Privacy Policy

1.What we collect

Depending on how you deal with us, we collect:

• Consignors and consignees: name, mobile number, address, GSTIN where given, and the contents, weight and value of each consignment.
• Door pickup requests: the name, mobile number and pickup address you enter.
• Tracking: the LR number you search for. We do not ask who you are in order to track a consignment.
• Delivery: the mobile number the delivery OTP is sent to, the name and relationship of the person who receives the goods, and any photograph taken at handover.
• Partner applicants: name, business name, mobile number, email, address, bank name, account number and IFSC, Aadhaar and PAN numbers, images of Aadhaar (front and back), PAN, a cancelled cheque, a passport-size photograph and a live photograph.
• Staff and partner users: name, email, role, branch, sign-in times, two-factor status, and a record of the actions each account takes, with the network address and browser used.
• Your browser stores your session and display preferences (such as dark mode) locally. We do not use advertising or third-party tracking cookies.

2.Why we use it

• To carry and deliver consignments, and to confirm delivery to the right person.
• To bill and collect charges, and to keep the records that GST, e-way bill and transport laws require.
• To verify partner applicants and run the partnership, including paying commission and settling collections.
• To keep the service secure: detecting misuse, investigating incidents, and keeping an audit trail of staff actions.
• To answer your questions and handle claims and complaints.

We rely on your consent for partner KYC, and on legitimate uses allowed by section 7 of the DPDP Act — performing the service you asked for and meeting legal obligations — for consignment data. We do not sell personal data or use it for advertising.

3.Who can see it

• Our branches, but only as needed: a destination branch sees a consignee's contact details only once the goods have arrived there.
• Head office staff, according to their role. Partner KYC documents can be opened only by the Super Admin, and each time they are opened is logged.
• Service providers that run the system for us: Supabase (database, file storage and sign-in, hosted in Mumbai, India) and Vercel (website hosting, which may serve pages from locations outside India). They process data on our instructions.
• A password-breach checking service (Have I Been Pwned), when a password is set. Only the first five characters of a one-way hash of the password are sent; the password itself never leaves our systems.
• Government authorities, including GST and e-way bill systems, where the law requires it or in response to a lawful request.

4.How we protect it

• All connections to the website are encrypted in transit.
• Aadhaar, PAN and bank account numbers submitted by partner applicants are encrypted at rest with AES-256, and are displayed only in masked form unless an authorised person opens the file.
• Access is restricted by role. Head-office accounts can be protected with two-factor sign-in, and passwords that appear in known data breaches are refused.
• Staff actions — sign-ins, bookings, deliveries, price changes and settlements — are recorded in an audit log.

If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires.

5.How long we keep it

• Consignment, billing and settlement records: 8 years from the end of the relevant financial year, because tax and company law require it.
• Partner KYC: for as long as the partnership lasts, then for the period tax and legal obligations require. Applications that are declined are deleted when their purpose ends; you can ask us to delete yours sooner.
• Audit records of staff actions: as long as they are needed to investigate incidents and meet legal obligations.
• Door pickup requests that did not result in a booking are deleted when they are no longer needed.

6.Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct, complete or update it;
• ask us to erase it, except where the law requires us to keep it;
• withdraw consent you have given, which does not affect what we did before you withdrew it;
• nominate someone to exercise these rights for you if you die or become incapable;
• complain to us, and then to the Data Protection Board of India if you are not satisfied with our response.

To exercise these rights, email the support email shown at the foot of vswitch.in. We may need to verify your identity before acting on a request.

7.Grievance Officer

Complaints about how we handle personal data can be sent to our Grievance Officer at the support email shown at the foot of vswitch.in, or by post to the head office address shown at the foot of vswitch.in. We will acknowledge a complaint promptly and aim to resolve it within 30 days.

8.Children

Our services are not directed at children. Partner applicants must be at least 18, and we do not knowingly collect personal data from children except as the name of a consignee on a consignment someone else sends.

9.Data outside India

Our database and file storage are in India. Some website hosting and content delivery may take place outside India. We transfer personal data only as the DPDP Act permits, and never to a country the Government of India has restricted.

10.Changes to this policy

We will update this policy when what we collect or how we use it changes. The version date at the top of this page shows when it last changed. If a change significantly affects data we already hold, we will tell the people affected.

11.Contact

VSWITCH Logistics, the head office address shown at the foot of vswitch.in. Email the support email shown at the foot of vswitch.in, phone the helpline number shown at the foot of vswitch.in.