Who We Are
Xapp Digital Solutions, India operates Logxa (www.logxa.com) and the Logxa logistics software. This page explains how we protect the data that our customers — logistics companies — store in their Logxa workspaces, and the data of their own customers, drivers, partners and staff.
It complements our Privacy Policy, which covers personal data we collect through our website, and our Terms and Conditions.
Our Role: Controller and Processor
- Workspace data — shipments, bookings, addresses, inventory, invoices, photos, signatures, locations and the people they relate to — is controlled by the logistics company that owns the workspace. For this data, Logxa acts as a data processor and handles it only to provide the service and on the workspace owner’s instructions.
- Account and billing data about the businesses that subscribe to Logxa, and data collected through our website, is controlled by Logxa as a data controller, as described in the Privacy Policy.
Separate Systems and Workspaces
Each Logxa software — courier & parcel, road freight, freight forwarding, warehouse & 3PL, vehicle transport and virtual address — runs as a separate system with its own application and its own database. Within each system, every business has its own workspace, and every request is checked against the workspace it belongs to.
Inside a workspace, customers, drivers, overseas agents, partner carriers and warehouse clients only see the records that relate to them.
Security Measures
- Encryption in transit — the website, the apps on customers’ own domains and the APIs are served over HTTPS with TLS certificates.
- Access control — roles with per-person permissions, invitation-only staff and partner accounts, and active sessions that workspace owners can see and end.
- Protected credentials — passwords are stored as one-way hashes, and sensitive integration credentials (for example email or storage settings) are stored encrypted.
- Private files — attachments such as photos, PODs and documents are shared through signed links that expire, not public URLs.
- API keys — created and revoked by the workspace owner and limited to that workspace.
- Restricted server access — our servers are protected by firewalls, and administrative access is limited to authorised personnel.
Controls for Workspace Owners
Workspace owners decide how their data is handled:
- Choose who has access and with which permissions, and remove access at any time.
- Send emails through their own email provider, so messages to their customers come from their own domain.
- Store files in Logxa storage or connect their own Amazon S3-compatible bucket.
- Export and integrate data through the workspace’s REST API.
Service Providers
We use a small number of service providers to run Logxa. They receive only the data needed for their service:
- Infrastructure hosting — the servers that run the Logxa systems and databases.
- Email delivery — Amazon Simple Email Service for platform emails such as sign-up codes and account notices.
- Payments — Stripe, for subscription billing. Card details are handled by Stripe and are not stored by Logxa.
- Website analytics — Google Analytics on www.logxa.com (not inside customer workspaces).
Optional integrations a workspace owner switches on — such as Shopify, WooCommerce, GPS providers or a vehicle data lookup — exchange only the data needed for that integration.
Retention and Deletion
Workspace data is kept for as long as the workspace is active. When a subscription ends, the workspace owner can ask us to delete the workspace and its data; we will do so within a reasonable time, except where we are required by law to keep certain records (for example billing records).
Data Subject Requests
People whose data is stored in a Logxa workspace — for example a receiver, a shopper or a driver — should contact the logistics company that operates that workspace, as it controls the data. We assist workspace owners in responding to requests to access, correct or delete personal data.
For data that Logxa controls, see the rights described in our Privacy Policy.
Security Incidents
If we become aware of a security incident that affects personal data in a workspace, we will notify the affected workspace owners without undue delay, share the information we have, and take steps to contain and resolve the incident.
Changes to This Page
We may update this page as Logxa and the law change. Material changes will be announced on this page with a new effective date.
Contact Us
Questions about data protection: support@logxa.com or our contact page.