Privacy Policy

CargoFide is a product of Sharprising Multilogistics Pvt. Ltd., a company incorporated under the Companies Act 2013, headquartered in Nashik, Maharashtra, India ("Sharprising", "we", "us", or "our"). This Privacy Policy describes how we collect, use, store, and disclose personal data when you access or use the CargoFide platform.

We collect the following categories of data:

• Account information: Name, email address, company name, IEC code, GSTIN, and phone number provided at registration or updated in your profile.
• Shipment data: Origin, destination, commodity, HS codes, weight, container type, carrier details, and status updates entered by your freight forwarder or imported via our Google Sheets integration.
• Trade documents: Files you upload (commercial invoices, packing lists, bills of lading, insurance certificates, etc.). These are stored in encrypted AWS storage buckets.
• Usage data: Pages visited, features used, timestamps of actions, and error logs. Used solely for platform reliability and feature improvement.
• Communications: Messages exchanged through the platform's notification and quotation system.

We do not collect payment card data. CargoFide does not process payments in V1.0.

We use the data we collect to:

• Operate and deliver the CargoFide platform to you and your freight forwarder
• Process shipment workflows, document review cycles, and quotation approvals
• Run the DVIE document intelligence layer (OCR extraction and discrepancy detection)
• Send transactional notifications (shipment updates, document status changes, quotation approvals)
• Maintain audit trail records as required by the Indian Customs Act 1962
• Diagnose bugs and improve platform reliability
• Comply with applicable laws and regulations

We do not sell your data. We do not use your data for advertising.

For users in the European Union or UK, we process personal data under the following lawful bases (GDPR Article 6):

• Contractual necessity: Processing required to deliver the logistics platform services you (or your forwarder) have contracted for.
• Legal obligation: Audit trail retention required by Indian customs law and applicable tax regulations.
• Legitimate interests: Platform security monitoring, fraud prevention, and platform improvement — balanced against your rights.
• Consent: Where required by law (e.g., non-essential analytics cookies). You may withdraw consent at any time.

For users in India, data processing is conducted in accordance with the Digital Personal Data Protection Act 2023 (DPDP Act).

We do not sell, rent, or trade your personal data. We share data with the following categories of recipients only to the extent necessary to deliver the platform:

• Amazon Web Services (AWS): Database, authentication, and file storage (ap-south-1 / Mumbai region).
• Global edge / hosting provider: Application deployment and serverless compute across a global CDN.
• Transactional email provider: Delivery of platform notification and account emails.
• AfterShip: Container and shipment tracking data (shipment reference only — no personal identifiers shared).
• Your freight forwarder: Your forwarder has access to your shipment and document data within their tenant scope. This is the core operational purpose of the platform.

We retain personal data for as long as your account is active or as needed to provide platform services. Shipment records, document uploads, and audit trail entries are retained for a minimum of 5 years to comply with the Indian Customs Act 1962 and applicable tax laws.

On account termination, personal identifiers may be anonymised in aggregate analytics data. Document files in storage are deleted within 30 days of account termination on request.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access — obtain a copy of your personal data
• Right to correction — correct inaccurate or incomplete data
• Right to erasure — request deletion (subject to legal retention obligations)
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where consent is the legal basis

To exercise any of these rights, email us at support@cargofide.com. We will respond within 30 days.

CargoFide uses strictly necessary cookies (session authentication) and optional localStorage for user preferences (theme selection). We do not use third-party tracking or advertising cookies.

We implement technical and organisational security measures including AES-256 encryption at rest, TLS 1.2+ in transit, row-level security at the database level, signed short-lived URLs for document access, and 90-day key rotation. See our Security page for full details.

For privacy enquiries, data requests, or to raise a concern:

If you are an Indian resident and believe your data has been processed in violation of the DPDP Act 2023, you may also file a complaint with the Data Protection Board of India.

We may update this Privacy Policy from time to time. Material changes will be notified to registered users via email and in-platform notification. The effective date at the top of this page reflects the most recent revision. Continued use of CargoFide after changes take effect constitutes acceptance.