Privacy Policy
Effective 3 August 2026. Aligned with India's Digital Personal Data Protection Act, 2023.
1. What we collect
To provide the Urban Haul service, we collect: identity information you provide (name, email, phone), location data (only while the app is in active use for rides, delivery, and safety features), device and diagnostic data, payment tokens (never full card numbers), and interaction data such as bookings, ratings, and support conversations.
2. Why we collect it
Data is processed for: fulfilling your bookings and payments, matching you with nearby drivers and partners, safety features (SOS, route logging, number masking), fraud prevention, legal compliance, and — with your consent — product improvement and personalized offers.
3. How long we keep it
Transaction records are retained for 8 years for tax and regulatory compliance. Location data older than 12 months is aggregated and de-identified. You can request full account deletion via privacy@urbanhaul.tech — processed within 30 days.
4. Your rights under the DPDP Act
You have the right to access your personal data, request corrections, request erasure, withdraw consent, and file a grievance. Data Principal grievance officer: Ms. R. Deka, grievance@urbanhaul.tech.
5. Sharing
We share necessary data with: driver-partners and vendors fulfilling your bookings (name, pickup / drop-off only), payment processors (tokenized), and authorized government requests. We do not sell personal data. Ever.
6. Security
Encryption in transit (TLS 1.3) and at rest (AES-256). SOC 2 Type II underway. Payment flows PCI-DSS scoped. Phone numbers are masked end-to-end during rides.
7. Cookies
The website uses functional cookies (theme preference, session) and, with consent, analytics cookies (aggregated usage). No third-party ad trackers.
8. Changes
Material changes will be notified in-app and via email at least 30 days before they take effect.
This is a template. Before going live, have your Privacy Policy reviewed by counsel familiar with India's DPDP Act 2023 and relevant sectoral regulations (RBI for payments, IT Rules 2021 for platform obligations).