Privacy policy

Who we are

The data fiduciary is Zepcargo India Private Limited, an Indian company headquartered in Bengaluru. zepcargo is a brand, not a separate legal entity. Anthropic, if later enabled, is a data processor for one product purpose only. Zepcargo does not present the brand as a second fiduciary.

What the website collects

zepcargo.com is a static marketing site. We do not run an account system here. This version does not set marketing cookies and does not embed analytics. Server logs on the host (GitHub Pages) may include IP address and user-agent for security and uptime. Login and registration happen on the separate product app. Third-party resources the page loads (fonts, globe textures) are listed in the cookie policy.

What the product app holds

The app stores commercial-freight account, KYC, booking, nomination-email and file data that you or your nominated agent send us so we can quote, book, coordinate and invoice. Do not send personal cargo or courier consignments — we only handle commercial freight. Buttons labelled Login or Request access send you to that app.

AI in Local Services (FOB)

If this path is switched on, Zepcargo may send a minimised, masked task card to Anthropic (Claude API, through our own adapter) so operations can read nominated-agent emails and draft replies. We do not send your full booking, KYC pack, original emails, PDFs or ID scans. Names, emails, phones, PAN, Aadhaar, GSTIN, IEC and bank details are tokenized first. Tokenising is not the same as anonymising — leftover text may still be personal data.

This AI path is off (dark). OpenAI and Google are not approved for this purpose. Original files and images never go to a vendor. A person at Zepcargo approves sailings, CRO discrepancies and any document we send. You can ask us to keep coordination fully manual for your account. The same draft is in the app help centre and at GET /api/ai-privacy/notice.

Transfers and retention

Anthropic is a United States processor. Its standard API logs may be kept for about 30 days. Zepcargo cannot currently force mid-contract erasure of those vendor logs. Our own purpose logs store field categories only (not prompts or unmasked values) and are purged after 365 days unless a shorter legal hold applies. Anthropic’s commercial terms say it must not train on API customer content. Zepcargo does not join vendor model-improvement or Development Partner programmes.

Related-party agency

On some files Zepcargo or an affiliate may also be the nominated ocean agent. That is a separate role from operating the platform. We will say so on those files.

Your rights

You may ask Zepcargo for access, correction, erasure of data we hold, restriction or withdrawal of AI processing, and — when the Digital Personal Data Protection Act so allows — to nominate another person to exercise rights. Withdrawal of AI processing means coordination stays fully manual. We will stop new vendor calls for that account and purge that account’s purpose-log rows. We cannot erase data Anthropic has already discarded or still holds under its standard retention.

Grievance and complaints

Write to the Grievance Officer at privacy@zepcargo.in. We aim to respond within 30 days. Create and monitor that mailbox before treating this page as live. You may complain to the Data Protection Board of India when that forum is available. Listed cyber incidents are reported by Zepcargo under CERT-In’s own clock; a vendor’s 48-hour contract notice is not that plan.

Contact

Zepcargo India Private Limited, trading as zepcargo, Bengaluru, India. Product questions: the in-app help centre once accounts are open. Site errors: GitHub issues on the public repository.

This page is a product draft for counsel. It does not record a DPA, a privacy review, or authorise a launch.