Privacy.
Your papers stay yours.

What we collect

• When you send a tender: your name, company and email; the bid number or link; and the tender PDF.
• In your dashboard: your email, to send your sign-in code; the papers you keep in your Vault, such as licences, certificates and turnover statements; your checks and sheets.
• When you pay: the details for your GST invoice: name, GSTIN or State, and address. Razorpay takes the payment. We receive its reference, amount and method, never your card or bank details.
• For your alerts: the devices you sell, taken from your papers, your licences and the tenders you checked, and any you add yourself.
• If you are an importer on the letter desk: your letterhead details; the name and designation of the person who signs; images of the signature and seal; your products and their papers; and your dealers’ company names and email addresses.
• If you are a partner consultant: your clients’ company names, and the tenders and papers you send for them.
• When you check a licence, without signing in: the licence number, or the company and device, that you type. We use it to answer you and do not keep it.
• When you write to us: your email address and what you send.
• When you visit: your IP address and browser details, in our hosts’ logs.

Papers can name people, such as a signatory. They get the same care.

The licence check and the free check form each allow only so many uses a day. To count them we keep, for two days, a scrambled form of your network address that cannot be turned back into the address. A small puzzle your own browser solves stands in for a captcha, so no outside service watches you.

Why we use it

• to read your tender and check it against your papers;
• to send your sheet, alerts and sign-in codes;
• to tell you of rule changes and open tenders for the devices you sell;
• to draft and deliver the letters an importer approves;
• to bill you and keep tax records;
• to keep Canipus secure and fix faults;
• to answer you.

Nothing else: no advertising and no selling. You can stop the alert emails at any time, under “Your lines” in the app.

What is public

Three pages need no sign-in: the licence check, rule changes and open tenders. They show public facts from official sources: CDSCO’s lists of licences, official notices, and tenders on official portals.

• From CDSCO’s lists we keep each licence holder’s name, State and devices. We keep no telephone number and no email address from them.
• A licence check gives one answer at a time: the holder, its State and the matching device. It never shows the list.
• The open tenders name the buyer, the item and the closing date, and link to the official page. They name no officer and carry no telephone number or email address.

Nothing of yours is on these pages.

Cookies

canipus.com sets no cookies. Your dashboard uses cookies only to keep you signed in. We run no analytics and no ads.

Who sees it

• You, signed in with your email.
• Our team, only to deliver your work, for example to review a line the agent is unsure of.
• A dealer, when an importer approves its letter: that letter and that product’s papers, and nothing else of the importer’s.
• Your partner consultant, if you work through one: the tenders and papers it sends for you.
• The services that run Canipus, each for one job:

Anthropic may not train its models on what we send, and by default deletes it within 30 days.

We share information with an authority only when the law requires it.

Where it is kept

Your account, checks and papers are stored in Mumbai, India. Some services in the table work from outside India, as shown.

How long we keep it

• Tenders, papers and sheets: until you delete them or ask us to.
• Your account: while you use Canipus, and deleted when you ask.
• Invoices and payment records: 8 years, as company and tax law require.
• The counts for the licence check and the free check form: two days.
• Server and error logs: a short time, by our hosts.

How we protect it

• Every connection is encrypted.
• Files sit in private storage. Each company can open only its own, and we test that on every change.
• Our team signs in with two-step verification.
• If a breach puts your data at risk, we tell you and the authorities as the law requires.

Your choices

Ask us for a copy of your data, to correct it, or to delete it. You can withdraw your consent at any time: we then stop using your data and delete it, except what the law makes us keep. Write to info@canipus.com. We answer within 30 days.

Grievance officer

Seelam Sri Harsha, Director
Canipus Private Limited
Shop No. 22, First Floor, Jalaram Chambers, Karelibaug, Vadodara, Gujarat 390018, India
info@canipus.com, with the subject “Grievance”

We resolve every grievance within 30 days.

Children

Canipus is for businesses, and not for anyone under 18.

Changes

When this policy changes, its date changes. If a change touches how we use your documents, we email you before it applies.

The law

This policy follows the Information Technology Act, 2000 and its 2011 rules on personal data. We will meet the Digital Personal Data Protection Act, 2023 as its rules come into force.