Privacy policy

Last updated 25 October 2026

ShipJasoos is a Shopify app run by Thakur Ecommerce. It compares courier freight invoices and COD remittance reports with a store’s orders to find overcharges and missing payments. This policy explains what data the app uses and how it is handled.

Data we access

• From Shopify: order ID and number, order date, order total, payment method (to tell COD from prepaid), fulfilment status and tracking numbers, and product weights. We do not read or store customer names, emails, phone numbers or addresses.
• Files the merchant uploads or forwards: courier freight invoices, COD remittance and weight discrepancy reports, and order exports. Files and emails are read and then discarded; columns holding customer names, phone numbers, emails or addresses are removed as the file is read. For forwarded emails we read only the attachments and keep the sender address with the file record.
• Connected accounts (optional): a Shiprocket API user or WooCommerce read-only keys, if the merchant connects them. We read orders, shipments, freight charges, weight discrepancies and COD payouts. Credentials are encrypted (AES-256-GCM) and used only by the daily sync; disconnecting deletes them.
• Store details: the shop domain, the access token Shopify issues to the app, and the merchant’s audit settings.

How we use it

Only to run audits for the merchant, show the results, and email the merchant when a dispute window is about to close. We do not sell data, use it for advertising, or combine it across stores, and share it only with the service providers below.

Service providers

• Amazon Web Services (India): hosting and database.
• Postmark: receives emails forwarded to a merchant’s ShipJasoos address.
• Anthropic: when a file’s layout isn’t recognised, its column names and five sample rows (customer columns removed, phone numbers and emails masked) are sent to Claude to work out which column is which. PDF reports are sent whole so Claude can read their table. Anthropic does not use this data to train models.
• Razorpay: payments on the web.

What we store and for how long

Audit results (order IDs, order numbers, tracking numbers and amounts for each finding) and shipment records (tracking number, order number, courier, billed weight, charges, delivery status, COD amounts paid, UTR and dates) are kept for 180 days so merchants can raise disputes with their courier, then deleted automatically. A file waiting for the merchant to confirm its columns keeps its rows, without customer columns, for up to 14 days. When a store uninstalls the app, all of its data is deleted within 48 hours of Shopify’s deletion request. Customer deletion requests sent through Shopify remove any findings that reference that customer’s orders.

Using ShipJasoos on the web

ShipJasoos is also available at app.shipjasoos.com for sellers who sign in by email. For these accounts we store the email address, the number of audits left, and the audit results described above. From a seller’s orders file or WooCommerce store we keep only the order number, total, payment method, date, tracking number and item weight, never customer names, emails, phone numbers or addresses. Payments are processed by Razorpay; we keep the Razorpay order, payment and subscription IDs, the plan status and amounts, never card or UPI details. Sellers can delete their account and all audit data from the Account page; payment records are kept for tax purposes.

Security

Data is sent over encrypted HTTPS connections, connected-account credentials are encrypted at rest, and access is limited to the people who operate the app.

Your rights

Merchants can ask for their data to be exported or deleted at any time. Store customers should contact the merchant, who can make a request through Shopify.

Contact

Questions or requests: thakurecommercepvtltd@gmail.com