Stelloid
Privacy

Privacy Policy

Effective date: 15 August 2026·Last updated: 15 August 2026

1. About this Privacy Policy

This Privacy Policy explains how Stelloid AI (“Stelloid”, “we”, “us” or “our”) collects, uses, stores, shares and deletes information when customers use our website, software, dashboards, reports, integrations, recommendations and related services (collectively, the “Services”). It also explains the choices and rights available to individuals whose personal data may be processed through the Services.

2. Who we are

Stelloid AI is operated by Soumyadip Nag as a sole proprietorship registered in India. Our registered business address is 1L, CE/1/C/183, Anjuna Co-op. Housing Society, Street No. 198, CE Block, Action Area I, New Town, Kolkata, North 24 Parganas, West Bengal 700156, India. You may contact us at contact@stelloid.io.

3. Our role in processing data

For information used to operate our website, manage Stelloid accounts, communicate with customers and administer our commercial relationship, Stelloid generally acts as the controller or data fiduciary, as those terms are defined under applicable law.

For data that a customer connects or uploads from its commerce, advertising, analytics, inventory, fulfilment or related business platforms (“Customer Data”), the customer generally determines why the data is processed and Stelloid processes it on the customer's behalf. In that context, the customer is generally the controller or data fiduciary and Stelloid is generally the processor, data processor or service provider, subject to the applicable law and contract.

4. Services covered

This Privacy Policy applies to:

  • Stelloid's public website and contact forms;
  • the Stelloid application, dashboards and recommendation workflows;
  • platform connectors authorized by a customer;
  • files and reports uploaded by customers;
  • support, onboarding and pilot activities; and
  • service-security, diagnostic and usage information.

Third-party platforms have their own privacy notices and terms. This Privacy Policy does not control how those third parties independently process data.

5. Information we collect

5.1 Account and business information

  • Name, work email address, job title and contact information;
  • company, brand, marketplace and business-account information;
  • login, authentication and account-administration records;
  • subscription, pilot, billing and support information; and
  • communications, feedback and meeting notes.

5.2 Connected-platform and uploaded data

Depending on the integrations authorized by the customer, Stelloid may process the following business-data categories:

  • products, SKUs, variants, listings, categories, catalogue content and pricing;
  • orders, units, gross sales, discounts, cancellations, returns and refunds;
  • inventory, locations, fulfilment, shipping, delivery and replenishment information;
  • marketplace fees, payment charges, settlements, reimbursements and other variable costs;
  • advertising accounts, campaigns, ad groups or ad sets, creatives, keywords, targeting, budgets, bids, spend, clicks, conversions, attributed sales and performance;
  • website and analytics properties, traffic, acquisition, ecommerce, conversion and attribution metrics;
  • account-health, listing-health and operational status information; and
  • cost, margin, promotion, event and business-goal information supplied by the customer.

Order records or reports may contain personal data relating to a customer's buyers, employees, contractors or account users. Stelloid seeks to minimize such data and does not require names, phone numbers, email addresses, delivery addresses or payment-card data for its core dashboard and recommendation functions unless a specific, disclosed feature genuinely requires them.

5.3 Technical and usage information

  • IP address, browser, device and operating-system information;
  • login times, actions taken, error messages and diagnostic logs;
  • integration status, refresh times, API usage and report-upload activity; and
  • security events and audit records.

5.4 Cookies

We may use essential cookies required for authentication, session management, preferences and security. If we use optional analytics, advertising or similar cookies, we will provide the disclosures and choices required by applicable law.

6. Current integrations

Stelloid may support integrations with commerce, advertising, analytics, payment, inventory, fulfilment and related business platforms. The categories of data accessed through each integration, the purpose and the access type are described in our Integration Register. The current register forms part of this Privacy Policy.

7. How we use information

We use information only as reasonably necessary to:

  • provide, operate and support the Services;
  • connect, import and normalize data from authorized sources;
  • calculate revenue, orders, costs, contribution margin and related metrics;
  • reconcile sales, returns, refunds, fees, advertising spend and settlements;
  • prepare company, channel, SKU and SKU-by-channel dashboards;
  • generate forecasts, diagnostics and goal-based recommendations;
  • track recommendation approvals, implementation status and results where supplied by the customer;
  • manage accounts, subscriptions, pilots and customer support;
  • monitor data quality, availability, performance and security;
  • comply with law, enforce our agreements and protect rights and safety; and
  • improve the reliability and usability of the Services using service telemetry that does not contain or derive from restricted connected-platform data, unless the applicable customer and platform permit that use.

8. Legal bases

Where applicable law requires a legal basis, we process personal data to perform our contract with a customer, comply with legal obligations, pursue legitimate interests that are not overridden by individual rights, protect vital or legal interests, or act on consent. Customers are responsible for ensuring that they have an appropriate legal basis and authority to provide or connect Customer Data to Stelloid.

9. AI, forecasts and recommendations

Stelloid uses rules, calculations, statistical methods and, where configured, artificial-intelligence services to analyse Customer Data and produce account-specific dashboards, forecasts and recommendations. These outputs support human decision-making; they do not independently guarantee or determine commercial outcomes.

Stelloid does not sell connected-platform data, use it for third-party advertising or use it to train shared or general-purpose AI models unless the customer has separately and expressly authorized that use and the relevant platform's rules and applicable law permit it. Where an AI provider processes Customer Data on our behalf, that provider will be identified in the Subprocessor Register and contractually restricted to the authorized service purpose.

10. How we share information

We may disclose information only to:

  • the customer and users authorized by that customer;
  • hosting, database, connector, security, logging, communications, support and AI service providers acting on our behalf;
  • professional advisers subject to confidentiality obligations;
  • governmental or regulatory authorities when required by law;
  • a successor in connection with a merger, financing, acquisition or sale, subject to appropriate safeguards; or
  • another party at the customer's direction or with valid consent.

Our current service providers are listed in the Subprocessor Register. We do not sell Customer Data or personal data.

11. Data retention and deletion

We retain Customer Data while the customer maintains the relevant Stelloid account or integration and for the period reasonably necessary to provide the Services. When an integration is disconnected, we stop scheduled collection from that integration. Unless applicable law or the relevant platform requires a shorter period, we aim to delete or irreversibly de-identify the affected connected-platform data within 30 days after a verified deletion request, account termination or when the data is no longer required for the authorized purpose.

Residual copies may remain in encrypted backups for up to 90 days before being overwritten, unless a shorter platform requirement applies. We may retain limited records where required for tax, accounting, fraud prevention, dispute resolution, security or other legal obligations. Such retained data will remain protected and will not be used for another purpose.

Deletion instructions are available on our Data Deletion page.

12. Security

We maintain administrative, technical and organizational safeguards designed to protect information against unauthorized access, loss, alteration or disclosure. These safeguards are summarized on our Security page. No system is completely secure, and we cannot guarantee absolute security.

13. International transfers

Stelloid is based in India. Information may be processed in India and in the countries where our listed subprocessors operate — currently the United States (website hosting and business email). Where required, we use contractual and other legally recognized safeguards for international transfers, including applicable standard contractual clauses. The current list is maintained in the Subprocessor Register.

14. Individual rights

Depending on applicable law, individuals may have the right to request access, correction, deletion, restriction, objection, portability, withdrawal of consent or information about the processing of their personal data. Requests may be sent to contact@stelloid.io. We may need to verify identity and, where Stelloid processes data for a customer, refer the request to that customer.

15. Information for European and UK users

Where the GDPR, UK GDPR or related law applies, customers may request a data processing agreement describing Stelloid's processor obligations, subprocessors, security measures, assistance, deletion and international-transfer safeguards. Individuals may also lodge a complaint with the competent data-protection authority.

16. Children

The Services are intended for businesses and authorized adult users. Stelloid does not knowingly collect personal data directly from children through the Services.

17. Changes to this Privacy Policy

We may update this Privacy Policy as the Services, integrations, vendors or legal requirements change. We will update the date above and maintain a change summary. If a change materially affects how we use personal data, we will provide reasonable advance notice and obtain any consent required by law. Adding a new read-only integration that processes already-disclosed data for already-disclosed purposes may be reflected in the Integration Register without rewriting every provision of this policy.

18. Contact

Privacy and data requests: contact@stelloid.io
Business: Stelloid AI, operated by Soumyadip Nag
Address: 1L, CE/1/C/183, Anjuna Co-op. Housing Society, Street No. 198, CE Block, Action Area I, New Town, Kolkata, North 24 Parganas, West Bengal 700156, India