customer service and technical support.

6. Data Sharing & Third-Party Services

We share information strictly with third-party service providers necessary to operate the service:

• Logistics & Courier Partners: Delivery details (recipient name, address, phone number) are transmitted to the merchant's connected courier service (such as NCM, Pathao, Pick & Drop, Upaya, or Dash Logistics) solely to execute package delivery.
• Payment Gateways: Necessary transaction totals and reference numbers transmitted to eSewa, Khalti, or Fonepay to complete billing.
• Legal Compliance: If mandated by a valid court order, subpoena, or law enforcement request issued by competent authorities in accordance with the laws of Nepal.

We never sell, rent, or trade merchant or customer data to third-party advertisers or data brokers.

7. Cookies & Tracking Technologies

We use essential session cookies to maintain your login authentication, secure shopping cart items during checkout, and remember admin preferences. We also use aggregated telemetry tools (such as Google Analytics) to understand platform performance. You may disable cookies in your browser settings, though doing so may affect store administration features.

8. Data Security & Retention

We implement industry-standard administrative, physical, and technical safeguards, including TLS 1.3 encryption for data in transit, encrypted storage for sensitive tokens, automated regular backups, and role-based access control.

We retain merchant data for the duration of your active subscription. Upon store cancellation or termination, data is archived and eventually purged in compliance with statutory recordkeeping requirements under Nepalese tax laws.

9. Your Rights & Data Portability

Under Nepal's Privacy Act 2075 and good international practice, you have the right to:

• Access and review the personal data associated with your account.
• Correct, update, or rectify incomplete or inaccurate information.
• Export your store products, orders, and customer data via standard CSV/Excel format.
• Request the complete deletion and closure of your account and store database.

10. Governing Law & Jurisdiction

This Privacy Policy is formulated in accordance with the Individual Privacy Act, 2075 (2018) and the Electronic Transactions Act, 2063 (2008) of Nepal. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Lalitpur or Kathmandu, Nepal.