Privacy Policy

1. Introduction & scope

This Privacy Policy explains how Svyram (“Svyram”, “we”, “us”) collects, uses, shares, and protects your personal data when you use our mobile applications and websites (the “Platform”). It applies to riders and to driver-partners. We act as the data fiduciary for the personal data we process about you, and we handle it in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. Information we collect

We collect the following categories of information:

• Account & profile — your name, mobile number, email address, and profile photo.
• Ride information — pickup and drop-off locations, route, time, fare, and ride history.
• Location — precise or approximate device location used to match, navigate, and track rides (see Section 6).
• Payment information — for UPI payments, your UPI identifier and payment status. Card or bank details, where used, are handled by our payment partners and are not stored by us.
• Driver verification data — for driver-partners: identity and eligibility documents such as your driving licence, vehicle registration certificate (RC), PAN, a live selfie, and Aadhaar for identity verification (see Section 3).
• Device & usage — device model, operating system, app version, identifiers, and diagnostic and usage logs.
• Communications & support — ratings, feedback, and messages you send us.

3. Aadhaar & identity verification

We do not store your full Aadhaar number. If you onboard as a driver-partner, we ask for your Aadhaar solely to verify your identity. During verification we read the document only to confirm your identity, and we then retain only a masked copy of the document (with the Aadhaar number obscured) and, at most, the last four digits for audit and compliance. The full Aadhaar number and the original unmasked scan are discarded once verification is complete. We never display your full Aadhaar number, and we do not use Aadhaar for any purpose other than identity verification.

Providing Aadhaar for driver onboarding is voluntary but may be necessary to complete verification and drive on the Platform. Riders are not asked for Aadhaar.

4. How we use your information

We use your information to:

• create and manage your account;
• match riders with driver-partners, and enable, route, and complete rides;
• verify driver-partner identity, documents, and eligibility;
• process fares and payments and calculate platform fees;
• provide safety features, support, and dispute resolution, and send service notifications (including ride and verification updates);
• detect, prevent, and investigate fraud, abuse, and violations of our terms;
• maintain, improve, and secure the Platform, and comply with our legal obligations.

5. Our legal basis

We process your personal data on the basis of your consent, which you give when you sign up and use the Platform, and for the legitimate uses permitted under the DPDP Act — such as providing a service you have requested, ensuring safety, preventing fraud, and complying with law. You may withdraw your consent at any time (see Section 11); withdrawing consent needed to provide the service may mean you can no longer use parts of the Platform.

6. Location data

Location is central to a ride-hailing service. For riders, we use your location to set your pickup, find nearby driver-partners, and show your trip. For driver-partners, we collect location while you are online or on a trip so we can offer you nearby ride requests, navigate, and let the rider track the vehicle. You can control location permissions through your device settings; disabling location will limit core features.

7. How we share information

We do not sell your personal data. We share information only as needed to run the service:

• Between rider and driver-partner — limited details needed to complete a ride, such as first name, vehicle details, approximate location, and a masked contact channel.
• Service providers — trusted vendors who process data on our behalf under contract (see Section 8).
• Legal & safety — authorities or third parties where required by law, to enforce our terms, or to protect the rights, safety, and property of users or the public.
• Business transfers — in connection with a merger, acquisition, or reorganisation, subject to this Policy.

8. Service providers

We use a small set of processors to operate the Platform, each bound to protect your data and use it only for the services we request:

• Cloud hosting & database — to store and serve app data securely.
• Identity & document verification — automated optical-character-recognition and face-match services (for example Amazon Web Services Textract and Rekognition) used to read submitted documents and confirm that your selfie matches your licence photo.
• Maps & navigation — mapping providers used for routing and location display.
• Push notifications — messaging services (for example Firebase Cloud Messaging) used to deliver ride and verification updates to your device.
• Payments — UPI and payment interfaces used to process transactions.

9. How long we keep data

We keep personal data only for as long as needed for the purposes described here, or as required to comply with legal, tax, accounting, or safety obligations, after which we delete or anonymise it. As noted above, the full Aadhaar number and original unmasked document are not retained beyond verification.

10. How we protect data

We use reasonable technical and organisational measures to protect your data, including encryption in transit, access controls that restrict sensitive data to authorised systems and personnel, and masking of identity documents. No method of transmission or storage is completely secure, but we work continuously to safeguard your information and will notify you and the authorities of a personal-data breach as required by law.

11. Your rights & choices

Subject to applicable law, you have the right to:

• access a summary of the personal data we hold about you;
• request correction or updating of inaccurate data;
• request erasure of your data where it is no longer required and not subject to a legal retention obligation;
• withdraw consent you have previously given;
• nominate another individual to exercise your rights in the event of death or incapacity;
• make a complaint (see Section 15).

To exercise any of these rights, contact us at privacy@svyram.com. We may need to verify your identity before acting on a request.

12. Children

The Platform is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

13. Cookies & analytics

Our websites may use essential cookies and similar technologies to keep you signed in and to understand, in aggregate, how the site is used. You can control cookies through your browser settings. Our mobile apps use device identifiers and diagnostic data for similar operational and analytics purposes.

14. Storage & transfers

We primarily store and process data on infrastructure located in India. Where a service provider processes data outside India, we take steps to ensure your data continues to receive protection consistent with this Policy and applicable law.

15. Grievance officer

If you have a concern about how we handle your personal data, you may contact our Grievance / Data Protection Officer:

• Name: [name]
• Email: grievance@svyram.com
• Address: [registered office address]

We will acknowledge and address your complaint within the timelines required by applicable law.

16. Changes to this policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, notify you through the app or by other appropriate means. Please review it periodically.

17. Contact us

For any privacy question, write to us at privacy@svyram.com.