and runs during HTML parse, but hubspotutk is set by js.hs-analytics.net, measured loading at ~834ms. On a first visit the cookie does not exist yet, so a single read returns nothing and the visitor gets no external ID at all — and a first visit is exactly what an ad click is. So poll briefly until HubSpot sets it. The SDK loads lazily (~4.5s) and replays a queue, so an init queued a second or two in still lands before any events are transmitted. */ (function attachExternalId() { var attempts = 0; var MAX_ATTEMPTS = 40; /* 40 x 200ms = 8s, then give up quietly */ var timer = null; function tryAttach() { var raw = getExternalId(); if (!raw) { if (++attempts >= MAX_ATTEMPTS && timer) clearInterval(timer); return; } if (timer) clearInterval(timer); sha256Hex(raw).then(function (hash) { oaiq("init", { user: { external_id_sha256: hash } }); }).catch(function () {}); } tryAttach(); /* returning visitor: immediate */ if (!getExternalId()) timer = setInterval(tryAttach, 200); })(); /* --------------------------------------------------------------------------- 2. Load the SDK off the critical path Whichever comes first: the main thread going idle after load, or the first sign of real user intent. No preconnect on purpose — a TLS handshake during LCP for a script we deliberately deferred is a net loss. Measured on clickpost.ai: load event 3614ms, SDK fetched 4508ms. ------------------------------------------------------------------------ */ var loaded = false; var INTENT = ["pointerdown", "keydown", "scroll"]; function loadSdk() { if (loaded) return; loaded = true; INTENT.forEach(function (t) { removeEventListener(t, loadSdk, { passive: true }); }); var s = document.createElement("script"); s.src = SDK; s.async = true; s.fetchPriority = "low"; document.head.appendChild(s); } INTENT.forEach(function (t) { addEventListener(t, loadSdk, { passive: true, once: true }); }); addEventListener("load", function () { window.requestIdleCallback ? requestIdleCallback(loadSdk, { timeout: 2500 }) : setTimeout(loadSdk, 1500); }, { once: true }); /* --------------------------------------------------------------------------- 3. Conversion id sha256(lowercase(email) + "|" + formId + "|" + ISO-hour), first 20 hex, "lead_" prefix. - email lowercased/trimmed so casing does not fork the id - formId keeps two different forms in the same hour from colliding - the hour bucket is only the server's fallback; the id computed here is sent to the relay verbatim, so the two paths cannot disagree even when a submit straddles an hour boundary Ads Manager's own sample omits event_id. We send it so the pixel event and the relay event collapse into one conversion instead of counting twice. ------------------------------------------------------------------------ */ function buildEventId(email, formId) { var seed = [ String(email || "").trim().toLowerCase(), String(formId || ""), new Date().toISOString().slice(0, 13) ].join("|"); return crypto.subtle.digest("SHA-256", new TextEncoder().encode(seed)).then(function (buf) { var hex = Array.prototype.map.call(new Uint8Array(buf), function (b) { return b.toString(16).padStart(2, "0"); }).join(""); return "lead_" + hex.slice(0, 20); }); } /* Guards a re-fire from the history.pushState that book-a-demo-core.js runs after submit, and from back-navigation onto the same state. */ function firedOnce(id) { try { if (sessionStorage.getItem("oaiq_" + id)) return true; sessionStorage.setItem("oaiq_" + id, "1"); return false; } catch (e) { return false; /* private mode / blocked storage: fire rather than lose it */ } } /* Path 2. keepalive lets the request finish even if the page navigates away. Failures are swallowed deliberately: a reporting call must never surface an error to someone who just submitted a form. The relay hashes the email server-side into user.emails_sha256 and adds the caller's IP and user agent, so this event carries the same match signals the pixel gets for free. */ function sendToRelay(email, formId, eventType, eventId) { try { var payload = { token: RELAY_TOKEN, email: email, form_id: formId || "", event_type: eventType, event_id: eventId, /* verbatim, so both paths always match */ source_url: location.href }; var oppref = getOppref(); if (oppref) payload.oppref = oppref; var externalId = getExternalId(); if (externalId) payload.external_id = externalId; fetch(RELAY_URL, { method: "POST", keepalive: true, headers: { "Content-Type": "application/json" }, body: JSON.stringify(payload) }).catch(function () {}); } catch (e) {} } /* Capture the email while the form is still on the page. onFormSubmitted does not reliably carry submissionValues, and by then the form may be removed. */ var lastEmail = ""; document.addEventListener("submit", function (e) { var f = e.target; if (!f || !f.querySelector) return; var i = f.querySelector('input[name="email"], input[type="email"]'); if (i && i.value) lastEmail = i.value; }, true); /* Every HubSpot form on the site reports through this one message event, so no module or theme JS needs editing to add coverage. */ window.addEventListener("message", function (e) { var d = e.data; if (!d || d.type !== "hsFormCallback" || d.eventName !== "onFormSubmitted") return; var email = (d.data && d.data.submissionValues && d.data.submissionValues.email) || lastEmail; if (!email) return; /* without an email there is no stable id to dedupe on */ var eventType = EVENT_BY_FORM[d.id] || EVENT_DEFAULT; buildEventId(email, d.id).then(function (id) { if (firedOnce(id)) return; oaiq("measure", eventType, { type: DATA_TYPE }, { event_id: id }); /* path 1 */ sendToRelay(email, d.id, eventType, id); /* path 2 */ }); }); })();

91Ƶ

See where your logistics stands on automation Start assessment

Book a demo
Intelligence
Parth - AI Voice Agents COD order confirmations, NDR recovery AI Carrier Allocation 200B+ data points evaluate the best carrier per order. Apex Identifies and acts on exceptions Ally Agentic support for all channels
D2C Shipping
Multi-Carrier Integrations Branded Tracking Returns & Exchanges Failed Delivery Management Delivery Date Estimates Order Editing Notifications
Specialised Shipping
ClickPost Darwin B2B and bulk shipping Hyperlocal deliveries D2C quick commerce Cross Border Ship eCommerce orders worldwide
Featured
Header Feature Festive Readiness Hub Everything you need to hold delivery promises through peak season. Get ready
Use cases by category
Fashion and lifestyle Beauty and cosmetics Home decor and furniture Health and Wellness Consumer Electronics
Integrations
Carriers 600+ carriers across 30+ countries Storefronts Shopify, Magento, WooCommerce and more WMS/OMS Sync orders and inventory both ways Communication gateways WhatsApp, SMS, email and voice
Tool
ROI Calculator (1) NDR ROI Calculator See what a 40% RTO cut is worth on your monthly volume. Run the numbers
Resources
Blog Deep dives & guides Ebooks & reports Research & benchmarks Assessments Tools to assess your D2C operations
New report
RTO Playbook (1) 90-Day RTO Reduction Playbook Go from diagnosis to a 25% cut in RTO in 90 days. Get the playbook
India US
Customers 91Ƶ
Book a demo

ClickPost Compliance

On 25th May 2018, the European Union ( referred to as “EU”) ratified the General Data Protection Regulation to protect personal data against unlawful activity and online information usage. Following Brexit, the United Kingdom (the “UK”), created a security law known as the UK General Data Protection Regulation. 

Both EU and UK regulations together shall be collectively referred to as the “GDPR” for the purpose of the document. This regulation safeguards data by conforming with specific policies while collecting, sharing, and processing your information within the EU and the UK. The GDPR strongly underlines the importance of consistent rights and control over consumer information.

At Felurian Technology Private Limited (“we”, “us”, “our”, “Felurian”), we take responsibility for safeguarding your data privacy with strict security regulations. We adhere to the EU and UK laws to respect your privacy and practice complete data confidentiality. In the following sections, we have outlined our approach to complying with the GDPR.

 

GDPR Compliance 

Felurian Technology Private Ltd. owns the website www.clickpost.ai, the web-based application named Clickpost and ClickPost Returns Plus alongside all its operations. 

The website and mobile application (hereinafter jointly addressed as the "Platform") provide operational assistance to Felurian Tech Pvt. Ltd. clients. 

The Platform acts as a system that facilitates numerous logistics functions, including but not limited to tracking orders, sending customer notifications, automating order fulfillment, and returns & exchange management.

Through the Platform, Felurian Tech Pvt. Ltd. acts in the capacity of both Data Controller and Data Processor. This means we respectively process consumer information collected from users submitted on the website and information provided by customers for our services.

 

Risk Assessment

Felurian performs systemic risk evaluation by mapping, identifying, and assessing personal information it holds, various sources the information comes from, how and why it is processed, and whom it addresses. In addition, it encompasses compliance monitoring by reviewing various findings from the assessment process for stringent analysis.

 

Consent and Rights

As a Data Controller, Felurian Technology Private Ltd. has updated its Privacy and Cookie Policies alongside its Disclaimer for the usage of Cookies and any internal data as per the requirements of GDPR on its website www.clickpost.ai. 

We pursue the protocols only with the consent of all visitors and website users for the use of personal information under all circumstances. The Platform also allows users to exercise their rights concerning their personal information. They are permitted to modify, rectify, and delete personal information, under rightful obligations and GDPR rules. 

These rights apply to cookies and/or similar in-house and third-party tracking tools to track user traffic patterns. Tracking tools are used as beacons, tags, and scripts to collect and track information to improve and analyze our ‘Website’ and ‘Services’. It is at your discretion to disable cookies through your browser settings. For more information, please refer to our cookie policy /cookie-policy

 

Data Processing Agreements and Transfer of Data outside the EU And UK

A Data Processing Agreement (referred to as “DPA”) is a formal understanding between two parties (a controller and a processor), outlining the legalities and liabilities involved in the processing of personal data. As a sensitive GDPR procedure, it requires validation from controllers and processors. Thereafter, they review contracts such as statements and notices belonging to GDPR and verify accurate data relating to personal information as per the regulation. 

The Platform also mandates all technical and organizational security measures to ensure compliance. It safeguards the transfer of personal data and information received from our clients outside the EU and the UK.

At Felurian, we have in place a GDPR-compliant data processing addendum (as per Article 28 of the GDPR) including the EU Standard Contractual Clauses (“SCCs”) and the UK International Data Transfer Addendum (“ITDA”) to ascertain an appropriate legal basis for data transfers outside the EU and UK respectively. 

 

Data Retention and Erasure

We have formulated an organizational data protection compliance policy. It includes a data retention schedule that is compliant with GDPR policies. The schedule comprises ‘data minimization’ and ‘storage limitation’ and information on how personal information is stored, archived, and destroyed under the GDPR laws.

 

Record Keeping as per GDPR

The maintenance of records related to the processing of personal data should be maintained within the organization by representatives of every controller and processor according to the undertaking of Article 30 of the GDPR. We maintain such records as indicated under Article 30(1) and Article 30(2) of the GDPR.

 

Data Breach and Mitigation

According to GDPR regulations, the Platform concurs to taking action after the data breach by sending notifications. We have established collective internal measures to counter damage, data loss and fraud. We take full responsibility by agreeing to GDPR laws in the unlikely event of any such breach or unfortunate event. Felurian will inform or notify the concerned party (or parties) and report supervisory activities in such scenarios.

 

Our GDPR assurance

At Felurian Technology Pvt. Ltd., we strictly maintain the security, integrity, safety, and confidentiality of the consumer data that we receive. We prioritize this task with utter transparency as responsible representatives. Felurian's adequate measures indicate the purpose of uncompromising compliance with the GDPR and careful data handling. For any queries, please feel free to reach us at security@clickpost.in.

. window.disableHubSpotCookieBanner = true; function killNative() { var n = document.getElementById("hs-eu-cookie-confirmation"); if (n && n.parentNode) { n.parentNode.removeChild(n); return true; } return false; } killNative(); if (window.MutationObserver) { var mo = new MutationObserver(function () { killNative(); }); mo.observe(document.documentElement, { childList: true, subtree: true }); setTimeout(function () { mo.disconnect(); }, 15000); } var COOKIE = "cp_cookie_consent"; var EU = ["at","be","bg","hr","cy","cz","dk","ee","fi","fr","de","gr","hu","ie","it","lv","lt","lu","mt","nl","pl","pt","ro","sk","si","es","se","gb","uk","is","li","no","ch"]; function readCookie(nm) { var m = document.cookie.match(new RegExp("(?:^|; )" + nm + "=([^;]*)")); return m ? decodeURIComponent(m[1]) : null; } function writeCookie(nm, val, days) { var d = new Date(); d.setTime(d.getTime() + (days * 864e5)); document.cookie = nm + "=" + encodeURIComponent(val) + ";expires=" + d.toUTCString() + ";path=/;SameSite=Lax" + (location.protocol === "https:" ? ";Secure" : ""); } function stored() { var raw = readCookie(COOKIE); if (!raw) return null; try { var o = JSON.parse(raw); if (typeof o.analytics === "boolean") return o; } catch (e) {} return null; } function apply(state, revoke) { window._hsp = window._hsp || []; window._hsp.push(["setHubSpotConsent", { analytics: !!state.analytics, advertisement: !!state.advertisement, functionality: !!state.functionality }]); if (revoke && !state.analytics && !state.advertisement && !state.functionality) { window._hsp.push(["revokeCookieConsent"]); } window.dataLayer = window.dataLayer || []; window.dataLayer.push({ event: "cp_cookie_consent", cp_consent_analytics: !!state.analytics, cp_consent_advertisement: !!state.advertisement, cp_consent_functionality: !!state.functionality }); document.documentElement.setAttribute("data-cp-consent", "set"); } function inScope(banner) { if (banner.getAttribute("data-scope") !== "eu_only") return true; var geo = (document.body.getAttribute("data-geo_location") || "").toLowerCase(); if (!geo) return true; return EU.indexOf(geo) !== -1; } function init(banner) { var days = parseInt(banner.getAttribute("data-days"), 10) || 180; var prefs = banner.querySelector("[data-cpcb-prefs]"); var compact = banner.querySelector('[data-cpcb-actions="compact"]'); var expanded = banner.querySelector('[data-cpcb-actions="expanded"]'); var toggles = banner.querySelectorAll("[data-cpcb-toggle]"); function show() { banner.hidden = false; requestAnimationFrame(function () { banner.classList.add("is-visible"); }); } function hide() { banner.classList.remove("is-visible"); setTimeout(function () { banner.hidden = true; }, 300); } function collapse() { if (!prefs) return; prefs.hidden = true; if (expanded) expanded.hidden = true; if (compact) compact.hidden = false; } function expand() { if (!prefs) return; prefs.hidden = false; if (compact) compact.hidden = true; if (expanded) expanded.hidden = false; } function paint(state) { Array.prototype.forEach.call(toggles, function (t) { var key = t.getAttribute("data-cpcb-toggle"); if (key === "necessary") { t.setAttribute("aria-checked", "true"); return; } t.setAttribute("aria-checked", state[key] ? "true" : "false"); }); } function fromToggles() { var state = { analytics: false, advertisement: false, functionality: false }; Array.prototype.forEach.call(toggles, function (t) { var key = t.getAttribute("data-cpcb-toggle"); if (key in state) state[key] = t.getAttribute("aria-checked") === "true"; }); return state; } function commit(state, revoke) { writeCookie(COOKIE, JSON.stringify({ analytics: !!state.analytics, advertisement: !!state.advertisement, functionality: !!state.functionality, v: 1, ts: Date.now() }), days); apply(state, revoke); hide(); } Array.prototype.forEach.call(toggles, function (t) { if (t.disabled) return; t.addEventListener("click", function () { t.setAttribute("aria-checked", t.getAttribute("aria-checked") === "true" ? "false" : "true"); }); }); banner.addEventListener("click", function (e) { if (!e.target || !e.target.closest) return; var btn = e.target.closest("[data-cpcb-action]"); if (!btn) return; var action = btn.getAttribute("data-cpcb-action"); if (action === "customise") { expand(); return; } if (action === "accept") { commit({ analytics: true, advertisement: true, functionality: true }, false); return; } if (action === "reject") { commit({ analytics: false, advertisement: false, functionality: false }, true); return; } if (action === "save") { commit(fromToggles(), true); return; } }); var existing = stored(); if (existing) { apply(existing, false); paint(existing); collapse(); } else if (!inScope(banner)) { // Out of the consent-required region: implied consent, banner never shown. commitSilently(); } else { collapse(); show(); } function commitSilently() { var all = { analytics: true, advertisement: true, functionality: true }; writeCookie(COOKIE, JSON.stringify({ analytics: true, advertisement: true, functionality: true, v: 1, ts: Date.now(), implied: true }), days); apply(all, false); } // Public re-open hook for a footer "Cookie settings" link. window.cpCookieBanner = window.cpCookieBanner || {}; window.cpCookieBanner.open = function () { var s = stored() || { analytics: false, advertisement: false, functionality: false }; paint(s); expand(); show(); }; } function boot() { var banners = document.querySelectorAll("[data-cpcb]"); if (!banners.length) return; init(banners[0]); document.addEventListener("click", function (e) { if (!e.target || !e.target.closest) return; var trigger = e.target.closest("[data-cp-cookie-settings]"); if (!trigger) return; e.preventDefault(); if (window.cpCookieBanner && window.cpCookieBanner.open) window.cpCookieBanner.open(); }); } if (document.readyState === "loading") { document.addEventListener("DOMContentLoaded", boot); } else { boot(); } })();