Ecomentic | Sovereign Commerce Infrastructure

Last updated: July 17, 2026

At Ecomentic, we prioritize your data sovereignty. This Privacy Policy details how we handle information collected through our headless e-commerce infrastructure, APIs, and public website, in compliance with the Digital Personal Data Protection Act (DPDP Act, India) and international GDPR standards.

1. Data Sovereignty & Tenant Isolation

Ecomentic operates a multi-tenant PostgreSQL database with strict schema isolation. As a merchant or developer (Tenant), you own 100% of the customer, order, and product data stored within your schema. Ecomentic acts solely as a data processor; we do not mine, sell, or analyze your business data for cross-tenant targeting.

2. Information We Collect

Account Data: We collect your name, business details, billing address, and contact information to provision your tenant schema and process infrastructure payments.

Infrastructure Telemetry: We collect non-personally identifiable API request volumes, error rates, and compute utilization metrics to ensure platform stability and enforce SLA guarantees.

End-Customer Data: Your customers' data (PII, addresses, order history) flows through our APIs and is securely encrypted at rest. You remain the Data Fiduciary for all end-customer data.

3. How We Use Information

We use Account Data exclusively for billing, platform notifications, and support resolution. Infrastructure Telemetry is used to auto-scale compute resources and prevent malicious API abuse (e.g., DDoS attacks). End-Customer Data is never accessed by Ecomentic staff unless explicitly authorized by the Tenant via a secure support token for debugging.

4. Data Security & Encryption

All data in transit is secured via TLS 1.3. Data at rest (PostgreSQL, Redis caches, and uploaded assets) is encrypted using AES-256. API requests require cryptographic signature verification or secure bearer tokens.

5. Data Retention & Deletion

Upon cancellation of your Ecomentic subscription, you have a 30-day window to export your raw PostgreSQL schema dump. After 30 days, your tenant schema, associated cached data, and uploaded assets are irreversibly destroyed from our primary and backup servers.