Privacy Policy

This Privacy Policy describes how Inciflo (“we”, “our”, “the Platform”) collects, uses, and protects information when merchants access and use Inciflo and connect external systems, including Shopify.

1. Introduction

Godamwale Private Trading and Logistics Private Limited (“Godamwale”, “Company”, “we”, “us”, or “our”) is a warehousing and logistics service provider and the owner and operator of the Inciflo Warehouse Management System (“Inciflo”, “the Platform”).

Inciflo is a general-purpose Warehouse Management System (WMS) developed to enable digital warehouse operations, inventory management, order processing, and system integrations for merchants operating their own warehouses, working with third-party logistics providers, or using Godamwale-managed warehouses.

This Privacy Policy explains how Godamwale, through the Inciflo platform, collects, uses, discloses, and safeguards information when merchants (“User”, “Merchant”, “you”, or “your”) access Inciflo and connect third-party platforms such as Shopify.

Inciflo functions as the technology layer that integrates a merchant’s commerce platforms with warehouse operations. Data processed through Inciflo is used strictly for enabling warehouse operations, inventory synchronization, order processing, and fulfillment workflows as configured by the merchant.

Godamwale acts as the data controller for information processed in connection with its logistics and fulfillment services and as a data processor where Inciflo processes customer data on behalf of merchants. Inciflo does not operate as an independent data broker and does not process data outside the scope of configured warehouse and integration services.

This Privacy Policy applies to all information processed through the Inciflo Platform and governs data handling practices in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1.1 Platform Access

Inciflo is accessed via apps.inciflo.com. Certain pages, such as legal disclosures and support information, are publicly accessible without authentication. All warehouse management functionality, APIs, OAuth authentication flows, webhooks, and data processing features require secure authentication.

1.2 Agreement to This Policy

BY ACCESSING OR USING INCIFLO, OR BY CONNECTING ANY THIRD-PARTY PLATFORM THROUGH INCIFLO, YOU AGREE TO THE COLLECTION AND USE OF INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY.

WE DO NOT SELL YOUR PERSONAL INFORMATION. We do not provide access to personal information to third parties except to authorized subprocessors strictly required to provide the services.

2. Information We Collect

2.1 Merchant Account Information

When a merchant uses Inciflo or connects an external platform such as Shopify, we may collect:

Store or business name
Connected platform domain (e.g., store.myshopify.com)
Store owner or administrator name
Email address
OAuth access tokens (securely stored and encrypted)
Timezone and currency settings
Platform configuration metadata

2.2 Inventory and Product Data

To provide warehouse management services, Inciflo may process:

Products, variants, and SKU information
Inventory levels and location data
Product descriptions and images
Barcode and inventory tracking data

2.3 Order and Fulfillment Data

For order processing and fulfillment workflows, Inciflo may process:

Order identifiers and line items
Quantities and pricing information
Shipping and fulfillment status
Carrier and tracking information

2.4 Customer Personal Data

Through order fulfillment workflows, Inciflo may receive customer personal data, including:

Names and contact details
Shipping and billing addresses
Email addresses and phone numbers

Note: Customer data is processed solely for order fulfillment and logistics purposes. Inciflo acts as a data processor on behalf of the merchant, who remains the data controller.

2.5 Technical and Log Data

For security, debugging, and performance optimization, we collect:

IP addresses and device/browser metadata
API request logs and error logs
Usage patterns and feature interactions
Authentication and session events

2.6 Financial Information

Inciflo does not collect or store credit card or banking information. Any billing or payment processing is handled through third-party platforms or payment providers configured by the merchant.

3. How We Use Your Information

3.1 Service Delivery

Synchronize inventory between connected platforms and warehouse systems
Process orders and fulfillment workflows
Update fulfillment status and tracking information
Support multi-warehouse operations

3.2 Platform Operations

Authenticate and authorize access
Maintain system stability and performance
Debug issues and provide support
Monitor security and prevent misuse

3.3 Communication

Send service-related notifications
Respond to support inquiries
Communicate platform updates

3.4 Analytics and Improvement

Analyze usage patterns
Generate aggregated, anonymized statistics
Improve platform features

4. Data Retention

4.1 Active Accounts

Merchant data is retained while the merchant actively uses Inciflo or maintains active integrations.

4.2 Upon Disconnection or Account Closure

When a merchant disconnects a platform or ceases using Inciflo:

Access tokens are revoked
Data deletion workflows are initiated
Data is permanently deleted within 30 days, unless retention is required by law or for dispute resolution

4.3 Log Data

Technical logs are retained for up to 90 days and then purged or anonymized.

5. GDPR Compliance

5.1 Legal Basis for Processing

Contract performance
Legitimate interests (security, fraud prevention)
Legal obligations
Consent, where required

5.2 Data Subject Rights

Individuals may exercise rights of access, rectification, erasure, portability, restriction, and objection by contacting support@inciflo.com. Requests are handled within 30 days.

5.3 Data Processing Agreement

A Data Processing Agreement (DPA) is available upon request for enterprise customers.

6. Third-Party Sharing

6.1 Authorized Sharing

Godamwale fulfillment centers (where applicable)
Cloud infrastructure providers acting as subprocessors

6.2 Prohibited Sharing

We do not sell data, share data with advertisers, or provide data to brokers.

6.3 Legal Disclosure

Information may be disclosed when required by law or to protect legal rights.

7. Security

TLS 1.2+ encryption in transit
AES-256 encryption at rest
Token-based authentication
Role-based access controls
Incident response procedures

In the event of a data breach, affected merchants will be notified within 72 hours.

8. Cookies and Tracking

Only essential cookies are used for authentication, security, and preferences. Analytics data is anonymized.

9. Children’s Privacy

Inciflo is a B2B platform and does not knowingly collect data from children.

10. International Data Transfers

Data may be processed in jurisdictions including India. Appropriate safeguards such as SCCs and encryption are used.

11. Changes to This Policy

Updates will be communicated via email or prominent platform notices. Continued use constitutes acceptance.

12. Contact Us

Godamwale Private Limited
Email: support@inciflo.com
Privacy: privacy@inciflo.com
Platform: https://app.inciflo.com

By using Inciflo or connecting external platforms, you acknowledge that you have read and understood this Privacy Policy.