Introduction

Exyte Solutions Private Limited (ParcelX) (“we”, “us”, “our”), a shipping aggregator operated by Exyte Solutions Private Limited, values your trust and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, share, and secure your data when you use our website https://parcelx.in, mobile app, and services.

We comply with the Digital Personal Data Protection Act (DPDPA) 2023, IT Act 2000 & IT Rules 2011, and applicable international standards including GDPR principles.

By using our services, you consent to the practices described in this policy.

Information We Collect

We may collect the following categories of data:

Personal Identifiable Information (PII)

• Full Name, Phone Number, Email Address
• KYC Information: PAN, Aadhaar, GSTIN, Passport (where required)
• Billing & Shipping Addresses
• Bank Account/UPI details (for COD remittance)

Business & Shipment Data

• Order IDs, AWB/Tracking Numbers
• Product category/type, dimensions, weight
• Courier preference and routing data

Technical Data

• Device & browser type, IP address, location data
• Login timestamps, usage logs, cookies

Sensitive Personal Data (if applicable)

• Identity proofs for regulatory compliance
• Financial credentials (encrypted & tokenized)

How We Use Your Information

We process data strictly for service provision, including:

• Pickup, packaging, courier allocation, and order tracking
• Account registration, onboarding, and verification (KYC)
• Courier invoicing, COD collection, and remittance
• Fraud detection, security monitoring, and legal compliance
• Service improvement, analytics, and reporting
• Notifications, alerts, and customer communication
• Compliance with regulatory, tax, and government requests

We do not use customer shipment data for profiling, marketing, or resale.

Data Sharing & Disclosure

We never sell or rent personal data. Information may be shared only with:

• Courier Partners (e.g., Delhivery, DTDC, Bluedart, XpressBees, India Post, FedEx): For delivery execution
• Technology Vendors: Cloud hosting, API connectors, payment gateways (with signed DPAs)
• Financial Institutions: For COD settlement and reconciliations
• Government Authorities: Where legally mandated under Indian law
• Amazon SP-API Access: Only for seller order import & shipment creation (no other use permitted)

All third parties must comply with our Data Processing Agreements (DPA) and maintain ISO 27001 or equivalent security standards.

Data Retention

• Shipment records: 12 months minimum for legal & operational needs
• KYC/financial data: Retained as per Indian law (up to 8 years)
• Access logs: 90 days for monitoring, then securely deleted
• Customer support queries: Deleted within 6 months post-resolution
• Data deletion requests: Processed within 30 working days unless legally restricted

Your Rights

Under DPDPA 2023 and GDPR principles, you may:

• Access your personal data (within 30 days of request)
• Request corrections to inaccurate data
• Request deletion (unless retention is legally required)
• Withdraw consent for marketing communications
• File a grievance with our Data Protection Officer (DPO)

Security Practices

We implement layered security controls:

• Encryption: TLS 1.2+ in transit, AES-256 at rest
• MFA: Mandatory for employee and admin accounts
• Access Control: Role-based permissions, least privilege principle
• Logging & Audits: All API access logged, anomalies flagged
• Penetration Testing: Quarterly third-party audits performed
• ISO 27001 Practices: Policy framework for IT & data handling

Cookies & Tracking

We use cookies for:

• Website performance optimization
• Authentication & session management
• Analytics (Google Analytics, server logs)

You may disable cookies, but some features may not function correctly.

Policy Updates

We may update this Privacy Policy. Users will be notified of significant changes via email or dashboard alerts. Continued use signifies acceptance

Contact Us

For privacy-related concerns:

Email: [email protected]

Address: Unit No. 8.4, 8th Floor, Eco Towers, Plot A-14, Sector-125, Noida – 201301, UP, India