Privacy policy

1. What we collect

• Mobile number: to sign you in with a one-time code and to identify your account.
• Name: so your driver or rider knows who to look for.
• Trip details: pickup and drop addresses and map points, the route distance and time, vehicle type, fare, status changes, cancellations and receipts.
• Driver location: only while a driver is online or on a trip, so we can offer nearby requests and show progress. We don't track drivers when they're offline.
• Your location (riders): only if you tap “Use my current location”, and only to fill in the pickup point.
• Driver documents: driving licence, vehicle registration, insurance, permit and police verification, for checking that drivers are allowed to drive.
• Reports you send us: the text of any complaint or problem report.
• Device and log data: IP address, browser type, and server logs of requests and errors, kept for security and fixing problems.

We don't collect card or bank details. You pay drivers directly by cash or UPI.

2. Why we use it

• To create your account and sign you in.
• To quote fares, match bookings with drivers and run the trip.
• To verify drivers and keep riders and drivers safe.
• To handle cancellations, disputes, complaints and support requests.
• To prevent fraud and abuse, and to keep accounting and legal records.
• To fix problems and improve the service.

3. Consent and legal basis

We process your data with your consent, which you give when you create an account and agree to this policy, and for uses the law allows without consent, such as complying with legal obligations or responding to a medical emergency. You can withdraw consent at any time by deleting your account (see section 8). This doesn't affect anything we did before you withdrew it, and we may still need to keep some records (section 4).

4. How long we keep it

• Login codes: records of OTP requests are kept for 30 days, then deleted. We never store the code itself.
• Trip records and receipts: kept for as long as accounting, tax and other legal requirements need, and for handling disputes.
• Driver documents: kept while the driver is active with us and for as long as the law needs afterwards.
• Logs: kept for a short period for security, then deleted.
• Your account: until you delete it. See section 8.

5. Who we share it with

We share only what each person needs for the trip:

• Your driver sees your first name and the pickup and drop points.
• Riders see the driver's first name, vehicle, number plate and a masked phone number.
• Our support team sees what they need to help with a booking or complaint. Phone numbers are masked in admin screens.

We also use service providers who process data for us under contract:

• an SMS provider, to send your one-time login code;
• a maps and geocoding provider, to search addresses and plan routes;
• a hosting and database provider, to run the app and store data;
• a file storage provider, to store driver verification documents privately.

We may disclose data when the law requires it, for example to the police or a court. We don't sell your personal data and don't share it for advertising.

6. Security

Data is sent over HTTPS. Sign-in uses one-time codes and signed session cookies. Access to personal data inside Chandigarh Direct is limited to people who need it, and admin actions are logged. Driver documents are kept in private storage. No system is perfectly secure; if a breach affects you, we'll tell you and the Data Protection Board as the law requires.

7. Where data is stored

Data is stored with our hosting providers, primarily in India. Where a provider processes data outside India, we do so only as Indian law allows.

8. Your rights

• Access: download a copy of your data from the Account page (“Download my data”).
• Correction: change your name on the Account page. For anything else, contact our support team.
• Erasure: delete your account on the Account page. We remove your name and close your account. Trip records we must keep by law stay, linked to a closed account.
• Grievances: if you're unhappy with how we handle your data, contact our support team through the Help page. We'll respond within the time the law requires. If you're not satisfied, you can complain to the Data Protection Board of India.
• Nominate: you can tell us someone who may exercise these rights for you if you die or can't act yourself. Contact our support team.

9. Children

Accounts are for people aged 18 or over. We don't knowingly create accounts for children. An adult may book a ride for a child travelling with them. If you think a child has an account, contact our support team and we'll close it.

10. Changes

We'll update this policy when what we collect or how we use it changes. The date at the top shows the latest version. We'll tell you in the app about significant changes.