OneWayTaxi.ai ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use our website and taxi booking services, how we use it, who we share it with, and the rights you have under Indian law including the Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. Information We Collect
We collect the following categories of information:
- Booking details: name, mobile number, email, pickup and drop addresses, travel date and time, vehicle preference, traveller details (if booking on behalf of someone else).
- Payment data: last four digits of cards, UPI handle (transaction reference only), invoice address, GSTIN for corporate billing. We do not store full card numbers, CVV, or banking credentials — these are handled directly by our PCI-compliant payment gateways.
- Trip data: route, distance, duration, fare, driver and vehicle assigned, GPS-derived location during the active trip.
- Communication records: WhatsApp messages, call logs, and emails exchanged for booking, support, or feedback purposes.
- Website analytics: IP address, browser type, device type, referrer URL, pages viewed, session duration, and approximate geographic location (city level). Collected via cookies and analytics tools.
2. How We Use Your Information
- To confirm bookings, dispatch drivers, and complete trips.
- To send transactional updates via SMS, email, and WhatsApp (driver assignment, ETA, fare reconciliation, invoices).
- To process payments, refunds, and GST invoicing.
- To provide 24/7 customer support, resolve grievances, and handle disputes.
- To improve our service quality through aggregated analysis of trip patterns, route demand, and driver performance.
- To send promotional communications, only if you have opted in. You can opt out at any time.
- To comply with legal obligations such as tax filings, regulatory reporting, and lawful requests from authorities.
3. Legal Basis for Processing
Under the DPDP Act, we process your personal data primarily on the basis of (a) consent you provide at booking, (b) the legitimate uses permitted by the Act for performing the contract you entered into, and (c) legal compliance requirements such as tax and motor vehicle regulations.
4. Sharing Your Information
We share personal data only as necessary to deliver the Services:
- Driver-partners: name, contact number, pickup/drop addresses (only the driver assigned to your trip).
- Payment gateways: billing details required to process the transaction.
- Communication providers: SMS, email, and WhatsApp Business API providers to deliver booking updates.
- Cloud hosting and analytics: trusted vendors who process data on our behalf under data-processing agreements.
- Government / regulatory authorities: when compelled by law, court order, or to protect against fraud and safety threats.
We do not sell your personal data to third parties for advertising or any other purpose.
5. Cookies & Tracking
Our Website uses cookies for: (a) essential site functioning (session, security), (b) analytics (anonymised page-level traffic), and (c) optional remarketing if you have consented. You can disable cookies through your browser; however, some features such as fare calculator memory may not work as expected.
6. Data Retention
- Booking and trip records: retained for 7 years in compliance with tax and motor vehicle regulations.
- Marketing preferences and consent records: retained until you withdraw consent.
- Analytics data: retained in aggregated, anonymised form for up to 26 months.
7. Your Rights Under the DPDP Act
As a Data Principal, you have the right to:
- Access a summary of personal data we hold about you and how we use it.
- Correction of inaccurate or outdated personal data.
- Erasure of personal data when no longer needed for the purpose collected, subject to legal retention.
- Withdrawal of consent for processing where consent is the legal basis. Withdrawal does not affect prior lawful processing.
- Grievance redressal through our designated officer below.
- Nomination of another person to exercise these rights in case of incapacity or death.
To exercise any right, email bharatonewaytaxi@gmail.com with the subject "Privacy Request". We will respond within 30 days as required by the Act.
8. Security Safeguards
We implement industry-standard safeguards including TLS encryption for data in transit, encrypted storage at rest, access controls, audit logs, and regular security reviews. Despite these measures, no system is completely immune to risk; please use a strong password and protect your devices.
9. Children's Data
Our Services are not directed at children under 18. We do not knowingly collect personal data from children except as part of a parent or guardian's booking on their behalf. If you believe we have collected such data inadvertently, please contact us for prompt deletion.
10. Cross-Border Transfers
Personal data is primarily stored in data centres located in India. If we transfer data outside India for hosting or processing, we will ensure such transfers are made only to jurisdictions notified as permissible by the Government of India under the DPDP Act.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Website with an updated effective date. We encourage you to review the Policy periodically.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer can be reached at:
- Email: bharatonewaytaxi@gmail.com
- Phone: +91 81244 76010
- Address: Chennai, Tamil Nadu, India
TODO: Once the registered legal entity name is finalised, replace "OneWayTaxi.ai" references and the registered address placeholder above.