Legal
Privacy Policy
Last updated 25th August 2026
We completely understand the responsibility of protecting your privacy. We designed this Privacy Policy to tell you about Xhipment’s practices regarding collection, use, and disclosure of information that you may provide for using our Services/accessing the Platform. By using/accessing the Platform and by providing any information to us through the Platform, you agree to the terms of this Privacy Policy.
This Privacy Policy of Xhipment (“Privacy Policy”) will govern your use of the Platform and its Services. Please read the Privacy Policy carefully before using our Services. By accessing or using the Services, clicking "I Agree" (or similar button or checkbox), or by continuing to use the Services, by accepting or executing an Order Form, you signify your acceptance of and agreement to be legally bound by our Privacy Policy. If you do not agree to the Privacy Policy, you may not use the Services.
In this Privacy Policy, meanings as ascribed to the terminologies in the Terms of Service shall be applicable.
1. Revisions to Privacy Policy:
We reserve the right to update and revise this Privacy Policy at any time. you can determine if this Privacy Policy has been revised since your last visit by referring to the “Effective Date of the current Privacy Policy” date at the top of this page. You should therefore review this Privacy Policy regularly to ensure that you are aware of its terms and amendments. Your use of the Platform constitutes your acceptance of the terms of the Privacy Policy as amended or revised by Xhipment.
2. General:
This Privacy Policy covers our treatment of Information that Xhipment collects and receives, including Information related to your past use of the Platform. Technology and security policies, rules and other precautions are used to shield your Information from unlawful intruders, unauthorized access, destruction and accidental loss. Our Privacy Policy is designed to assist you in understanding how we collect, use and safeguard the Information you provide to us and to assist you in making informed decisions when using our Platform.
3. Information collected by Us
Our primary goal of collecting your Information is to provide you a safe, efficient, smooth and customized experience. This allows Xhipment to provide Services and features that most likely meet your needs, and to customize our Platform to make your experience safer and easier.
When you visit the Platform, you may provide us with your:
3.1. Personal Information:
Establishment Name, mobile number, address, bank details and content which you knowingly disclose and is collected on an individual basis.
3.2. Sensitive Financial Information:
Sensitive financial data or information of a person means such personal information which consists of information relating to passwords, other payment instrument details, and national identifiers including but not limited to: PAN, GST etc.
3.3. Automatic Information:
We receive and store certain information such as your location, which automatically becomes accessible to us by virtue of you accessing the Platform on your device. Additionally, like many other Platforms, we use Cookies and obtain certain types of information when your device accesses the Platform or advertisements and other content served by or on behalf of the Platform.
Cookie is a small data file that is sent to or accessed from your device when you use the Platform (“Cookies”). The use of Cookies helps us to assist your use of certain aspects of the Platform. You can delete Cookies at any time, or you can set your device to reject or disable Cookies. We may use information from Cookies for the following purposes:
- Traffic monitoring;
- IP address from which you access the Platform;
- Type of device and operating system used to access the Platform;
- Date and time of your access to the Platform;
- Pages that you visit.
3.4. Stored Information:
We store all data that is shared by you or by a third party on your behalf such as image files, documents etc. either at the time of accessing the Platform or on information provided by you through social media platforms such as but not limited to WhatsApp or at a later stage.
Personal Information, Sensitive Financial Information, Automatic Information and Stored Information shall individually be referred to as “Personal Information”, “Sensitive Financial Information” “Automatic Information”, “Stored Information” and collectively as “Information”.
The User on using of the Platform and the Services provides its consent for Xhipment to access the Sensitive Financial Information of the User in accordance with the terms of this Privacy Policy. If you do not wish to provide consent for usage of its sensitive financial data or information or later withdraws the consent, Xhipment shall have the right not to provide services or to withdraw the services for which the information was sought from you.
Information does not refer to any content that you may share with us for the purposes of publishing on our Platform. Such content shall be governed by our Terms of Service.
4. Use of Information:
- 4.1. We use your Information for understanding Users in such a way as to provide better Services of the Platform;
- 4.2. We use your Information to customize your experience; detect and protect us against error, fraud and other criminal activity, enforce our terms and conditions, and as otherwise described to you at the time of collection;
- 4.3. To send you communication, as per your notification settings, on any updates or developments pertaining to the Platform or your use of the Platform;
- 4.4. To provide you with technical support, including Platform updates; and
- 4.5. To facilitate payment processes and verify payment information.
5. Types of information not allowed on the Platform
- Nudity or other sexually suggestive content;
- Hate speech;
- Credible threats or direct attacks on an individual or group;
- Content that contains self-harm or excessive violence;
- Content that is deemed illegal by the governing laws;
- Fake or impostor profiles; and
- Spam.
6. Information Sharing Policy
6.1. Generally, Xhipment will not disclose personally identifiable information that we collect through your use of the Platform to unaffiliated third parties. We reserve the right, however, to provide such information to our affiliates, third party contractors, employees, contractors, agents, and designees to the extent necessary to enable them to perform certain Platform related Services (such as improving Platform related Services and features, or maintenance Services) on our behalf.
6.2. We also reserve the right to disclose such information to any third party if we believe that we are required to do so for any or all of the following reasons: (i) by law; (ii) to comply with legal processes or governmental requests; (iii) to prevent, investigate, detect, or prosecute criminal offenses or attacks on the technical integrity of the Platform or our network; and/or (iv) to protect the rights, property, or safety of or our employees, the Users of the Platform, the public, or you.
7. Changes of business ownership and control:
7.1. Xhipment may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of the company. Information provided will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use the Information for the purposes for which it was originally given to us.
7.2. We may also disclose Information to a prospective purchaser of our business or any part of it.
7.3. In the above instances, we will take steps to ensure that your privacy is protected.
8. Rights:
a. Right to Access
You may request confirmation as to whether we process your personal data and request access to or a copy of such personal data.
b. Right to Correction and Erasure
You have the right to request correction, completion, updating, or erasure of your personal data, subject to applicable legal requirements.
c. Right to Withdraw Consent
Where processing is based on your consent, you may withdraw such consent at any time. Withdrawal will not affect the lawfulness of processing prior to such withdrawal.
d. Right to Grievance Redressal
You have the right to raise grievances regarding the processing of your personal data by contacting the grievance officer mentioned in the Privacy Policy. We will address such grievances in accordance with applicable law.
e. Right to Nominate
You have the right to nominate an individual to exercise your rights under applicable law in the event of your death or incapacity.
9. Data retention:
9.1. Unless a longer retention period is required or permitted by law, we will only hold your Information on our systems for the period necessary to fulfil the purposes outlined in this Privacy Policy.
9.2. Even if we delete your Information, it may persist on backup or archival media for legal, tax or regulatory purposes.
10. Technical and functional management of the Platform:
When you use our Platform, we may also process technical data such as your IP address, Device ID or MAC address, and information about the manufacturer, model, and operating system of your mobile device. We use this data to enable us to deliver the functionalities of the Platform, resolve technical difficulties, and provide you with the correct (prevent the transmission of spam, viruses and/or unlawful, defamatory, obscene or otherwise undesirable material or content) and most up to date version of the Platform.
11. Security:
The Platform takes your security seriously and we take precautions to keep your Information secure. We have put in place appropriate physical, electronic and managerial procedures to safeguard the information that we collect. However, due to the open communication nature of the internet, we cannot guarantee that communications between you and Xhipment, or information stored on our Platform, will be free from unauthorized access by third parties. Any transmission of information by you to our Platform is at your own risk.
12. Legal Disclaimer:
We reserve the right to disclose your personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order or legal process served on our Platform. We may be required to share the aforesaid information with government authorities and agencies for the purposes of verification of identity or for prevention, detection, investigation including cyber incidents, prosecution and punishment of offences. You agree and consent for Xhipment to disclose your Information, if so required under the applicable law.
13. A Special Note about Children:
The Services under the Platform are not directed towards children under 18 (eighteen). They are not allowed to register with or use the service or provide personal data. If we discover that we have collected personal information from a child under 18, we will delete that information at the earliest.
14. Governing Law:
The laws of India shall govern this Privacy Policy, regardless of your location. You hereby expressly consent to exclusive jurisdiction and venue located in Bangalore, India, for all matters or disputes arising out of or relating to the Terms of Service, Privacy Policy or your access or use of the Platform.
ANY CAUSE OF ACTION ARISING OUT OF OR RELATED TO THE PRIVACY POLICY OR YOUR USE OF THE PLATFORM MUST BE BROUGHT BY YOU WITHIN ONE (1) MONTH OF THE DATE SUCH CAUSE OF ACTION FIRST AROSE, OR SUCH CAUSE OF ACTION IS FOREVER WAIVED BY YOU. EACH CAUSE OF ACTION SHALL BE ADJUDICATED INDIVIDUALLY, AND YOU AGREE NOT TO COMBINE YOUR CLAIM WITH THE CLAIM OF ANY THIRD PARTY.
15. Grievance Redressal:
If you find any discrepancies or have any grievances in relation to the collection, storage, use, disclosure and transfer of your Personal Information under this Privacy Policy or other terms and conditions or policies of any of Xhipment’s entity, please contact Us at support@xhipment.com.
16. CLAUSES SPECIFIC TO USERS WHO ARE DOMICILED IN EUROPE
While we process your data, we strictly adhere to the General Data Protection Regulation (“GDPR”) currently in force throughout Europe and available to all citizens of the European Union. These are mainly:
- a. Article 6 (1) (b): We shall only process the data you provide us to the extent that you have provided the consent to process the personal data which shall be for the performance of our contract with you.
- b. Article 6 (1) (f): We may process the personal data to ensure that we achieve our legitimate interests, except to the extent where such interests are overridden by the fundamental rights and freedoms ensured under GDPR.
- c. Article 6 (1) (c): To the extent that such processing of such personal data is necessary for compliance with the law.
You can assert the following rights against us within the scope of the GDPR in relation to your personal data:
- Your right to information and access in accordance with Article 15 of the GDPR,
- Your right to rectification under Article 16 GDPR,
- Your right to erasure under Article 17 GDPR,
- Your right to restriction of processing under Article 18 GDPR and
- Your right to data portability under Article 20 GDPR.
- You also have a right to lodge a complaint the competent data protection supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG).
- You can also withdraw a given declaration of consent to the processing of your personal data at any time. Please note that this declaration cannot work retrospectively.
17. CLAUSES SPECIFIC TO USERS WHO ARE IN UNITED STATES OF AMERICA
a. California Online Privacy Protection Act
CalOPPA is the first state law in the United States to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require a person or company in the United States (and conceivably the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this policy.
See more at: https://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf
b. COPPA (Children’s Online Privacy Protection Act)
When it comes to the collection of personal information from children under 13, the Children's Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation's consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online. We do not specifically market to children under 13.
c. CCPA
The laws in force in the state of California, United States of America, requires Xhipment to state the various rights that the California Consumer Privacy Act (“CCPA”) provides to those people who are domiciled in California. The CCPA grants state residents’ certain rights, including the rights to access specific types of personal data, to learn how we process personal data, to request deletion of personal data, and not to be denied goods or services for exercising these rights.
If You are an authorized agent wishing to exercise rights on behalf of a California resident, please contact us through the details provided on the Platform and provide us with a copy of the consumer’s written authorization designating You as their agent.
We may need to verify Your identity and place of residence before completing Your CCPA rights request.
d. Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information. In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur: We will notify the users via email within 7 business days. We also agree to the Individual Redress Principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.
e. CAN SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations. If at any time you would like to unsubscribe from receiving future emails, you can email us and we will promptly remove you from ALL correspondence.