Privacy Policy

This Privacy Policy is prepared under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, and the Information Technology Act, 2000 and the rules made under it.

1. Who we are

Hire N Ride (see "Contracting entity" in the Terms of Use, Section 1) is the Data Fiduciary for the personal data processed through the Hire N Ride website and app (the "Platform"). This notice explains, in plain language, what we collect, why we collect it, and your rights.

Contact for privacy questions: use the grievance contact published at https://www.hirenride.com/legal.

2. What we collect and why

Data	Purpose	Legal basis
Name, phone, email, date of birth	Account, communication, age check	Consent; performing your booking
Driving licence (number, class, validity, image)	Checking you can lawfully drive the vehicle class; verification against Parivahan/Sarathi	Consent; legal compliance
ID document: masked or offline-verified Aadhaar (we never store the full Aadhaar number), passport, visa/IDP for international users	Identity check, fraud prevention	Consent
Selfie / liveness check	Matching you to your ID	Consent
Host data: PAN, GSTIN, bank account, RC, insurance, PUC, permit	Payouts, tax (TCS/TDS), vehicle verification on VAHAN	Consent; legal obligation
Location / GPS	Pickup and return; trip safety; recovery of an unreturned or stolen vehicle; fines	Consent; legitimate uses under the DPDP Act, s.7
Trip records: checklist photos/videos, odometer, fuel, timestamps	Damage and fines disputes	Performing the booking
Payment data (handled by an RBI-authorised payment aggregator; we do not store full card details)	Payments, refunds, deposits	Performing the booking
Device data, logs, cookies	Security, fraud prevention, analytics (only with your consent for non-essential cookies)	Consent / legitimate use
Complaints and messages	Grievance handling, support	Legal obligation
Consent and acceptance records (document versions you accepted, with time, IP and device)	Proof of agreement	Legal obligation

GPS tracking: vehicles may have GPS trackers fitted by the Host or by us. Location is used during trips and for recovering the vehicle. It is not sold, and it is not used for advertising.

3. Who we share data with

• The Host or Rider on your booking: only what is needed (name, photo, verified-licence status, phone masked where possible, and the trip details).
• Service providers acting on our instructions: KYC/verification providers, payment aggregators, cloud hosting, SMS/email, and GPS providers. They work under contracts that restrict their use of the data.
• Insurers and surveyors for accident or theft claims.
• Government, police, courts, and transport and tax authorities where the law requires it, including challan resolution.
• A successor entity (for example, Hire N Ride Private Limited) if the business is transferred. We will tell you before this happens.

We do not sell your personal data.

4. Hosts' use of Rider data

Hosts must use Rider data only for the booking, must not copy or keep ID images, and must delete Rider data after the trip unless the law requires them to keep it.

5. How long we keep data

Data	Retention
Account data	While your account is active. Deleted within a week of a deletion request
KYC images	Until verification is complete plus [180 days], or as required by law; then deleted, with only the verification result kept
Trip, payment and tax records	[8] years (accounting and tax laws)
Acceptance/consent logs and accepted Booking Agreement PDF snapshots	[8] years, or the limitation period plus one year, whichever is longer
GPS trip data	[180] days after the trip, unless needed for a dispute
Marketing preferences	Until you withdraw consent

After the retention period ends, data is deleted or anonymised.

6. Your rights

Under the DPDP Act you can:

• access a summary of your data and how it is processed;
• correct, complete or update it;
• erase it, where we no longer need to keep it by law;
• withdraw consent as easily as you gave it, from Settings → Privacy. Withdrawing consent does not affect processing already done, and it may mean we cannot provide some services;
• nominate a person to exercise your rights if you die or become incapacitated; and
• raise a grievance with us. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

To exercise these rights, use Settings → Privacy → My data (see also our User Data Deletion page at https://www.hirenride.com/legal/user-data-deletion), or the grievance contact at https://www.hirenride.com/legal. We will respond within 15 days.

7. Children

The Platform is not meant for people under 18. We do not knowingly collect data about children.

8. Security

Data is encrypted in transit and at rest; access is role-based and logged; KYC images are kept in restricted storage. If a personal data breach happens, we will inform affected users and the Data Protection Board as the DPDP Act and Rules require.

9. Where data is stored

Data is stored on servers in [India / region]. Any transfer outside India will follow the DPDP Act and any restrictions imposed by the Government.

10. Cookies

We use essential cookies to run the Platform. We use analytics and marketing cookies only with your consent, which you can change at any time using the cookie banner or in Settings.

11. Grievance Officer

For complaints, use the grievance contact published at https://www.hirenride.com/legal. We acknowledge complaints within 24 hours and resolve them within 15 days (IT Rules 2021) or one month (E-Commerce Rules 2020).

12. Changes

If we make material changes, we will notify you by email and in-app at least 30 days before they take effect. Earlier versions are kept at https://www.hirenride.com/legal/archive.