Privacy Policy

At AiShopix, trust and privacy are paramount. This policy governs how information is collected, protected, and processed across both the AiShopix Hyperlocal Marketplace (for shoppers and retail buyers) and the AiShopix Business Software & AI Platform (for merchants, CRM users, and enterprise clients).

Effective: October 2026

Part A: AiShopix Hyperlocal Marketplace Privacy Policy

Applicable to shoppers ordering goods from local stores, address/location collection, and payment tokenization

Hyperlocal Discovery

GPS or pincode is used strictly to match you with nearby delivering stores and calculate fees.

Phone OTP Login

Fast passwordless authentication via SMS / WhatsApp OTP without exposing contact databases.

Fulfillment Sharing

Address and contact shared strictly with the fulfilling store and assigned delivery rider.

Zero Card Storage

Payment credentials tokenized by PCI-DSS compliant gateways like Razorpay.

1. Data Protection & Regulatory Compliance

AiShopix operates in full compliance with India's Digital Personal Data Protection Act (DPDPA), the EU General Data Protection Regulation (GDPR), and applicable e-commerce data guidelines. We act as a trusted intermediary connecting shoppers with local merchants while maintaining stringent safeguards around user privacy.

2. Information We Collect from Marketplace Shoppers

When you browse the marketplace, select delivery locations, or place orders, we collect:

  • Location & Address: GPS coordinates (when authorized by browser prompt), selected pincode, street address, apartment details, and delivery instructions to verify serviceability and calculate distance charges.
  • Contact Details: Verified mobile phone number, recipient name, and email address used for passwordless login, order status updates, and digital invoices.
  • Order History: Purchased items, active cart state, preferred merchant favorites, delivery notes, and transaction timestamps.
  • Transaction Identifiers: Gateway payment IDs, settlement references, and payment method (UPI, COD, Net Banking, Card). Raw card numbers or bank passwords are never stored on our servers.

3. Location Data Usage & Granular Permissions

We request your location solely to show stores that physically deliver to your vicinity, calculate accurate delivery estimates, and route delivery riders to your doorstep. You can choose to provide location via your browser’s GPS dialog or manually search and select your city, pincode, or street address. Your live location is never tracked in the background for marketplace shoppers.

4. Data Sharing with Fulfilling Stores & Delivery Riders

In accordance with the principle of data minimization:

  • Your delivery address, recipient name, contact phone number, and special delivery instructions are shared only with the specific local merchant fulfilling your order.
  • The assigned delivery rider or third-party courier receives your contact number and drop-off coordinates solely for completing the delivery handover.
  • Sellers and delivery partners are contractually prohibited from using your contact details for unauthorized marketing or sharing them with external parties.

5. Payment Processing & Gateway Integrations

Digital transactions on AiShopix Marketplace are processed through RBI-authorized, PCI-DSS compliant payment gateways (such as Razorpay and Razorpay Route). Funds are automatically split between the seller, delivery logistics, and platform commissions. Card and UPI credentials are encrypted and tokenized in compliance with Reserve Bank of India standards.

6. Shopper Account & Address Deletion Requests

You have the right to request the permanent deletion of your marketplace account, profile, and saved delivery addresses at any time. Simply email hello@aishopix.com with the subject "Account Deletion Request". All personal identifiers will be permanently purged within 30 days.

7. Marketplace Session Cookies & Local Storage

We use functional cookies and browser local storage to maintain your active cart, remember your selected delivery pincode, and keep you securely logged in. We do not sell browsing data to third-party ad brokers or tracker networks.

Part B: AiShopix Business Software & AI Solutions Privacy Policy

Original privacy policy for merchants, CRM users, rider app background location, and AI automation subscribers

Commitment to GDPR & CCPA

We are fully committed to compliance with the General Data Protection Regulation (GDPR) for our European users and the California Consumer Privacy Act (CCPA) for California residents. This means you have strict control over your data, including rights to access, rectification, portability, and erasure.

1. Who we are

Abhay Education Private Limited ("we", "us", "our"). Address: Floor No.: Ground and First floor, Building No./Flat No.: 218, Dhanbad, Jharkhand - 826004 (IN). Contact: hello@aishopix.com, +919179782285.

2. What we collect

  • Account contact details (name, email, phone, company name, address)
  • Channel identifiers and metadata (e.g., WhatsApp number, Instagram handle)
  • Mobile device parameters and tokens (FCM push notification tokens, device model, operating system version, IP address, and network state)
  • Usage analytics and telemetry (in-app events, diagnostic data, approximate region)
  • Support communications and feedback

3. How we use data

  • To provide, maintain, and improve the CRM, AI agents, mobile application, and related services
  • To deliver critical order alerts and real-time push notifications to your devices
  • To secure, debug, and prevent platform abuse or fraudulent activity
  • To communicate about product updates, feature releases, and technical support
  • To comply with applicable legal obligations and statutory guidelines

4. Location Data Collection (Rider App)

The AiShopix Rider app collects location data to enable delivery tracking and to assign nearby orders to you. This location data is collected even when the app is closed or not in use (background location) so that you can continue to receive delivery offers while your screen is locked or while you are using navigation apps. We only track your background location when you have toggled yourself "On Duty". We do not share your real-time location with third parties other than the customers awaiting their deliveries.

5. Data Roles (Data Fiduciary vs Data Processor)

For customer personal data processed through our WhatsApp, RCS, and omnichannel CRM services, the Merchant (your business) acts as the Data Fiduciary / Controller, responsible for obtaining end-user consent and establishing lawful grounds. AiShopix (Abhay Education Private Limited) acts strictly as a Data Processor, processing end-user data on documented instructions from the Merchant.

6. Infrastructure & Sub-processors

To deliver our services, we engage trusted third-party sub-processors subject to strict confidentiality and data protection standards. Key sub-processors include: Meta Platforms Inc. (WhatsApp Business API infrastructure), Google Cloud Platform & Amazon Web Services (cloud database, storage, and compute infrastructure), Redis Labs (in-memory caching), and Razorpay / Stripe (PCI-DSS compliant payment gateways).

Messaging consent & opt-out

If you explicitly opt in on our signup form, we may send promotional and product update messages to the phone number you provide over supported messaging channels such as RCS or SMS. Consent is optional, never pre-selected, and not a condition of purchase. You can opt out anytime by replying STOP or an equivalent supported unsubscribe keyword in the language we support. We retain the consent source, timestamp, and status for compliance auditing.

Data Security Infrastructure

We employ a multi-layered security approach to protect your information from unauthorized access, alteration, disclosure, or destruction.

Encryption

Data is encrypted in transit using TLS 1.2+ and at rest using AES-256 standard encryption.

Access Control

Strict role-based access control (RBAC) ensures only authorized personnel can access sensitive systems.

International Data Transfers

If you are accessing our services from outside the country where our servers are located, your information may be transferred across borders. By using our services, you consent to this transfer. We ensure that such transfers are covered by appropriate legal mechanisms, such as Standard Contractual Clauses (SCCs), to maintain the security of your data.

7. Data processing & storage security

We use enterprise cloud infrastructure. All data in transit is encrypted using TLS 1.2/1.3 and data at rest is secured via AES-256 standards. Access to user data is strictly limited to authorized personnel following least‑privilege principles.

8. Third‑party integrations & Marketplace Operations

We integrate with messaging platforms (e.g., Meta WhatsApp Business API, Instagram API) and utilize third-party SDKs for push notifications (Google FCM) and payment processing/routing (e.g., Razorpay Route). When participating in our marketplace, payment and KYC data may be processed by these gateways to facilitate automated settlements and revenue sharing. Their respective privacy policies apply to these integrations.

9. Account & data deletion requests

If you wish to delete your account or request deletion of customer data, email hello@aishopix.com. We verify and process requests within 30 days. Upon deletion, all associated settings, historical records, and profile details will be permanently removed.

10. Your rights

Depending on your jurisdiction, you may request access, correction, transfer, or deletion of your personal information. Contact us at hello@aishopix.com to exercise these rights.

legal.privacy.sections.dataRetention.title

legal.privacy.sections.dataRetention.content

Cookie Policy

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

  • Session Cookies: We use these to operate our Service.
  • Preference Cookies: We use these to remember your preferences and various settings.
  • Security Cookies: We use these for security purposes.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

legal.privacy.sections.updates.title

legal.privacy.sections.updates.content

AiShopix — Hyperlocal Marketplace & Business AI Platform

Operated by Abhay Education Private Limited | Contact: hello@aishopix.com — +91 9179782285

Floor No.: Ground & First floor, Building No. 218, Dhanbad, Jharkhand - 826004, India

Privacy Questions & Answers

Why does AiShopix request my location?
AiShopix is a hyperlocal marketplace platform. We request your location (via GPS or manual pincode/area selection) to identify nearby serviceable stores, verify whether a merchant can deliver to your doorstep, and calculate accurate delivery times and distance-based fees. You can choose to manually select your location at any time without granting device GPS permission.
Is my phone number and address shared with stores and delivery drivers?
When you place an order, we share your delivery address, recipient name, contact phone number, and special delivery notes only with the specific store fulfilling your order and the assigned delivery rider or logistics courier strictly for completing delivery. Third-party merchants and riders are contractually prohibited from using your information for unsolicited marketing or unauthorized purposes.
Does AiShopix store my credit card or bank details?
No. AiShopix does not store raw credit/debit card numbers or bank account passwords on our servers. All digital payments and split settlements are securely handled by PCI-DSS certified payment processors, including Razorpay, utilizing bank-grade tokenization and TLS encryption.
Do you sell or monetize personal customer data?
No. AiShopix does not sell, rent, or trade your personal information to third-party data brokers or advertisers. Data collected is used exclusively to facilitate marketplace transactions, ensure delivery, and improve your platform experience.
How can I request deletion of my account and order history?
You have the full right to be forgotten. You can request deletion of your account, saved delivery addresses, and personal profile by emailing hello@aishopix.com or visiting the Account Deletion section on this page. All personal identifiers will be permanently removed within 30 days.
Where is my data stored?
We utilize enterprise-grade cloud infrastructure with data centers primarily located in regions that comply with strict data sovereignty laws. Your data is replicated across multiple availability zones to ensure high durability and availability.
Do you sell my personal information to third parties?
No. AiShopix does not sell, rent, or trade your personal information. We only share data with trusted service providers who assist us in operating our platform, and they are contractually bound to protect your information.
How can I request deletion of my data?
You have the 'Right to be Forgotten'. You can request the deletion of your account and all associated data by contacting our Data Protection Officer at privacy@aishopix.com or hello@aishopix.com. We will process your request within 30 days.
Is my payment information safe?
Absolutely. We do not store your credit card details on our servers. All payment transactions are processed through PCI-DSS compliant payment gateways like Stripe or Razorpay, ensuring the highest level of financial security.