Privacy Policy – Shrimo Innovations

Last Updated: 29 September 2026

This Privacy Policy explains how Shrimo Innovations Private Limited collects, uses, stores, shares, and protects personal information when you visit our websites, create an account, place an order, make or verify a payment, purchase or download a digital product, receive an invoice, use a product demo, contact support, leave a review or comment, or otherwise use our services.

1. Who We Are

Legal Name: Shrimo Innovations Private Limited

Website: https://shrimo.com/

Customer Portal: https://app.shrimo.com/

Support Portal: https://app.shrimo.com/support/

Email: info.shrimo@gmail.com

Phone: +91 9907472038

Registered Address: Chakkar Road, Narmadapuram – 461001, Madhya Pradesh, India

GSTIN: 23ABOCS3996D1ZZ

CIN: U63999MP2024PTC073074

Shrimo Innovations Private Limited operates the website, customer accounts, checkout, payment workflows, digital product delivery, invoices, support, demos, and related services described in this Privacy Policy.

2. Information We Collect

Depending on how you use our services, we may collect:

Name.
Email address.
Phone number.
Billing address.
Shipping address, where applicable.
City, state, PIN code, and country.
Company or business name.
GSTIN, where provided.
Customer account information.
Account preferences and profile information.
Order details and order status.
Products purchased.
Products viewed.
Cart contents.
Payment status.
Payment reference, UTR, transaction ID, or similar payment information.
Payment proof or screenshot submitted for manual verification.
Invoice and tax information.
Download permissions and download history.
Product entitlement and software-version information.
Support requests, messages, and attachments.
Reviews or comments you choose to submit.
IP address.
Browser type and browser user-agent information.
Device information.
Location information used for functions such as tax calculation or fraud prevention.
Cookie and session information.
Website activity relevant to security, fraud prevention, order fulfilment, and service operation.

We may also receive limited information from payment providers, anti-spam services, hosting providers, security services, or other service providers involved in operating the website.

3. Why We Use Your Information

We may use personal information to:

Process, confirm, and manage orders.
Create and manage customer accounts.
Populate future checkout details where appropriate.
Provide purchased software and digital-product access.
Maintain product entitlements.
Generate secure download links.
Provide eligible product updates or releases.
Generate GST invoices.
Calculate and record applicable taxes.
Verify automated or manual payments.
Review payment proofs, UTR numbers, and transaction references.
Prevent fraud, misuse, unauthorized payments, and download abuse.
Send transactional emails relating to orders, payments, invoices, downloads, accounts, and support.
Respond to support, refund, billing, and account requests.
Maintain transaction, invoice, support, and download records.
Improve website functionality and store offerings.
Protect the security and integrity of our systems.
Comply with tax, accounting, regulatory, and legal obligations.
Send marketing communications where you have chosen to receive them.

Depending on the activity and applicable law, processing may be based on performing a contract with you, complying with legal obligations, our legitimate business and security interests, or your consent where consent is required.

4. WordPress and WooCommerce

Our customer portal uses WordPress and WooCommerce to operate the store, manage accounts, process orders, maintain product information, calculate taxes, and provide digital-product access.

These systems may store or process information including:

Products you have viewed.
Products purchased.
Order date and amount.
Billing details.
Shipping details, where applicable.
Location, IP address, and browser information used for functions such as tax estimation and fraud prevention.
Cart contents.
Payment method and payment status.
Customer account information.
Tax information.
Order notes.
Refund information.
Download permissions.
Product entitlement information.

This information is used to operate and support your purchases and account.

5. Digital Products, Downloads, and Entitlements

When you purchase or download software or another digital product, we may maintain information such as:

Product name and product ID.
Software version.
Order number.
Customer account.
Entitlement status.
Download-link creation time.
Download-link expiration time.
Download date and time.
Download attempts.
IP address.
Browser or device information.

Secure download links may expire after a limited period for security reasons. Expiration of a temporary download link does not necessarily mean that your product entitlement has expired.

Where eligible, customers may be able to generate or receive a new secure download link through their account or our support team.

6. Software Updates and Future Releases

For products that include updates or future releases, we may retain information needed to determine eligibility, including:

Original purchase date.
Product purchased.
Order number.
Current entitlement status.
Applicable update or upgrade period.
Eligible software version.
Download history.

Access to future versions depends on the product terms that applied when the product was purchased.

7. Customer Accounts and Profiles

If you create or receive a customer account, we may store:

Name.
Email address.
Phone number.
Billing information.
Account username.
Profile information and preferences.
Purchased products.
Order history.
Invoice history.
Download permissions.
Product entitlement and update eligibility.

Registered users may generally view or update certain personal information from their account. WordPress administrators may also be able to view and edit account information where needed for support or administration.

Some account identifiers, such as a WordPress username, may not be directly changeable through the standard account interface.

You are responsible for keeping your account credentials secure.

8. Payment Information

Payments may be processed through third-party payment providers or through a manual payment-verification process.

Depending on the payment method, information shared with or received from a payment provider may include:

Customer name.
Billing information.
Purchase amount.
Order number.
Payment method.
Payment status.
Transaction reference.
Information required to process, confirm, refund, or support the payment.

The payment provider shown during checkout may process information under its own privacy policy and terms.

We generally do not store:

Full card numbers.
CVV numbers.
UPI PINs.
Online-banking passwords.

These sensitive credentials should only be entered directly into the relevant payment provider’s secure interface.

9. Manual Payment Proofs

If you use a manual payment method, we may ask you to provide information such as:

Payment screenshot.
UTR number.
Transaction reference.
Payment date or time.
Other information reasonably required to verify the payment.

Payment proofs may be retained for verification, fraud prevention, dispute handling, accounting, and support purposes where reasonably necessary.

Please avoid including unrelated sensitive information in an uploaded payment screenshot. Do not send us passwords, UPI PINs, CVV numbers, or full payment-card credentials.

10. GST and Invoice Information

For taxation, accounting, and invoicing purposes, we may collect and retain:

Customer name.
Company name.
Billing address.
State and place of supply.
GSTIN.
Product name.
SKU.
HSN or SAC information, where applicable.
Taxable value.
CGST, SGST, or IGST.
Invoice number and invoice date.
Order number.
Payment method or reference.

Invoice and accounting information may be retained for the period required by applicable tax, accounting, regulatory, and legal requirements.

11. Cookies and Sessions

Our websites use cookies and similar technologies to provide essential website and ecommerce functionality.

WordPress and WooCommerce may use cookies to:

Keep you signed in.
Remember your shopping cart.
Maintain checkout sessions.
Remember account and display preferences.
Determine whether your browser accepts cookies.
Protect secure customer sessions.
Support digital-download authorization.
Help prevent fraud and abuse.
Maintain website functionality.

If you visit a WordPress login page, WordPress may set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close the browser.

When you sign in, WordPress may set login and screen-preference cookies. Under standard WordPress behavior, login cookies generally last for about two days, screen-option cookies may last for about one year, and selecting Remember Me may keep the login active for about two weeks. Logging out removes the login cookies.

If commenting is enabled and you choose to save your name, email address, or website in comment cookies, those convenience cookies may remain for about one year.

If a user with publishing access edits or publishes content, WordPress may set a cookie containing the relevant post ID. This cookie does not contain personal data and normally expires after about one day.

Disabling essential cookies may prevent some account, cart, checkout, login, or download features from working correctly.

12. Comments, Reviews, and Gravatar

If comments or product reviews are enabled and you choose to submit one, we may collect:

Information entered in the comment or review form.
Rating or review content.
Account information associated with the submission.
IP address.
Browser user-agent information.

This information may be used for moderation, spam detection, security, and publication of the comment or review.

Where WordPress or the site uses the Gravatar service, an anonymized string created from your email address may be sent to Gravatar to determine whether you use that service. Gravatar is operated by Automattic and its privacy practices are described at:

https://automattic.com/privacy/

After a comment is approved, a profile image associated with Gravatar may be publicly visible alongside the comment.

Reviews or comments you submit may be publicly visible where the feature is enabled.

13. Media and File Uploads

If a feature allows you to upload an image or file that may become publicly accessible, avoid uploading images containing embedded location information such as EXIF GPS data.

Visitors may be able to download publicly available images and extract embedded location data.

Support attachments and manual payment proofs are handled separately from normal public media and are intended for operational use rather than public publication.

14. Support Requests and Attachments

When you contact support, we may collect:

Your name and contact information.
Order number.
Product information.
Support request content.
Replies and conversation history.
Screenshots, files, logs, or attachments you choose to provide.
Technical information needed to investigate the issue.

Support records may be retained where reasonably necessary to resolve issues, maintain service history, prevent abuse, and protect our legal or operational interests.

Please avoid sending passwords, UPI PINs, CVV numbers, or other credentials through support.

15. Product Demos and Embedded Content

Some Shrimo pages may display externally hosted product demos, videos, images, documents, payment widgets, or other content inside an embedded frame or similar technology.

Embedded content may behave as though you visited the external provider directly.

When external content loads, that provider may receive or collect:

IP address.
Browser and device information.
Cookies or session information set by that provider.
Information about your interaction with the embedded content.
Other data described in the provider’s own privacy policy.

An external provider may also use third-party tracking or monitor your interaction with embedded content, including where you have an account with that provider and are signed in to it.

Shrimo does not control the privacy practices of an external service merely because it is displayed inside a Shrimo page.

16. Email Communications

We may use your registered or billing email address to send transactional messages relating to:

Order confirmation.
Payment confirmation or verification.
Account creation.
Password reset.
Invoices.
Secure download links.
Download-link resends.
Product access.
Eligible software updates.
Refund information.
Order-status changes.
Support requests and replies.

Transactional messages are part of providing the products and services you request.

Marketing messages, where used, will be handled separately in accordance with applicable requirements and your communication preferences.

17. Password Reset Requests

If you request a password reset, WordPress or related security systems may process your IP address and other technical information as part of the password-reset process.

Your IP address may also be included in password-reset communications or security logs where WordPress or the applicable system uses it for that purpose.

18. Who on Our Team May Access Information

Authorized members of our team may access customer information where reasonably necessary to operate and support the service.

This may include administrators and authorized store managers.

They may have access to information such as:

Products purchased.
Order dates and order status.
Customer name and contact details.
Billing and shipping information, where applicable.
Payment status and payment-proof information.
Invoice information.
Download permissions.
Refund information.
Support history.

Access is intended to be limited to persons who require the information for legitimate business purposes such as fulfilling orders, processing refunds, verifying payments, and providing support.

19. Who We May Share Information With

We may share limited information with third parties that help us operate our services or meet our obligations.

These may include:

Payment processors.
Website hosting providers.
Email-delivery providers.
Cloud or infrastructure providers.
Security services.
Backup providers.
Anti-spam services.
Accounting professionals.
Tax professionals.
Customer-support service providers.
Analytics providers, where enabled.
Providers of embedded demos or other external content.
Government, regulatory, judicial, or law-enforcement authorities where disclosure is legally required.

We do not sell customer personal information.

Where a third party independently processes personal information, its own privacy policy may also apply.

20. Analytics

We do not assume that a particular third-party analytics service is active unless one is configured on the website.

If analytics is enabled, the service may collect information such as page visits, device or browser information, approximate location, referral information, and interaction data.

Where required, we will provide appropriate notice, consent controls, or additional information about the analytics provider and its privacy practices.

Hosting and security providers may also collect limited technical or aggregate usage information for operational and security purposes.

21. How Long We Retain Information

We retain information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, tax, security, support, and regulatory requirements.

For example:

Customer account information may be retained while the account remains active or while product entitlements need to be maintained.
Order and payment information may be retained for accounting, tax, support, fraud-prevention, and legal purposes.
Invoice information may be retained where required by applicable law.
Download and entitlement records may be retained for product access, support, fraud prevention, and ownership verification.
Manual payment proofs may be retained while required for verification, disputes, accounting, security, or legal purposes.
Support records may be retained for service history, security, dispute handling, and operational purposes.
Security logs may be retained for a reasonable security period.
Comments and their metadata may be retained indefinitely while the comments remain published or where needed for moderation and follow-up recognition.
Reviews may remain stored while they remain published.

22. Your Rights and Requests

Depending on applicable law, you may be able to request:

Access to personal information we hold about you.
Correction of inaccurate personal information.
Updating of incomplete information.
Export of certain personal information.
Deletion of certain personal information.
Withdrawal of consent where processing relies on consent.
Information about how your personal information is being used.

If you have a WordPress account or have left comments, WordPress provides tools that may assist us with exporting or erasing personal data associated with you.

We may need to verify your identity before processing a privacy request.

We may also need to retain certain information where reasonably necessary for tax records, accounting records, fraud prevention, legal claims, regulatory requirements, security, or other lawful purposes.

23. Account Deletion

You may contact us to request deletion of your customer account.

Deleting an account may affect your ability to:

Access purchased digital products.
View previous orders.
Download invoices.
Receive eligible software updates.
Generate new download links.
Access product entitlements associated with that account.

Certain transaction, invoice, tax, accounting, security, or legal records may still need to be retained after an account is deleted.

24. Where Information May Be Sent or Processed

Information may be sent to or processed by service providers involved in:

Website hosting.
Cloud infrastructure.
Payment processing.
Email delivery.
Security.
Backups.
Anti-spam checking.
Analytics, where enabled.
Support or operational services.
Embedded third-party content.

Visitor comments may be checked through an automated spam-detection service where such a service is enabled.

Some providers may operate infrastructure in different states or countries.

Where applicable law requires additional safeguards for international transfers, we will rely on appropriate contractual, technical, organizational, or legal measures.

25. How We Protect Information

We use reasonable technical and organizational measures designed to protect customer information.

These measures may include:

HTTPS encryption.
Secure account authentication.
Access controls.
Restricted administrative permissions.
Secure password storage.
Protected digital-product files.
Expiring download links.
Server-side authorization checks.
Security monitoring.
Download and activity logs.
Software updates.
Website backups.
Protected storage for sensitive operational files where supported by our infrastructure.

No website, server, or internet-based system can guarantee absolute security.

26. Data Breach and Security Incidents

If we become aware of a security incident involving personal information, we may:

Investigate the incident.
Restrict unauthorized access.
Secure affected systems.
Review relevant security logs.
Take corrective action.
Notify affected users where appropriate.
Notify relevant authorities where legally required.

27. Automated Systems and Profiling

We do not currently intend to use customer information for automated credit decisions or similar automated decisions that produce significant legal effects.

Automated systems may assist with operational functions such as:

Fraud detection.
Spam detection.
Payment-risk checks.
Security monitoring.
Download-abuse detection.

If we introduce significant automated decision-making or profiling in the future, this Privacy Policy may be updated.

28. Children’s Privacy

Our products and services are not specifically directed toward children.

If you believe a child has submitted personal information without appropriate authorization, please contact us so that we can review the matter and take appropriate action.

29. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

Our products or services.
Website or ecommerce functionality.
Payment methods.
Support or download systems.
Service providers.
Security practices.
Legal or regulatory requirements.

The latest version will be published on this page with an updated Last Updated date.

30. Contact Us

For privacy-related requests, questions, corrections, or complaints, contact:

Shrimo Innovations Private Limited