Privacy Policy

We collect information in the following categories depending on how you interact with our platform:

Account & Identity Information

• •Name, business email address, and phone number
• •Company name, GSTIN, and registered address
• •KYC documents (PAN card, Aadhaar, GST certificate) for compliance
• •Payment method details (handled by PCI-DSS compliant processors; we do not store raw card data)

Shipment & Operational Data

• •Sender and recipient details (names, addresses, pincodes, phone numbers) for shipment processing
• •Package details (weight, dimensions, declared value, contents description)
• •AWB numbers, carrier tracking data, and delivery status events
• •COD collection amounts and remittance records
• •Order IDs and platform integration data (Shopify, WooCommerce, etc.)

Usage & Analytics Data

• •IP address, browser type, device type, and operating system
• •Pages visited, features used, and session duration within the dashboard
• •API request logs (endpoint, timestamp, response code) for debugging and rate limiting
• •Error logs and crash reports

Communications Data

• •Support ticket contents and chat transcripts
• •Email correspondence with our team
• •Demo request form submissions
• •Notification preferences and opt-in/opt-out records

We use the information we collect for the following purposes:

Service Delivery

• •Processing and routing shipments to your selected courier partners
• •Calculating rates, applying your configured rules, and generating AWB labels
• •Tracking shipments and delivering status updates to you and your customers
• •Processing COD collections and reconciling remittances
• •Generating invoices, GST filings, and financial reports

Account Management & Security

• •Authenticating your identity and maintaining session security
• •KYC verification as required by Indian financial regulations
• •Fraud detection, abuse prevention, and rate limiting
• •Sending critical account alerts (payment failures, security events)

Product Improvement

• •Analysing feature usage patterns to prioritise engineering work
• •Training and improving our AI carrier selection model using anonymised shipment outcome data
• •Bug detection, performance monitoring, and infrastructure optimisation

Communications

• •Responding to your support requests and demo inquiries
• •Sending product updates, changelog announcements, and platform news (you can opt out at any time)
• •Delivering scheduled reports and dashboards you have configured

We share your data only in the following limited circumstances:

Courier Partners

Shipment data (sender details, recipient details, package dimensions, declared value) is transmitted to the carrier you select for each shipment. This sharing is essential to fulfil the service. Each carrier operates under their own privacy policy and data processing terms.

Service Providers (Sub-processors)

• •Payment processors (Razorpay) — for billing and COD remittance
• •Cloud infrastructure (AWS) — for data storage and compute
• •Email and SMS delivery providers — for transactional notifications
• •Analytics platforms — for aggregated, anonymised usage insights only
• •Customer support tooling — support ticket data

All sub-processors are contractually bound to process your data only as directed by us and not to use it for their own purposes.

Legal Requirements

We may disclose your data to government authorities, courts, or law enforcement when required by law, court order, or regulatory process. We will notify you of such requests to the extent legally permitted.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. You will be notified of any such transfer and changes to this Privacy Policy.

Storage Location

Your data is stored on servers located in India (AWS Mumbai region). Backup data may be replicated to a secondary region within India for disaster recovery purposes.

Security Measures

• •All data in transit encrypted with TLS 1.2 or higher
• •Database encryption at rest using AES-256
• •Role-based access controls — our engineers access production data only when required for support or debugging
• •API keys and tokens stored as cryptographic hashes — never in plaintext
• •Regular penetration testing and security audits by third-party firms
• •SOC 2 Type II compliance roadmap in progress

Data Retention

• •Active account data: retained for the duration of your subscription plus 90 days after account closure
• •Shipment records: retained for 7 years for GST and legal compliance
• •Support ticket data: retained for 2 years
• •API access logs: retained for 90 days
• •Anonymised analytics data: retained indefinitely for product improvement

We use cookies and similar tracking technologies on our website and dashboard. Here is what we use and why:

Essential Cookies

These are required for the platform to function. They maintain your logged-in session, store your UI preferences (e.g., dark/light mode, table column settings), and prevent CSRF attacks. You cannot opt out of these.

Analytics Cookies

We use privacy-focused analytics to understand how the platform is used — which features are popular, where users encounter friction, and how flows perform. Analytics data is aggregated and not linked to individual identities.

No Advertising Cookies

Managing Cookies

You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent you from logging in to the platform. Our cookie preference centre is available at the bottom of every marketing page.

Under the Digital Personal Data Protection Act (DPDPA) 2023 and applicable privacy laws, you have the following rights:

• •Right to Access — Request a copy of all personal data we hold about you
• •Right to Correction — Request correction of inaccurate or incomplete data
• •Right to Erasure — Request deletion of your personal data (subject to legal retention obligations)
• •Right to Portability — Receive your data in a machine-readable format (JSON/CSV)
• •Right to Withdraw Consent — Withdraw consent for optional data processing (e.g., marketing emails) at any time
• •Right to Grievance Redressal — Lodge a complaint with our Data Protection Officer

To exercise any of these rights, contact privacy@myrocketxpress.com with your request. We will respond within 30 days.

Data Export

You can export your shipment data, COD records, and invoices directly from the dashboard in CSV or JSON format at any time — no need to contact us.

The MyrocketXpress platform is a business-to-business service intended for companies and registered businesses. It is not directed at individuals under the age of 18.

We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at privacy@myrocketxpress.com and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• •Update the "Last updated" date at the top of this page
• •Send an email notification to all registered account holders at least 14 days before the changes take effect
• •Display a notice in the dashboard for 30 days after the change

Your continued use of the platform after the effective date of changes constitutes your acceptance of the updated policy. If you disagree with changes, you may close your account before the effective date.