Cargo Exchange India Private Limited (“Cargo Exchange”, “we”, “us”) runs the website cargoexchange.in, web platforms and mobile apps for shippers, transporters, drivers and logistics businesses, and WhatsApp and other messaging channels through which we, and the businesses we serve, send and receive messages (together, our “services”). This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have. We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them.

Where we provide our services to a business you work with (for example, a shipper or transporter that sends you trip updates through our platforms), that business decides why your personal data is used, and we process it on its behalf. You can raise questions about that use with the business as well as with us.

Contents

• 1. Information we collect
• 2. How we use it
• 3. WhatsApp messages
• 4. Who we share it with
• 5. Where we store it
• 6. How we protect it
• 7. How long we keep it
• 8. Cookies and analytics
• 9. Your rights and choices
• 10. Deleting your WhatsApp data
• 11. Children
• 12. Grievance Officer
• 13. Changes to this policy
• 14. Contact us

1. Information we collect

Information you give us. When you register, use our platforms, request a demo or contact us, you may give us your name, phone number, email address, company name and role, location or address, and business details such as GSTIN and documents needed for transport. The Request Demo form on this website asks for your name, email, phone number, company name, location and the products you are interested in.

Information from using our platforms. Depending on the services you or your organization use, this may include account and sign-in details, shipment, consignment, trip, vehicle and e-way bill details, and, where you or your organization enable tracking, the location of vehicles or devices.

WhatsApp and other messages. The messages you exchange with us, and the information that comes with them, as described in section 3.

Information from the businesses we serve. When a shipper, transporter or other business uses our services to communicate with you, it may give us your name, phone number and the details of the shipment or trip concerned.

Website usage. Information about your device and browser and the pages you visit, collected through cookies (section 8).

2. How we use it

• to provide, operate and support our services, including sending notifications about shipments, trips, documents and payments;
• to respond to your messages, requests and complaints, and to route them to the right team;
• to verify accounts, keep our services secure, and prevent fraud and misuse;
• to improve our services, using aggregated or de-identified information where we can;
• to comply with the law, respond to lawful requests, and establish or defend legal claims.

We do not sell personal data. We send promotional messages only where you have agreed to receive them, and you can opt out at any time.

3. WhatsApp messages

We use the WhatsApp Business Platform, provided by Meta, to send and receive WhatsApp messages from our business numbers, both for our own communications and on behalf of the businesses we serve.

• What we process: your phone number and WhatsApp profile name; the messages you send us (text, images, documents, voice notes, locations and other content) and the messages we send you; delivery and read statuses and their times; and notes our team adds to the conversation.
• Why: to deliver the notifications you or the business you work with expect (for example about trips, consignments, documents or payments), to answer your messages, to keep a record of the conversation, and to keep the service secure.
• Who sees it: our authorised staff; the business on whose behalf a message was sent, where it concerns that business; Meta, which carries WhatsApp messages (your use of WhatsApp is governed by WhatsApp's own privacy policy); and our hosting provider. Our WhatsApp systems run on Google Cloud in India.
• Automated replies: we may answer with automated messages (for example an acknowledgement, or a note outside business hours) and route conversations to the right team.
• Opting out: tell us in the chat, or block our number in WhatsApp. We will stop messages you do not need; messages your organization requires may then reach you another way.
• Deleting your data: see section 10.

4. Who we share it with

• Service providers that process data for us under contract: cloud hosting and infrastructure (including Google Cloud), messaging (Meta's WhatsApp Business Platform, and SMS, email and WhatsApp delivery providers), and website analytics (Google Analytics).
• The businesses we serve, for the shipments, trips and communications that concern them.
• Authorities, courts and regulators where the law requires it, and others where needed to protect rights, safety or property.
• A successor in a merger, acquisition or reorganisation, who must keep to this policy.

We require our service providers to protect personal data and to use it only to provide their services to us.

5. Where we store it

We store personal data in India where we can: our WhatsApp systems and their backups run on Google Cloud in India. Some providers, including Meta for WhatsApp, may process data outside India; where they do, we rely on their contractual commitments and on the safeguards Indian law requires.

6. How we protect it

We keep reasonable security practices and procedures, as required by the Information Technology Act, 2000 and its rules: access limited to authorised staff, encryption in transit, backups, and monitoring. No system or transmission over the internet can be guaranteed to be completely secure. If a breach affects your personal data, we will inform you and the authorities as the law requires.

7. How long we keep it

• Account and platform information: while your account, or our contract with your organization, is active, and afterwards for as long as needed for legal, tax and dispute purposes.
• WhatsApp conversations: 24 months after the last message, unless you ask us to delete them sooner (section 10) or the law requires us to keep them longer.
• Backups of our WhatsApp systems are deleted automatically after 30 days.
• Website analytics: as set in Google Analytics.

8. Cookies and analytics

This website uses cookies, including Google Analytics cookies (such as _ga), to understand how visitors use it. You can block or delete cookies in your browser settings, or install Google's opt-out add-on. Our platforms also use cookies that keep you signed in; without them you cannot sign in.

9. Your rights and choices

Under India's Digital Personal Data Protection Act, 2023, you may ask us to:

• give you a summary of the personal data we process about you and how we process it;
• correct, complete or update it;
• erase it, where we no longer need it or you withdraw consent;
• stop processing that relies on your consent (this does not affect processing before you withdrew it, or processing on another lawful basis);
• let a person you nominate exercise these rights if you die or become unable to.

Email info@cargoexchange.in with the subject Data request, from the email address or with the phone number concerned, and tell us what you would like. We may ask you to confirm your identity. We will respond within the period the law allows. If your data reached us from a business you work with, you can also contact that business.

10. Deleting your WhatsApp data

To have us delete your WhatsApp conversations with us, email info@cargoexchange.in with your WhatsApp number. We will delete your contact record and conversation history from our WhatsApp systems within 30 days and confirm by email when it is done; backups expire within 30 days after that. We keep only what the law requires us to keep (for example records of invoices) or what a pending dispute needs.

Messages also remain on your own phone, and Meta handles your WhatsApp data under WhatsApp's own privacy policy.

11. Children

Our services are meant for businesses and adults. They are not directed at anyone under 18, and we do not knowingly collect personal data of children. If you believe we have, please contact us and we will delete it.

12. Grievance Officer

For any concern about how we handle your personal data, contact our Grievance Officer:

• Grievance Officer, Cargo Exchange India Private Limited
• Plot No 147, High Tension Road, Spell Bound Tower, O.U.T Colony, Hyderabad, Medchal Malkajgiri, Telangana 500094, India
• Email: info@cargoexchange.in  |  Phone: +91-8978581137

We will respond within one month of receiving your grievance. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

13. Changes to this policy

We may update this policy. We will change the date at the top and, for significant changes, tell you through this website or our platforms. Previous versions are available on request.

14. Contact us

Cargo Exchange India Private Limited, Plot No 147, High Tension Road, Spell Bound Tower, O.U.T Colony, Hyderabad, Medchal Malkajgiri, Telangana 500094, India. Email info@cargoexchange.in, phone +91-8978581137. Our Terms of Service govern the use of our services.