1. Introduction

This Privacy Policy describes how Shiprocket ("Company," "we," "us," or "our") collects, uses, and protects information through the 10XPeople.AI mobile application ("App"). The App is intended exclusively for Shiprocket employees and authorized personnel.

By using the App, you agree to the collection and use of information as described in this policy.

2. Information We Collect

a) Account & Identity Information

• Name, employee ID, email address, designation, and department
• Profile photo and organizational reporting structure
• Google account information used for sign-in

b) Attendance & Time Data

• Check-in and check-out timestamps
• Attendance regularization requests and approvals

c) Performance Data

• Goals, deep work logs, and self-review submissions
• Manager reviews, ratings, and calibration data
• Performance cycle history

d) Travel & Expense Data

• Travel requests, expense claims, and supporting documents
• Reimbursement and approval records

e) Learning Data

• Course enrollments, progress, and completion records

f) Recognition Data

• Kudos, shoutouts, and milestone celebrations shared within the platform

g) Device & Technical Data

• Device type, operating system version, and app version
• Authentication tokens stored securely on-device
• Crash logs and app performance diagnostics

h) AI Assistant (Sophie) Interactions

• Queries submitted to the Sophie AI chatbot
• Responses generated for HR policy lookups

3. How We Use Your Information

We use the collected information to:

• Authenticate your identity and provide secure access
• Display your attendance, performance, and learning records
• Process travel requests, expense claims, and approvals
• Enable manager workflows for team performance management
• Facilitate employee recognition and celebrations
• Provide AI-powered HR policy assistance via Sophie
• Improve app performance, fix bugs, and enhance features
• Comply with internal HR policies and applicable laws

4. Data Storage & Security

• All data is stored on Shiprocket's secured servers
• Authentication uses OAuth 2.0 Bearer tokens with automatic expiry
• Tokens are stored on-device using encrypted secure storage
• Data is transmitted over HTTPS/TLS encrypted connections
• Access to employee data is role-based — employees see only their own data; managers see only their direct reports' data as permitted by HR policies

5. Data Sharing

We do not sell or share your personal data with third parties for marketing purposes.

Your data may be shared with:

• Google — solely for authentication via Google Sign-In (governed by Google's Privacy Policy)
• Internal HR and management teams — as required for HR operations, approvals, and compliance
• Service providers — who assist in hosting and maintaining our infrastructure, bound by confidentiality agreements
• Legal authorities — if required by law, regulation, or legal process

6. Data Retention

• Your data is retained for the duration of your employment with Shiprocket
• Upon separation from the company, data is retained as per Shiprocket's internal data retention policy and applicable labor laws
• Authentication tokens are automatically revoked upon logout or account deactivation

7. Your Rights

As a Shiprocket employee, you may:

• Access your personal data through the App
• Request correction of inaccurate information via HR
• Request information about what data is stored about you
• Raise concerns about data handling with the HR team or Data Protection Officer

8. Data Deletion

You may request deletion of your personal data by contacting the HR team at hr@shiprocket.com. Upon receiving a valid request, we will delete or anonymize your data within 30 days, except where retention is required by law or legitimate business purposes.

9. Children's Privacy

The App is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

10. Third-Party Services

The App uses the following third-party services:

• Google Sign-In — for authentication
• Google Play Services — for app distribution

Each third-party service is governed by its own privacy policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be communicated through the App or company communication channels. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, contact:

Shiprocket HR Team
Email: hr@shiprocket.com
Address: Plot No. B, Khasra -360, MG Road, Sultanpur, New Delhi - 110030