Privacy Policy

1. What we collect

About you and your business:

• Your mobile number, name and email (if you give it)
• Business name, PAN, GSTIN and pickup addresses
• Bank account details for COD payouts (stored encrypted)
• Your logo, and the mobile numbers of staff you add

2. Shipment details

When you book, you give us your buyer's name, phone number and address, what is in the parcel, its weight and size, and the COD amount. Photos you upload for a weight dispute are kept with that dispute.

You confirm that you are allowed to share your buyers' details with us so we can deliver their parcels and keep them informed.

3. Payments

We keep the amount and Razorpay's order and payment numbers. We never see or store your card number, UPI PIN or net-banking password: Razorpay handles those.

4. Technical data

Your IP address, used only to stop misuse such as too many login attempts (kept for up to one day), a login cookie, and error reports when something breaks.

5. Why we use it

To run ShipMark for you:

• Book, label and track your parcels
• Check your identity and business (KYC) and prevent fraud
• Pay your COD money
• Send service messages: login codes, tracking updates, wallet and weight alerts
• Keep accounts and records that tax and other laws require
• Find and fix problems and keep ShipMark secure

6. What we never do

We do not sell your data or your buyers' data, and we do not use it for advertising.

7. Who we share it with

Only what each needs to do its job:

• Courier partners: shipment and buyer details, to pick up and deliver
• Messaging providers: phone numbers and message text, for WhatsApp and SMS
• Razorpay: to take wallet payments
• Cloud hosting and storage providers: where ShipMark and its files run
• An error-tracking service: technical details when something breaks
• Government bodies and courts, when the law requires it

8. Messages to your buyers

When you book a parcel, your buyer gets tracking messages on WhatsApp or SMS that show your business name.

9. Cookies

We use only the cookies ShipMark needs to work, such as the one that keeps you logged in. We use no advertising or tracking cookies.

10. How long we keep data

Account and shipment records are kept while your account is open, and after that for as long as tax and accounting laws require.

Login codes and IP records are deleted within one day. Login sessions end after 30 days. Backups are kept for 30 days.

11. How we protect it

Every connection uses HTTPS. Bank details are encrypted. Only staff who need data for their work can see it, and every change made by our staff is logged. The database is backed up every day, and the backups are encrypted.

12. Where data is kept

ShipMark runs on servers in India. Some service providers, such as error tracking, may process limited data outside India, as the law allows.

13. Your rights

You can ask us for a summary of your personal data, ask us to correct or update it, or ask us to erase it (except what the law requires us to keep). You can withdraw your consent by closing your account, and you can name someone to act for you.

Write to our Grievance Officer to use these rights. If you are not happy with our answer, you can complain to the Data Protection Board of India.

14. Children

ShipMark is for businesses and is not meant for anyone under 18.

15. Changes

If we change this policy, we post the new version here with a new date and tell you about important changes.

16. Contact

Grievance Officer: [Grievance Officer name], [Grievance Officer email].

[Business legal name], [Registered address].