Privacy policy

RentOGaadi ("we", "us") runs the website rentogaadi.com, which connects customers who want a cab, car, tempo traveller or bus with independent vehicle owners and operators ("partners") in Bihar and Jharkhand.

For the personal data described here, RentOGaadi is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it.

If you book a trip or send an enquiry:

• your name and mobile (WhatsApp) number
• pickup and drop places, travel date and time, vehicle type, number of passengers and the route distance
• the UPI reference number (UTR) you submit after paying the booking fee
• messages you send us on WhatsApp about your booking, including the CONFIRM message

If you register as a partner:

• business and contact person name, mobile number and city
• PAN and driving licence number
• vehicle details and registration number, and your price
• copies of your documents: RC, insurance, fitness, permit and PUC (if given), driving licence, PAN card, and vehicle photos, with their numbers and expiry dates

Automatically, when you use the website: your IP address and basic request information in server logs, used only for security and to stop misuse. We do not use advertising or tracking cookies.

We do not ask for Aadhaar, bank account numbers, card numbers or UPI PINs. Payments happen inside your own UPI app; we never see your bank details.

• To provide your booking: calculate the fare, confirm the booking with you, assign a verified partner and share trip details.
• To verify partners: check each partner's documents against government records (Vahan, Sarathi and the Income Tax PAN service) before customers see them, and keep checking expiry dates.
• To handle payments: match the booking fee you paid by UPI, and keep a record of amounts between us and partners.
• To keep everyone safe: prevent fake bookings, fraud and abuse, and keep an audit trail of who viewed or verified documents.
• To meet the law: keep records required for tax and accounting, and respond to lawful requests from authorities.

We process your personal data on the basis of your consent, which you give when you submit a booking, an enquiry or the partner registration form, and for the purposes you asked us to carry out. Where the DPDP Act allows, we also rely on legitimate uses, such as complying with law.

You can withdraw consent at any time by contacting us (section 10). After that we stop using your data, except what we must keep by law. Withdrawing consent may mean we cannot complete a booking or keep you listed as a partner.

• The partner assigned to your trip gets your name, mobile number, pickup, drop and time, only so they can do the trip.
• Customers see a partner's vehicle type, model, seats and price. After a booking is confirmed, the customer receives the partner's name, phone number and vehicle number. Partner documents, PAN and licence numbers are never shown to customers.
• Service providers who run the website for us: our server host (Hostinger), WhatsApp (Meta) when you message us, and your UPI app and bank when you pay. They may only use the data to provide their service.
• Maps: to calculate road distance we send only place coordinates (no name or phone) to the OpenStreetMap-based routing service.
• Authorities, when the law requires it, for example a police or court request.

We do not sell or rent personal data, and we do not share it for advertising.

• The website works only over encrypted HTTPS.
• Partner documents are stored in a private folder that is not reachable from the internet. Only our verification team can open them after signing in, and every view is recorded.
• Uploaded photos are re-saved to remove hidden information such as location, and harmful files are refused.
• Admin access needs a password and a code from an authenticator app (2-step login).
• Booking links are protected with secret tokens, and repeated attempts to guess them are blocked.
• Our server uses a firewall, automatic security updates and encrypted, access-limited backups.

• Booking records (name, phone, trip, amounts): 3 years after the trip, for accounts, tax and disputes. Then deleted or made anonymous.
• Enquiries that did not become a booking: 1 year.
• Partner documents: while you are an active partner, and 1 year after you leave, so we can answer complaints about past trips.
• Documents of rejected applicants: deleted within 90 days of rejection.
• Server logs: about 14 days. Backups: replaced every 14 days.

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you, how we use it and who we shared it with
• correct, complete or update it
• erase it, when it is no longer needed for the purpose or you withdraw consent (unless the law requires us to keep it)
• nominate another person to use these rights for you in case of death or incapacity
• hear your grievance and resolve it

Contact us as shown in section 10. We may ask you to confirm the request from your registered mobile number so nobody else can see your data.

Bookings and partner registration are for adults (18 years or older). We do not knowingly collect data of children. If a child's data reached us, contact us and we will delete it.

For questions, requests or complaints about your personal data, contact our Grievance Officer:

• WhatsApp or call: +91 88091 77952
• Email: rentogaadi.help@gmail.com
• Post: Grievance Officer, RentOGaadi, Bihar, India

We acknowledge requests within 7 days and resolve them as soon as possible, and in any case within the time set by the DPDP rules. If you are not satisfied, you can complain to the Data Protection Board of India.

Message us on WhatsApp

If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires, and tell you what we are doing about it and what you can do.

We use only cookies that the website needs to work: one that keeps your booking link private on your device, and one that keeps our team signed in to admin. There are no advertising cookies. If we add website statistics in future, we will update this policy first.

We may update this policy when our service or the law changes. The date at the top shows the latest version. For important changes we will tell active partners on WhatsApp. Partners should also read the Partner Terms.