Privacy Policy

Ximverse is a software platform operated by Manudocs Private Limited, a company incorporated in India (CIN U62010UP2026PTC243193, registered office at Plot No-13 & 14, Sector 126, Noida, Gautam Buddha Nagar, Uttar Pradesh – 201313).

We provide a software platform for Indian international-trade participants — exporters, importers, Customs House Agents (CHAs), freight forwarders, and their authorised representatives — covering export and import documentation, ICEGATE / DGFT integrations, regulatory intelligence, catalog management, logistics, and finance tools. This policy explains how we handle your data across all of these features, current and future.

Contact: connect@ximverse.com

Identity data

• Name, email, mobile number
• Login credentials (email + bcrypt-hashed password)

Business data

• IEC (Importer-Exporter Code), GSTIN, PAN, LUT ARN
• CHA License Number (for CHA users)
• AD Code, bank account details
• ICEGATE registered ID

Operational data

• Export shipment details (ports, buyers, products, line items) and generated documents — Proforma, Commercial Invoice, Packing List, Tax Invoice, VGM, SI
• Import data — Bill of Entry, supplier details, import line items, duty calculations
• Uploaded supporting documents (PDFs)
• eSANCHIT IRN / DRN numbers
• Filed Shipping Bill / Bill of Entry submissions
• Logistics data — container numbers, freight rates, tracking events
• Finance data — RoDTEP / Drawback claims, eBRC references, IGST refund records

Technical data

• IP address, browser, device type
• Login times, session activity
• Error logs

We use your data only to:

• Run the platform features you signed up for
• Generate the export documents you request
• Allow your assigned CHA to view and edit your shipments, where applicable
• Send transactional emails (account, shipment, billing)
• Improve product reliability via aggregated error logs

We do not sell your data, share it with advertisers, or use it for unrelated marketing.

• Database: Neon (PostgreSQL), India region primary
• File storage: Cloudflare R2, India shard primary
• Email delivery: Through a transactional email provider
• AI processing: Google Vertex AI / Gemini is used in limited cases to enrich regulatory notifications and assist with document parsing. Content sent to Vertex AI is not retained by Google for training.

• Your assigned CHA — sees only your shipment data, not your full account
• ICEGATE — only when you choose to file a Shipping Bill; we transmit only the CACHE01 JSON you authorise
• Payment gateways (Razorpay or equivalent) — only the minimum required for payment
• Government authorities — only on a valid legal order
• We never share with anyone else.

• Active accounts: for as long as your account is active
• Filed Shipping Bills + invoices: retained for 7 years as required by the Customs Act and GST Act
• Closed accounts: personal identifiers deleted within 30 days; statutory financial records retained as required by law
• Technical logs: 90 days

You can:

• Access your data — view it in your dashboard
• Correct it — edit your profile, shipments, and documents
• Download it — export your shipment history
• Delete your account — open Account Settings → Delete Account, or email connect@ximverse.com

Some statutory records (filed SBs, invoices) cannot be deleted before their legal retention period ends.

• TLS 1.3 encryption in transit
• AES-256 encryption at rest (Neon, Cloudflare R2)
• Passwords stored as bcrypt hashes
• Role-based access control
• Tenant isolation — your R2 files cannot be accessed by other tenants
• Regular dependency security updates

We use a single session cookie to keep you logged in (xim_platform_session). We do not use tracking cookies or third-party advertising cookies.

Ximverse is built for businesses. We do not knowingly collect data from anyone under 18.

We may update this policy. Material changes will be notified by email at least 30 days in advance.

Questions, complaints, or data requests: connect@ximverse.com