Introduction

Desicargo Connect Private Limited, operating as Shypfy (CIN: U63030DL2022PTC404725), is a logistics aggregation platform registered in India. This Privacy Policy describes how we collect, use, and protect your personal data when you use our website (shypfy.com), shipping platform (ship.shypfy.com), APIs, or communicate with us.

This policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. By using our services, you agree to the terms of this policy.

Data We Collect

Information you provide: Name, email, phone number, company name, GST number, pickup and delivery addresses, consignee details, order and shipment data, payment and bank details, and any content shared through support channels or forms.

Information collected automatically: IP address, browser type, device information, pages visited, session duration, approximate location (from IP), and cookies.

Information from third parties: Delivery status and proof-of-delivery data from courier partners, order data from integrated e-commerce platforms (Shopify, WooCommerce, etc.), and payment confirmations from payment gateways.

How We Use Your Data

We use your personal data to:

• Create and track shipments, allocate courier partners, and process deliveries
• Manage your account, authenticate sessions, and store preferences
• Send transactional notifications — shipment updates, OTP, delivery confirmations
• Generate invoices, process payments, and reconcile COD remittances
• Provide customer support and resolve disputes
• Analyse platform usage and improve our services
• Comply with applicable tax, legal, and regulatory requirements
• Send marketing communications — only with your explicit consent

Data Sharing

We do not sell your personal data. We share data only as necessary:

• Courier partners — shipment-level data (consignee name, address, phone, package details) to facilitate pickup and delivery
• E-commerce integrations — order data synced via API for shipment creation
• Payment providers — limited financial data for transaction processing
• Technology providers — cloud, analytics, and communication service providers who process data on our behalf under contractual safeguards
• Legal authorities — where required by law, court order, or regulatory obligation

Cookies

We use essential cookies for authentication and session management, functional cookies for remembering your preferences, and analytics cookies to understand platform usage. Marketing cookies are used only with your consent. You can manage cookies through your browser settings.

Data Retention

We retain your data only as long as necessary for the purposes described above or as required by law. Shipment and financial records are retained for 8 years per GST and tax regulations. Account data is retained for the duration of your account plus 3 years. Support records are retained for 3 years. Upon expiry, data is securely deleted or anonymized.

Security

We use TLS encryption for data in transit, encryption at rest for sensitive data, role-based access controls, and continuous monitoring on SOC 2-aligned cloud infrastructure. In the event of a data breach, we will notify affected users and the Data Protection Board as required under the DPDP Act.

Your Rights

Under the DPDP Act, 2023, you have the right to access your personal data, request correction of inaccurate data, request erasure of data no longer needed, withdraw consent at any time, and raise a grievance. To exercise any of these rights, email us at support@shypfy.com. We will respond within 30 days.

Children’s Data

Our services are intended for individuals aged 18 and above. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

Changes to This Policy

We may update this policy from time to time. Any changes will be reflected on this page with a revised “Last Updated” date. Continued use of our services after updates constitutes acceptance of the revised policy.

Grievance Redressal & Contact

For any privacy-related concerns, grievances, or data requests, please contact us:

Related Policies

This policy should be read together with: