AI Shyp Legal, Trust & Policies

This policy applies to all users of AI Shyp, including:

• Franchise Partners & Logistics Hub Operators utilizing our white-label counter software.

• E-Commerce Merchants & D2C Brands managing domestic deliveries and tracking.

• Field Operations Staff, Delivery Personnel, and Counter Agents utilizing the AI Shyp Mobile App.

• End Recipients/Consignees whose delivery and tracking data is processed through our tracking pages, SMS alerts, and WhatsApp notification engine.

To provide automated courier aggregation, multi-carrier label generation, and rate comparison, we collect the following categories of information:

A. Account & Merchant Profile Data: Name, registered business name, trade name, GSTIN, PAN, business entity address, corporate email address, mobile number, and government-mandated KYC verification documents.

B. Consignee & Shipment Data: Destination recipient full name, complete physical delivery address, destination PIN code, contact phone number, alternate phone number, package declared value, parcel dimensions (length, width, height, and dead weight), product description, and Cash on Delivery (COD) amount collectable.

C. Financial & Wallet Transaction Data: Bank account details and verified UPI IDs submitted for COD remittance payouts, wallet recharge transaction logs, payment gateway order identifiers, and GST invoice records. (Note: AI Shyp does not store raw credit/debit card numbers or CVVs; all online payments are processed through PCI-DSS compliant, RBI-authorized payment gateways like Razorpay/Cashfree).

D. Web Server & Technical Telemetry: IP address, browser type, operating system version, referring URLs, session timestamps, and interface interactions.

We utilize your information strictly for legitimate commercial and logistics execution purposes, including:

• Manifesting and routing packages with 14+ integrated courier carriers (Delhivery, BlueDart, DTDC, Xpressbees, Shadowfax, Ekart, etc.).

• Calculating dynamic volumetric weights, surface/air freight charges, and carrier SLA recommendations.

• Dispatching automated delivery notifications and real-time tracking updates to consignees via WhatsApp Cloud API, transactional SMS, and email.

• Processing automated NDR (Non-Delivery Report) workflows to capture alternate delivery instructions and reduce RTO (Return to Origin) losses.

• Executing automated COD remittance (T+1/T+2 bank transfers) and maintaining accurate ledger accounts.

• Preventing fraudulent bookings, contraband dispatches, and unauthorized wallet overdrafts.

• Continuously improving AI Shyp web features, API speed, and mobile application stability.

AI Shyp does not sell, lease, or monetize your personal or shipment data. Information is shared strictly with the following trusted third parties on a need-to-know basis:

• Integrated Courier Carriers: Necessary shipment and consignee details (name, delivery address, phone, COD value, weight) are transmitted via encrypted API integrations to the courier chosen by the merchant (e.g., Delhivery, BlueDart, DTDC, Xpressbees, Shadowfax, Ekart Logistics, Trackon, Ecom Express, Amazon Shipping).

• Banking & Payment Gateways: Transaction identifiers and payout accounts are shared with RBI-licensed payment aggregators to facilitate instant wallet recharges and COD remittances.

• Communication Infrastructure: Contact numbers and shipment status data are shared with certified communication gateways (such as Meta WhatsApp Cloud API and licensed telecom SMS aggregators) for transactional tracking dispatches.

• Cloud Hosting Infrastructure: Data is securely stored within Amazon Web Services (AWS) data centers located within the territory of India with multi-zone redundancy.

• Legal & Regulatory Authorities: Data may be disclosed when strictly mandated by applicable Indian law, court order, or authorized government agencies investigating prohibited or contraband cargo.

We employ industry-leading cybersecurity safeguards to ensure the confidentiality, integrity, and availability of all data:

• 256-bit SSL/TLS cryptographic encryption for all data in transit across Web dashboards, REST APIs, and Mobile Apps.

• AES-256 encryption at rest for sensitive merchant identifiers, API keys, and bank account numbers.

• Strict Role-Based Access Control (RBAC), multi-factor authentication (MFA) for administrative access, and isolated multi-tenant database partitions.

• Regular vulnerability scanning, automated penetration testing, and real-time server DDoS protection.

We retain personal and shipment information for as long as your merchant or franchise account remains active.

• Statutory Tax Records: In compliance with the Central Goods and Services Tax (CGST) Act, 2017 and Indian accounting standards, tax invoices, shipping manifests, and COD ledger entries are retained for a minimum period of 8 (eight) financial years.

• Inactive Accounts: If an account is closed without pending disputes or audits, non-statutory personal identifiers are permanently scrubbed or anonymized within 90 days of verified account closure.

Under applicable Indian data protection laws and international best practices, you possess the following rights regarding your data:

• Right to Access: View and export your complete shipping logs, wallet transaction ledgers, and profile KYC information at any time via your dashboard.

• Right to Rectification: Correct inaccurate or outdated business addresses, contact numbers, or bank account details.

• Right to Erasure: Request permanent deletion of non-statutory data upon full settlement of all account dues.

• Right to Withdraw Consent: Revoke mobile app hardware permissions (Camera, Location, Notifications) directly from your mobile device settings.

The AI Shyp web portal utilizes essential session cookies and performance telemetry to maintain secure logins, preserve user interface preferences, and analyze platform load speeds.

We do not utilize invasive third-party cross-site advertising cookies. You can manage or disable cookie preferences via your web browser settings.