Privacy Policy
Comprehensive data governance, protection standards, and legal compliance terms for Shipagent Express Private Limited.
Encryption at Rest & Transit
256-bit TLS encryption for all API & data transfers.
No Data Selling
We never sell personal data for ad targeting.
Indian Data Residency
Hosted securely within Tier-IV Indian data centers.
DPDPA 2023 Rights
Full user rights for access, correction & erasure.
1. Introduction
1.1. This Privacy Policy ("Policy") describes how Shipagent Express Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at 219 2F ILD Trade Centre Sector 47, Sohna Road, Gurugram Haryana-122018("ShipAgent", "Company", "we", "us", or "our") collects, uses, stores, shares, transfers, and protects information obtained from users ("User", "you", "your", "Seller") of the ShipAgent platform.
1.2. ShipAgent operates a multi-carrier logistics orchestration platform that enables businesses ("Sellers") to compare shipping rates across domestic and international carriers, book shipments, orchestrate multi-leg shipping journeys, track deliveries through unified timelines, manage returns, process Cash on Delivery (COD) remittances, and manage customs documentation.
1.3. By accessing or using the ShipAgent platform, including the Seller Dashboard, APIs, webhooks, mobile applications, or public tracking pages, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
2. Definitions
- "Personal Data": Any data about an individual who is identifiable by or in relation to such data under the Digital Personal Data Protection Act, 2023 (DPDPA).
- "Data Fiduciary": Entity determining the purpose and means of processing Personal Data.
- "Courier Partners": Logistics providers integrated with ShipAgent including Delhivery, BlueDart, DTDC, Ecom Express, Xpressbees, Shadowfax, Amazon Shipping, FedEx, Aramex, DHL, and UPS.
- "Shipment Data": All data related to a shipment including sender/receiver details, package specs, AWBs, customs documentation, and proof of delivery.
3. Data Fiduciary & Data Processor Roles
3.1. ShipAgent as Data Fiduciary: ShipAgent acts as a Data Fiduciary regarding Seller registration, authentication, KYC compliance, wallet transactions, billing records, security logs, and operational telemetry.
3.2. ShipAgent as Data Processor: ShipAgent acts as a Data Processor when handling end-recipient shipping names, delivery addresses, and customs declarations provided by Sellers solely for logistics fulfillment.
4. Information We Collect
4.1 Account & KYC Verification
We collect business details including Name, GSTIN, PAN, Bank Details, IEC code (for international shipping), AD Code, and authorized signatory credentials.
4.2 Shipment & Cross-Border Customs Data
Pickup and delivery recipient details, package dimensions, declared values, Commercial Invoices, Packing Lists, HS codes, CSB-V filings, and proof of delivery (POD).
5. Purpose of Data Collection and Use
Data collected is strictly utilized for service delivery, Courier Partner rate optimization, automated NDR retries, customs clearance, financial reconciliation, and AI-driven ETA predictions.
7. Sharing and Disclosure of Information
We share relevant Shipment Data exclusively with authorized Courier Partners (Delhivery, BlueDart, DHL, FedEx, etc.), customs authorities, and payment gateways (Razorpay, Cashfree, PhonePe) to complete your logistics requests. We DO NOT sell personal data to third parties.
13. Data Retention Schedule
| Data Category | Retention Period | Legal Purpose |
|---|---|---|
| Account & Profile | Duration of account + 3 years | Service delivery & dispute resolution |
| Shipment & Customs Data | 8 years from shipment date | Customs Act & Foreign Trade regulations |
| Financial & GST Transactions | 8 years minimum | Income Tax Act & GST compliance |
| Technical & Access Logs | 180 days minimum | CERT-In security directions |
21. Your Rights Under DPDPA 2023
Under the Digital Personal Data Protection Act, 2023, you have the right to access your Personal Data, request corrections for incomplete information, withdraw consent, and request data erasure subject to statutory retention limits.
22. Grievance Officer
IN ACCORDANCE WITH IT ACT & DPDPA 2023
219 2F ILD Trade Centre Sector 47, Sohna Road, Gurugram Haryana-122018