Privacy Policy

We build omnichannel CRM and AI agents so businesses can accept orders on multiple channels and deliver to customers fast. This Privacy Policy applies to the website, the omnichannel CRM, and the aishopix mobile application published by Abhay Education Private Limited. Privacy and security are core to our product and operations. At AiShopix, we believe that trust is the foundation of our relationship. We are transparent about how we handle your digital footprint.

Effective: May 23, 2026

Commitment to GDPR & CCPA

We are fully committed to compliance with the General Data Protection Regulation (GDPR) for our European users and the California Consumer Privacy Act (CCPA) for California residents. This means you have strict control over your data, including rights to access, rectification, portability, and erasure.

1. Who we are

Abhay Education Private Limited ("we", "us", "our"). Address: Floor No.: Ground and First floor, Building No./Flat No.: 218, Dhanbad, Jharkhand (IN). Contact: hello@aishopix.com, +919179782285.

2. What we collect

  • Account contact details (name, email, phone, company name, address)
  • Channel identifiers and metadata (e.g., WhatsApp number, Instagram handle)
  • Mobile device parameters and tokens (FCM push notification tokens, device model, operating system version, IP address, and network state)
  • Usage analytics and telemetry (in-app events, diagnostic data, approximate region)
  • Support communications and feedback

3. How we use data

  • To provide, maintain, and improve the CRM, AI agents, mobile application, and related services
  • To deliver critical order alerts and real-time push notifications to your devices
  • To secure, debug, and prevent platform abuse or fraudulent activity
  • To communicate about product updates, feature releases, and technical support
  • To comply with applicable legal obligations and statutory guidelines

4. Location Data Collection (Rider App)

The AiShopix Rider app collects location data to enable delivery tracking and to assign nearby orders to you. This location data is collected even when the app is closed or not in use (background location) so that you can continue to receive delivery offers while your screen is locked or while you are using navigation apps. We only track your background location when you have toggled yourself "On Duty". We do not share your real-time location with third parties other than the customers awaiting their deliveries.

5. Data Roles (Data Fiduciary vs Data Processor)

For customer personal data processed through our WhatsApp, RCS, and omnichannel CRM services, the Merchant (your business) acts as the Data Fiduciary / Controller, responsible for obtaining end-user consent and establishing lawful grounds. AiShopix (Abhay Education Private Limited) acts strictly as a Data Processor, processing end-user data on documented instructions from the Merchant.

6. Infrastructure & Sub-processors

To deliver our services, we engage trusted third-party sub-processors subject to strict confidentiality and data protection standards. Key sub-processors include: Meta Platforms Inc. (WhatsApp Business API infrastructure), Google Cloud Platform & Amazon Web Services (cloud database, storage, and compute infrastructure), Redis Labs (in-memory caching), and Razorpay / Stripe (PCI-DSS compliant payment gateways).

Messaging consent & opt-out

If you explicitly opt in on our signup form, we may send promotional and product update messages to the phone number you provide over supported messaging channels such as RCS or SMS. Consent is optional, never pre-selected, and not a condition of purchase. You can opt out anytime by replying STOP or an equivalent supported unsubscribe keyword in the language we support. We retain the consent source, timestamp, and status for compliance auditing.

Data Security Infrastructure

We employ a multi-layered security approach to protect your information from unauthorized access, alteration, disclosure, or destruction.

Encryption

Data is encrypted in transit using TLS 1.2+ and at rest using AES-256 standard encryption.

Access Control

Strict role-based access control (RBAC) ensures only authorized personnel can access sensitive systems.

International Data Transfers

If you are accessing our services from outside the country where our servers are located, your information may be transferred across borders. By using our services, you consent to this transfer. We ensure that such transfers are covered by appropriate legal mechanisms, such as Standard Contractual Clauses (SCCs), to maintain the security of your data.

7. Data processing & storage security

We use enterprise cloud infrastructure. All data in transit is encrypted using TLS 1.2/1.3 and data at rest is secured via AES-256 standards. Access to user data is strictly limited to authorized personnel following least‑privilege principles.

8. Third‑party integrations & Marketplace Operations

We integrate with messaging platforms (e.g., Meta WhatsApp Business API, Instagram API) and utilize third-party SDKs for push notifications (Google FCM) and payment processing/routing (e.g., Razorpay Route). When participating in our marketplace, payment and KYC data may be processed by these gateways to facilitate automated settlements and revenue sharing. Their respective privacy policies apply to these integrations.

9. Account & data deletion requests

If you wish to delete your account or request deletion of customer data, email hello@aishopix.com. We verify and process requests within 30 days. Upon deletion, all associated settings, historical records, and profile details will be permanently removed.

10. Your rights

Depending on your jurisdiction, you may request access, correction, transfer, or deletion of your personal information. Contact us at hello@aishopix.com to exercise these rights.

legal.privacy.sections.dataRetention.title

legal.privacy.sections.dataRetention.content

Cookie Policy

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

  • Session Cookies: We use these to operate our Service.
  • Preference Cookies: We use these to remember your preferences and various settings.
  • Security Cookies: We use these for security purposes.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

legal.privacy.sections.updates.title

legal.privacy.sections.updates.content

Privacy Questions & Answers

Where is my data stored?
We utilize enterprise-grade cloud infrastructure with data centers primarily located in regions that comply with strict data sovereignty laws. Your data is replicated across multiple availability zones to ensure high durability and availability.
Do you sell my personal information to third parties?
No. AiShopix does not sell, rent, or trade your personal information. We only share data with trusted service providers who assist us in operating our platform, and they are contractually bound to protect your information.
How can I request deletion of my data?
You have the 'Right to be Forgotten'. You can request the deletion of your account and all associated data by contacting our Data Protection Officer at privacy@aishopix.com or hello@aishopix.com. We will process your request within 30 days.
Is my payment information safe?
Absolutely. We do not store your credit card details on our servers. All payment transactions are processed through PCI-DSS compliant payment gateways like Stripe or Razorpay, ensuring the highest level of financial security.