1. Introduction

Eximly (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our export-import management platform available at eximly.in.

2. Information We Collect

We collect information that you provide directly to us, including:

Account Information: Name, email address, phone number, company name, IEC (Importer-Exporter Code), and GSTIN when you register for an account.
Trade Data: Shipment details, order information, buyer/vendor contacts, financial records (LC, BRC, remittance details), and documents you upload or generate.
Usage Data: Information about how you interact with our platform, including pages visited, features used, and timestamps.
Device & Technical Data: Browser type, IP address, device identifiers, and operating system information.

3. How We Use Your Information

We use the collected information to:

Provide, operate, and maintain our platform services.
Process your trade operations, generate documents, and manage shipments.
Integrate with third-party services (for example GST verification and email delivery) to provide the features you use.
Send you service-related notifications, alerts, and updates.
Provide customer support and respond to your enquiries.
Analyse usage patterns to improve our platform and user experience.
Comply with legal obligations and regulatory requirements.

4. Data Storage and Security

Your data is stored on secure cloud infrastructure with bank-grade encryption. We implement row-level security to ensure that only authorised team members within your company can access your trade information. We use industry-standard security measures including:

SSL/TLS encryption for all data in transit.
AES-256 encryption for data at rest.
Regular security audits and vulnerability assessments.
Access controls and authentication mechanisms.

5. Third-Party Services

We may integrate with or share data with third-party services to provide our platform features, including:

Sub-processors. These providers process data on our behalf, only to deliver the features described, and are bound by their own data-protection commitments:

Supabase — database, authentication and file storage. Your account and business records are held here.
Vercel — application hosting and delivery.
Razorpay — subscription billing. Card and bank details are entered on Razorpay’s systems and are never stored by Eximly.
Resend — transactional email (login codes, document delivery, alerts).
Google — optional “Sign in with Google”. If you use it, Google shares your name, email address and profile picture with us solely to create and authenticate your account. We request no other Google data, and we do not read your Gmail, Drive, Calendar or Contacts. You can revoke this at any time from your Google Account permissions page.
Anthropic and Groq — the AI assistant, HS-code suggestions and document scanning. Content you submit to an AI feature is sent to these providers to generate a response. It is not used to train their models.
Cloudflare — bot and abuse protection on sign-up and login.
Zoho — our CRM and support desk, holding the contact details you give us when you enquire or raise a ticket.
AppyFlow — live GSTIN verification. Only the GSTIN you enter is sent.

Government portals. ICEGATE (Indian Customs EDI Gateway) and DGFT (Directorate General of Foreign Trade) reference numbers you enter are stored by us and we link out to those portals. We do not transmit your data to them.

We do not sell your personal information or trade data to any third party, and we do not share it for advertising.

6. Cookies and Tracking

We ask for your choice on your first visit through a consent banner, which uses Google Consent Mode. Non-essential cookies stay switched off until you accept them. The categories are:

Strictly necessary — sign-in session, security and abuse prevention, and remembering your cookie choice itself. These cannot be turned off, because the platform cannot keep you logged in without them.
Analytics — Google Analytics, to see which pages and features are used. Set only if you choose “Accept all”.
Advertising — Google Ads, to measure which campaigns lead to a sign-up. Set only if you choose “Accept all”.

Choosing “Essential only” leaves analytics and advertising storage denied. You can change your mind at any time by clearing this site’s data in your browser, which makes the banner appear again, and you can block or delete cookies through your browser settings.

7. Your Rights

For users in India, these rights are those of a Data Principal under the Digital Personal Data Protection Act, 2023 (DPDP Act). Eximly is the Data Fiduciary for the personal data you provide. You have the right to:

Access the personal data we hold about you, and a summary of how it is processed.
Request correction, completion or updating of inaccurate data.
Request erasure of your account and associated personal data, except where we must retain it to meet a legal obligation (see Data Retention below).
Export your trade data in standard formats.
Withdraw consent you have given, as easily as you gave it — including your cookie choice.
Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
Opt out of non-essential communications.
Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these rights, please contact us at eximly.in@gmail.com.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, the Consumer Protection (E-Commerce) Rules, 2020 and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are:

Name: Sathishkumar Kaveri
Designation: Grievance Officer, SIONEX TECHNOLOGIES
Email: eximly.in@gmail.com
Phone: +91 80504 02243
Address: Eximly, No 16, RR Nagar, Chinnaelasagiri, Dharga, Hosur, Krishnagiri-635126, Tamilnadu, India

Please write “Grievance” in the subject line. We acknowledge every complaint within 48 hours and aim to resolve it within 30 days of receipt. If you are not satisfied with the outcome of a data-protection complaint, you may escalate it to the Data Protection Board of India.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Eximly

Email: eximly.in@gmail.com

Operated by: SIONEX TECHNOLOGIES, a sole proprietorship registered in Tamil Nadu, India.
GSTIN: 33CXGPS5514N2Z0
Registered address: Eximly, No 16, RR Nagar, Chinnaelasagiri, Dharga, Hosur, Krishnagiri-635126, Tamilnadu, India
Phone: +91 80504 02243