Privacy Policy
How TradePrep collects, uses, and protects your data. We keep things straightforward — no legalese, no surprises.
Last updated: March 2026 · Effective date: 1 March 2026
Contents
1. Overview
TradePrep ("we", "us", "our") is a B2B SaaS platform operated by Aman Gupta under Aurum Global Logistic, New Delhi — 110044, India. We provide customs documentation management, duty calculation, and shipment tracking services to licensed customs brokers and their clients. This Privacy Policy explains how we collect, use, store, and protect information when you use tradeprep.in and any associated services.
This policy is published in accordance with the Information Technology Act, 2000 (IT Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules 2011). By using TradePrep, you consent to the practices described in this policy.
2. Data We Collect
We collect information that is necessary to provide our customs documentation and duty assessment services. This falls into three categories:
Account and identity information
- Name, email address, and mobile number provided during registration
- Organisation name and type (customs broker or importer/exporter)
- Role within your organisation (admin, team member, or client)
- Password (stored as a one-way hash — we never store your plaintext password)
KYC and business documents
- Importer-Exporter Code (IEC), GSTIN, PAN, and AD Code numbers
- Scanned copies of authorisation letters, bank certificates, and Aadhaar documents uploaded for KYC compliance
- These are uploaded voluntarily by your customs broker to satisfy CBIC requirements
Shipment and trade documents
- Bills of Lading, Air Waybills, commercial invoices, packing lists, Certificates of Origin, and other customs declaration documents
- Data extracted from those documents by our OCR pipeline (invoice values, HS codes, country of origin, etc.)
- Job notes, checklist status, and internal communications between broker and client
Usage data
- Pages visited, features used, and search queries in the HSN lookup and duty calculator tools
- Device type, browser version, and IP address (collected automatically for security and analytics)
- Session timestamps and error logs
3. How We Use Your Data
We use your data only for purposes that are directly related to delivering and improving the TradePrep service:
- Authenticating your identity and managing your account access
- Processing and organising customs documentation for your shipments
- Running OCR extraction on uploaded documents to populate job data fields
- Calculating customs duties using our CUSTADA-based duty engine
- Sending email notifications for shipment status changes, missing documents, and team actions
- Enabling your customs broker to manage, review, and communicate with you through the client portal
- Monitoring platform performance and diagnosing technical errors
- Improving our AI extraction models and duty calculation accuracy (using anonymised data only)
- Complying with applicable Indian legal obligations
We do not use your data for advertising. We do not sell your data to third parties. We do not use your trade documents to build competitive intelligence or industry databases.
4. Data Storage and Security
Your data is stored on Supabase (PostgreSQL), a managed cloud database service. Database servers are located in data centres that meet industry-standard security certifications. All data is encrypted in transit using TLS 1.2+ and encrypted at rest using AES-256.
Access to your data is controlled by Row Level Security (RLS) policies enforced at the database level. This means your organisation's data is logically isolated from data belonging to other organisations on the platform — a team member or client from one broker firm cannot access data from another firm, even if both are TradePrep customers.
Security measures we implement
- All passwords are hashed using bcrypt before storage
- File uploads are scanned for prohibited file types and validated for MIME type
- Maximum file size of 20 MB enforced at upload to prevent denial-of-service
- Filenames are sanitised to prevent path traversal attacks
- Administrative access to production infrastructure is restricted to named personnel and protected by multi-factor authentication
- We maintain access logs and security event records
While we implement reasonable security practices as required by IT Rules 2011, no system is entirely immune to security incidents. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.
6. Third-Party Services
TradePrep integrates with the following third-party services to deliver core functionality. Each service processes only the minimum data required for its specific function:
| Service | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | All user and document data | AWS / SOC 2 certified |
| Google Cloud Vision | OCR extraction from scanned documents (Tier 2) | Document images (pages sent for OCR only) | Google Cloud (data not retained for training) |
| Anthropic (Claude AI) | Structured data extraction from complex documents (Tier 3) | Document text (sent only when lower tiers fail) | Anthropic API (data not retained for training) |
| Resend | Transactional email delivery | Recipient email address, email content | EU / GDPR compliant |
We select third-party processors who provide contractual commitments regarding data security and privacy. Your trade documents are transmitted to Google Cloud Vision or Anthropic only when OCR extraction is required and only for the duration of the processing call — these providers do not store your documents or use them to train their models.
7. Data Retention
We retain your data for as long as your account is active or as required to provide services to your organisation. Specific retention periods are:
- Account data (name, email, role): retained for the lifetime of your account and deleted within 30 days of a verified account deletion request
- Job records and customs documents: retained for 7 years from the date of customs clearance, in line with the document retention obligations under the Customs Act, 1962 and GST rules
- KYC documents: retained for the duration of the client-broker relationship and for 5 years thereafter
- Server logs and security events: retained for 90 days and then automatically purged
- OCR extraction data (field values): retained as long as the associated job record exists
When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an individual or organisation.
8. Your Rights
Under the IT Act 2000 and IT Rules 2011, and consistent with international best practices, you have the following rights regarding your personal data:
- Access: you may request a copy of the personal data we hold about you
- Correction: you may request that we correct inaccurate personal data
- Deletion: you may request deletion of your account and associated personal data, subject to our legal retention obligations described in Section 7
- Portability: you may request your job data and extracted field values in a structured, machine-readable format (JSON or CSV)
- Objection to processing: you may object to certain uses of your data; we will assess and respond within 30 days
- Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, email support@tradeprep.in from the email address associated with your account. We will acknowledge your request within 5 business days and respond substantively within 30 days.
9. International Data Transfers
Our primary infrastructure is hosted on servers located outside India (AWS regions used by Supabase). Transactional emails are processed by Resend, which operates in the EU. OCR processing may involve Google Cloud and Anthropic infrastructure in the United States.
By using TradePrep, you acknowledge and consent to these cross-border transfers. We ensure that all third-party processors maintain appropriate security standards and, where applicable, comply with data protection frameworks in their respective jurisdictions.
10. Children's Privacy
TradePrep is a professional B2B platform intended for use by licensed customs brokers and business entities engaged in international trade. The platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time as our services evolve or as regulations change. When we make material changes, we will notify registered users by email at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Continued use of TradePrep after the effective date of any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
TradePrep
Email: support@tradeprep.in
Website: tradeprep.in
Jurisdiction: India
For data protection matters, please mark your email subject line "Privacy Request — [Your Name]" to ensure prompt handling.
This policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts in India. This document constitutes an electronic record under the Information Technology Act, 2000 and does not require a physical signature.
Questions about your data? We are happy to help.
Contact support@tradeprep.in