This policy explains how Rod247 ("we", "us") handles personal data when you use the Rod247 mobile app and website (the "Service") to book shared seats and one-way cabs, or to drive with us.
Data we collect
- Account: your mobile number (used to log in with an OTP) and your name.
- Bookings: route, pickup and drop points or addresses with their map coordinates, travel date and time, number of seats or passengers, and, if you book for someone else, that passenger's name and mobile number.
- Location: only when you tap "Use my current location" or move the map pin, to fill in your pickup point. We do not track your location in the background.
- Payments: payments are processed by Razorpay. We receive the payment status, amount and reference IDs. We never see or store your card, UPI PIN or bank login.
- Drivers: driving licence, vehicle RC, cab photos, profile photo and vehicle details, used to verify drivers.
- Technical: device push-notification token, IP address, app/browser type and security logs, used to keep the Service secure and working.
How we use it
- To log you in, create and manage bookings, assign drivers and vehicles, and calculate fares from road distance.
- To share the minimum needed between rider and driver: the driver sees the rider's name, phone number and pickup/drop; the rider sees the driver's name, phone number, photo and vehicle.
- To process payments and refunds, send booking updates (SMS, push notifications), provide support, prevent fraud and meet legal obligations.
We do not sell your personal data and we do not use it for third-party advertising.
Service providers
We share data only with providers who help us run the Service, under their own security and privacy terms: MSG91 (OTP SMS), Razorpay (payments), Google Firebase (push notifications), map and place-search providers (Google Maps Platform or OpenStreetMap services) for addresses and distances, and our hosting and storage providers. We may disclose data when required by law or to protect the safety of our users.
Security
Data is sent over encrypted connections (HTTPS). OTPs and session tokens are stored only in hashed form, driver documents are kept in private storage and shown to our verification team through short-lived links, and access to admin tools is restricted and logged.
Retention
We keep account data while your account is active. Booking, payment and refund records are kept for as long as tax and accounting laws require, even after you delete your account; in that case they are no longer linked to your name or phone number.
Your choices and rights
- You can view and update your name in the app or on the website.
- You can delete your account at any time. See Delete your account.
- You can turn off location access and notifications in your device settings.
- For any request about your data, contact us using the contact details on our Contact page.
Children
The Service is not meant for children under 18 to book on their own. A parent or guardian should make the booking.
Grievance officer
Name to be added, address to be added. Contact: the contact details on our Contact page. We aim to respond within 30 days.
Changes
We may update this policy. We will post the new version here and change the "last updated" date; for significant changes we will also notify you in the app.