Policy

Privacy Policy

Last updated: 27 October 2026

This policy explains what personal data we collect when you use our website, the JewelXpress web panel and app, the AL Kangaroo app or our API, why we collect it, and the choices you have. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Who we are

A L Kangaroo Private Limited ("AL Kangaroo", "we", "us") is the data fiduciary for the data described here. Registered office: Amit Plaza, Indraprastha, S. No. 215, Manjri, Hadapsar, Pune, Maharashtra 411028. You can reach us at support@alkangaroo.in or +91 78755 66919.

When a business books a delivery to its customer, the business decides why that customer's data is shared with us. For that data we act on the business's instructions.

2. Data we collect

Businesses using JewelXpress or the API

Account details: name, user name, email, mobile number and password (stored only in hashed form).
Business details: company name, GST number, business type, addresses and KYC documents you upload.
Order details: pickup and delivery addresses, contact names and numbers, booking value, COD amount and product details.
Billing details: invoices, payments and remittances. When you pay online, the payment is processed by our payment gateway partner; we receive the payment status and reference, never your full card, UPI PIN or net banking details.

Customers receiving a parcel

Name, mobile number and delivery address, shared with us by the business that booked the order.
The location pinned on the map for the address, the delivery OTP and the time and place of delivery.
A proof photo at delivery.
For high-value orders where the business has switched it on, a photo of the receiver's identity document. These photos are stored privately and shown only through short-lived links to the people who need them.

Field Executives using the AL Kangaroo app

Identity, contact, vehicle and bank details and the documents needed for onboarding and verification.
Location while you are on duty in the app and during trips, to assign trips, show live tracking and confirm handovers.
Photos taken in the app for proof of pickup, handover and delivery, and cash collected for COD orders.
Device details, app version, push notification tokens, crash reports and app usage.

Website visitors

What you send when you email or call us.
Basic technical data your browser sends, such as IP address, browser type and the pages you open, kept in server logs.

3. Calls and recordings

Where masked calling is switched on for an order, calls between the customer or the store and the Field Executive go through a virtual number from our telephony provider, so neither side sees the other's real number. These calls may be recorded, and the caller hears an announcement saying so. We use recordings only to resolve complaints and disputes, to investigate lost or damaged shipments and to improve service quality. The masked link stops working when the order is closed.

4. How we use data

To run deliveries: assign trips, guide Field Executives, check OTPs, show live tracking and send status updates and tracking links.
To run accounts: sign-up, sign-in, KYC, billing, invoices and COD remittances.
To keep parcels safe: verify Field Executives, investigate incidents and handle insurance claims.
To support you: answer calls and emails and solve problems with orders.
To improve the platform: fix crashes and measure how the apps are used.
To meet legal duties: tax, accounting and requests from authorities that the law requires us to answer.

We do not sell personal data, and we do not use customers' data for our own marketing.

The people in the delivery: the Field Executive sees what is needed for the trip; the business sees its own orders; the customer sees the tracking details of their parcel.
The business that booked the order, including through its API and webhooks.
Service providers who work for us, under contract and only for the purposes above: cloud hosting and storage, Google (Firebase, Maps and Play services), telephony for masked calls, SMS and WhatsApp messaging, email, our payment gateway partner for online payments, and our insurer for claims.
Authorities, when the law requires it.

Our service providers may process data outside India where the law allows it.

6. How long we keep it

We keep personal data only as long as we need it for the purposes above. In practice:

Data	How long
Business accounts	While the account is active, then as long as tax and accounting laws require for its invoices
Order and delivery records, including proof photos	3 years from delivery, or longer while a claim or dispute is open
Identity document photos taken at delivery	90 days from delivery, or longer while a claim or dispute is open
Call recordings	90 days from the call, or longer while a claim or dispute is open
Field Executive records	While you work with us, then as long as the law requires

7. Security

Data travels over encrypted connections (HTTPS). Access inside our team is limited by role. Passwords are stored only in hashed form. Identity document photos sit on private storage and open only through links that expire. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board of India as the law requires.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

tell you what personal data we hold about you and how we use it;
correct, complete or update it;
erase it, where we no longer need it and no law requires us to keep it;
withdraw a consent you gave us, for the future;
name a person who can use these rights for you if you die or cannot act yourself.

Email grievance@alkangaroo.in from the email or mobile number we know you by. If your data came to us from a business (for example as a parcel receiver), you can also ask that business.

9. Cookies

This website does not use advertising or tracking cookies. The JewelXpress panel uses the cookies and browser storage it needs to keep you signed in.

10. Children

Our services are for businesses and for adults. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

If we change this policy, we update the date at the top. For important changes we will also tell account holders by email or in the app.

12. Grievance Officer

Grievance Officer
A L Kangaroo Private Limited
Amit Plaza, Indraprastha, S. No. 215, Manjri, Hadapsar, Pune, Maharashtra 411028
Email: grievance@alkangaroo.in

We acknowledge a complaint within 24 hours and resolve it within 15 days. If you are not satisfied, you can complain to the Data Protection Board of India. This policy is governed by Indian law, and the courts at Pune, Maharashtra have jurisdiction.