CAB24X7 PRIVACY POLICY

Effective Date: 02/09/2025

Last Updated: 02/09/2025

INTRODUCTION

Your privacy matters to Maa Nataraj Tours And Travels (Cab24x7). This Privacy Policy explains how we

collect, process, use, share and protect information about you when you use our transportation services,

mobile application, website, and related services.

BY ACCEPTING OUR TERMS AND CONDITIONS, YOU AGREE TO THE TERMS OF THIS PRIVACY

POLICY. Please review this policy carefully. If you do not agree to this Privacy Policy, do not use our

Services.

This Privacy Policy covers both "online" (web and mobile services, including websites and mobile

applications) and "offline" (collection through phone calls, in-person interactions) activities related to our

ride-hailing and delivery services.

1. DEFINITIONS

For the purpose of this Privacy Policy:

"Co-branded Services" means services provided in association with third parties such as sponsors

and partners

"Device" means computer, mobile phone or other device used to access our Services

"Device Identifier" means IP address or another unique identifier for your Device

"Mobile Application" means the Cab24x7 mobile application

"Protected Information" means information that could reasonably identify you personally, including

name, email, mobile number

"Services" means our ride-hailing, delivery, and related transportation services

"TPSP" means Third Party Service Provider

"Usage Information" means information about how you use our Services

2. DATA CONTROLLER INFORMATION

Primary Data Controller:

Maa Nataraj Tours And Travels (Cab24x7)

Shop No - 2, First Floor,

Veer Complex, Radhanpur Circle,

Near Janpath Hotel,

Mehsana Gujarat

384002 - India

Mail: info.cab24x7.in@gmail.com

Contact Number:

+918009101800

3. INFORMATION WE COLLECT

A. INFORMATION YOU PROVIDE TO US

Account Registration Information:

Full name, email address, mobile phone number

Password and login credentials

Profile photograph

Address and location preferences

Date of birth (for age verification)

Payment information (credit/debit cards, wallet details)

Government identification documents (as required by law)

Additional Information:

Customer support communications

Ratings, reviews, and feedback provided

Referral information when you invite friends

Emergency contact details uploaded by you

Information for booking rides for others from your contact list

B. INFORMATION COLLECTED AUTOMATICALLY

Location Information:

For Riders: Location data when app is in foreground (with your permission)

Trip routes, pickup and drop-off locations

Geographic areas visited during service usage

Device and Usage Information:

Device type, model, operating system, and version

Mobile network information and IP address

App usage patterns, features accessed, time spent

Crash reports and performance data

Preferred language and country settings

Transaction Information:

Trip details (date, time, duration, distance traveled)

Fare calculations and payment processing details

Service types requested

Promotion codes used

Order details for delivery services

Communication Data:

Call and message metadata (not content) between users

Customer service interaction records

In-app chat messages

Push notification preferences

SMS data for OTP verification and automatic form filling (with device permission)

C. INFORMATION FROM THIRD PARTIES

Other users (ratings, referrals, shared trip information)

Business partners and payment processors

Insurance providers (if you buy)

Mapping and navigation services

Marketing partners (anonymized data)

Social media platforms (if you connect accounts)

Corporate accounts (for business bookings)

4. HOW WE USE YOUR INFORMATION

A. PRIMARY SERVICE PROVISION

Core Services: Matching riders with drivers, route optimization, fare calculation

Dynamic Pricing: Automated pricing based on demand, distance, traffic conditions

Payment Processing: Handling transactions, billing, and financial settlements

Trip Management: Tracking rides, providing ETAs, trip history

Safety Features: Emergency assistance, real-time location sharing, incident response

B. SAFETY AND SECURITY

Driver Verification: Background checks, document verification, ongoing monitoring

Fraud Prevention: Detecting suspicious activities, fake accounts, payment fraud

Safety Monitoring: Identifying unsafe driving patterns or user behavior

Account Security: Preventing unauthorized access, identity verification

Incident Investigation: Responding to safety complaints and disputes

C. SERVICE ENHANCEMENT

Personalization: Customizing experience based on preferences and history

Analytics: Understanding usage patterns to improve services

Feature Development: Testing and developing new features

Quality Improvement: Monitoring service quality and customer satisfaction

Geographic Expansion: Analyzing demand patterns for service area expansion

D. COMMUNICATION

Service Communications: Trip confirmations, receipts, status updates

Customer Support: Resolving issues, answering queries

Marketing Communications: Promotional offers, service updates (with consent)

Safety Alerts: Emergency notifications, security updates

Regulatory Communications: Legal notices, policy updates

5. INFORMATION SHARING AND DISCLOSURE

A. WITH OTHER USERS

Information Shared with Drivers:

Rider's first name and contact number

Pickup location and general destination area

Rider rating (average)

Special accessibility requirements

Information Shared with Riders:

Driver's name, photograph, and contact information

Vehicle details (make, model, color, license plate number)

Driver's current location during trip

Driver rating and total number of trips completed

Estimated arrival time

Shared Trip Information:

In carpooling services, limited information shared between co-passengers

Trip details for rides booked on behalf of others

B. WITH SERVICE PROVIDERS AND BUSINESS PARTNERS

Third Party Service Providers:

Payment processors and financial institutions

Mapping and navigation service providers

Background verification agencies (for drivers)

Cloud storage and hosting providers

Customer support service providers

SMS and communication service providers

Insurance providers

Marketing and Analytics Partners:

Marketing campaign management (anonymized data only)

App performance analytics (non-personal data)

Market research companies (aggregated data)

C. LEGAL AND REGULATORY COMPLIANCE

Government Authorities:

Law enforcement agencies (when required by court order)

Transport regulatory authorities

Tax authorities for compliance requirements

Consumer protection authorities

Legal Proceedings:

Courts and tribunals (as required by legal process)

Arbitration proceedings

Insurance claim investigations

Dispute resolution processes

D. BUSINESS OPERATIONS

Corporate Transactions:

Mergers, acquisitions, or business transfers

Due diligence processes

Asset sales or restructuring

Financing arrangements

Emergency Situations:

Emergency services during safety incidents

Medical emergencies requiring immediate response

Situations threatening public safety

E. WITH YOUR CONSENT

Any other sharing will be done only with your explicit consent, clearly explaining the purpose and

recipients.

6. DATA SECURITY MEASURES

A. TECHNICAL SAFEGUARDS

Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)

Secure Infrastructure: Industry-standard cloud security protocols

Access Controls: Role-based access with multi-factor authentication

Network Security: Firewalls, intrusion detection, and monitoring systems

Secure Development: Security testing and code reviews

B. ADMINISTRATIVE CONTROLS

Employee Training: Regular data protection and security training

Access Management: Strict need-to-know basis for data access

Background Checks: Verification of employees handling sensitive data

Incident Response: Procedures for security breach detection and response

Regular Audits: Internal and external security assessments

C. PHYSICAL SECURITY

Data Center Security: Physical access controls and monitoring

Device Security: Secure handling of devices with access to user data

Document Security: Secure storage and disposal of physical documents

7. DATA RETENTION AND DELETION

A. RETENTION PERIODS

Account Information:

Retained while account is active and for years after account closure

Some information retained longer for legal compliance

Trip and Transaction Data:

Trip details retained for Long Peroid (regulatory

requirement)

Payment information as required by RBI guidelines

Location data retained for years unless longer period required

Communication Records:

Customer support interactions: 10 years

or more

User ratings and reviews: 10 years

or more

Marketing communications: Until opt-out request

B. DELETION PROCEDURES

User-Initiated Deletion:

Account deletion request through app settings

Email request – info.cab24x7.in@gmail.com

Customer support assistance

Automatic Deletion:

Non-essential data deleted after retention period

Regular purging of temporary files and logs

Anonymization of data where full deletion not required

Legal Compliance:

Some data retained for legal, regulatory, and safety requirements

Court orders may require extended retention

Tax and financial compliance requirements

8. YOUR RIGHTS AND CHOICES

A. ACCESS AND CONTROL RIGHTS

Right to Access:

Request copies of your personal data

Explanation of how your data is processed

Right to Correction:

Update incorrect or incomplete information

Modify account details through app settings

Request correction via customer support

Right to Deletion:

Request account and data deletion

Right to be forgotten (subject to legal limitations)

Selective deletion of specific information

Right to Data Portability:

Receive your data in structured, machine-readable format

Transfer data to another service provider

B. PRIVACY SETTINGS AND CONTROLS

Location Settings:

Enable/disable location sharing

Choose precision level (exact vs. approximate)

Control background location access

Communication Preferences:

Marketing email opt-out

SMS notification controls

Push notification settings

Call preference settings

Account Settings:

Profile visibility controls

Trip history privacy settings

Payment information management

C. COOKIE AND TRACKING CONTROLS

Browser cookie settings

Mobile app tracking preferences

Advertising identifier controls

Analytics opt-out options

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for:

Essential Functions:

User authentication and login sessions

Security and fraud prevention

Basic app functionality

Performance and Analytics:

App usage analytics

Performance monitoring

Crash reporting and debugging

Marketing and Personalization:

Personalized content delivery

Marketing campaign effectiveness (with consent)

User preference tracking

Cookie Management: You can control cookies through your browser or device settings. Disabling certain

cookies may limit app functionality.

10. INTERNATIONAL DATA TRANSFERS

Data Localization:

All Indian user data stored within India

Cross-border transfers only with adequate safeguards

Explicit consent for international transfers where required

Transfer Safeguards:

Standard contractual clauses

Adequacy decisions by competent authorities

Binding corporate rules where applicable

11. CHILDREN'S PRIVACY

Age Restrictions:

Services not intended for users under 18 years

Parental consent required for users under 18

Age verification mechanisms implemented

Child Data Protection:

No knowingly collection from children under 18 without parental consent

Immediate deletion if unauthorized child data discovered

Special protection for sensitive child information

12. COMPLIANCE WITH INDIAN LAWS

This Privacy Policy complies with:

Digital Personal Data Protection Act, 2023:

Lawful basis for processing

Data subject rights and remedies

Consent management requirements

Data breach notification procedures

Information Technology Act, 2000:

Reasonable security practices

Data protection obligations

Grievance redressal mechanisms

Motor Vehicle Act and Rules:

Taxi aggregator licensing requirements

Driver background verification

Trip record maintenance

Other Applicable Laws:

Consumer Protection Act, 2019

RBI guidelines for payment data

State-specific transportation regulations

13. GRIEVANCE REDRESSAL MECHANISM

A. Internal Grievance Process

Step 1: Customer Support

Phone: +91 8009101800

In-app customer support chat

Response time: 24-48 hours

Step 2: Escalation

Senior management review for unresolved complaints

External mediation if required

Regular grievance reporting and analysis

B. External Remedies

Data Protection Authority:

Data Protection Board (when established)

State Information Commissions

Sector-specific regulators

Consumer Forums:

District Consumer Disputes Redressal Commissions

State Consumer Disputes Redressal Commissions

National Consumer Disputes Redressal Commission

Cyber Crime Authorities:

Cyber Crime Police Stations

Cyber Crime Investigation Cells

IT Department authorities

14. UPDATES TO THIS PRIVACY POLICY

Policy Updates:

Regular review and updates as needed

Updates for legal compliance changes

Service feature additions or changes

Notification Methods:

In-app notifications for material changes

Email notifications to registered users

Website and app prominent notices

SMS notifications for significant changes

15. CONTACT INFORMATION

Customer Support

Email: info.cab24x7.in@gmail.com

Phone: +91 8009101800

WhatsApp: +91 8009101800

16. GOVERNING LAW AND JURISDICTION

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject

to the exclusive jurisdiction of courts in Mehsana, Gujarat, India.

17. ACKNOWLEDGMENT

By using our Services, you acknowledge that:

You have read and understood this Privacy Policy

You consent to the collection, use, and sharing of your information as described

You understand your rights and how to exercise them

You agree to the terms and conditions of service

Additional Compliance Details & Certification

Grievance Officer & Data Protection Officer (DPO):

Name: Meet Chauhan

Email: info.cab24x7.in@gmail.com | Phone: +91 8009101801

Specific Retention Periods:

- Trip & transaction data: 5 years (as per Gujarat RTO norms)

- Communication records: 10 years

- After retention period, data will be anonymized or deleted

Consent Withdrawal:

You can withdraw consent anytime by emailing grievance@cab24x7.in

Legal Basis & Compliance:

- Fully compliant with Digital Personal Data Protection Act, 2023

- Complies with Gujarat Motor Vehicle Rules, IT Act, RBI guidelines

4 Compliance Certification:

This Privacy Policy is certified to comply with DPDP Act, 2023 and Gujarat State norms.

UPDATED AS PER DPDP ACT & GUJARAT NORMS