Privacy Policy

1. Introduction

XPANDIFI INDIA PRIVATE LIMITED ("Xpandifi", "we", "us" or "our") values your trust and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit xpandifi.com, use our services, or communicate with us by email, phone or WhatsApp. It is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them.

By using our website or services, you agree to this policy. If you do not agree, please stop using them. Please also read our Terms & Conditions.

2. Information we collect

• Contact and enquiry data: your name, email address, phone or WhatsApp number, business name and the contents of any message you send through our contact form, newsletter sign-up, email, phone or WhatsApp.
• Account and business data: business name, GSTIN, PAN, address and similar registration details, and information about your products, target marketplaces and operations that you share with us while evaluating or using our services.
• Billing and payment data: billing address and payment details. Payments are processed by secure third-party payment gateways.
• Identity / KYC data (where required): documents that marketplaces, logistics partners or the law require us to collect, such as PAN or business registration documents.
• Support and communications: queries, chats, emails and support requests.
• Technical data: IP address, browser and device type, pages visited, usage logs and similar data collected automatically by our hosting provider and any analytics tools used on the website.

3. How we use your information

• To respond to your enquiries and provide, operate and improve our services.
• To onboard you on marketplaces and manage listings, orders, logistics and compliance on your behalf.
• To verify your identity and business where required.
• To process payments and issue GST-compliant invoices.
• To send you service updates, onboarding information, order and logistics notifications and support messages, including over WhatsApp where you have opted in.
• To send newsletters or promotional messages, only where you have consented. You can withdraw consent at any time.
• To keep our website and services secure and prevent fraud.
• To meet our legal, tax and regulatory obligations.

4. WhatsApp communications

If you contact us on WhatsApp at +91 72088 65893, or opt in to receive messages from us on WhatsApp, we will process your WhatsApp number, profile name and the messages you exchange with us. WhatsApp messages are sent through the WhatsApp Business Platform provided by Meta Platforms, Inc. and our authorised messaging service provider. Their handling of your data is also governed by the WhatsApp Privacy Policy. You can stop receiving WhatsApp messages from us at any time by replying "STOP" or by contacting us using the details below.

5. Sharing your information

We do not sell your personal data. We share it only with:

• Service providers who help us run our business, such as hosting, email, messaging (including Meta/WhatsApp and our messaging service provider) and payment partners, under obligations of confidentiality.
• Marketplaces and logistics partners you ask us to work with on your behalf.
• Government, tax or law enforcement authorities where required by law.
• Aggregated or anonymised data, which does not identify you, may be used for insights and to improve our services.

Some of these providers may process data outside India. Where they do, we take reasonable steps to ensure your data remains protected.

6. Data retention

We keep personal data only for as long as it is needed for the purposes described in this policy. Tax, invoicing and accounting records are kept for the period required under GST and income tax laws. When the retention period ends, data is deleted or anonymised, unless the law requires us to keep it longer.

7. Your rights

Subject to applicable law, you may:

• Access, correct or update your personal data.
• Ask us to erase your personal data, subject to our legal retention obligations.
• Withdraw any consent you have given, including for marketing messages.
• Nominate another person to exercise these rights on your behalf.

To make a request, email us at services@xpandifi.com.

8. Cookies

Our website may use cookies and similar technologies for essential functions, to measure performance and usage, and to remember your preferences. You can block or delete cookies in your browser settings, although parts of the website may not work properly as a result.

9. Security

We use reasonable technical and organisational safeguards, such as encryption in transit and restricted, role-based access, to protect your personal data against unauthorised access, loss or misuse. No system is completely secure, however, and we cannot guarantee absolute security.

10. Children's privacy

Our website and services are not directed at anyone under 18. If we learn that we have collected personal data from a child, we will delete it.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with its "Last updated" date, and continued use of our website or services means you accept it.

12. Contact and grievance redressal

For questions or complaints about this policy or how we handle your personal data, please contact our Grievance Officer: