Privacy Policy

1. Introduction

At Vysa Technologies, protecting your personal privacy is a foundational priority. We operate an on-demand transportation technology platform that connects independent passenger riders ("Riders") with independent transportation drivers ("Drivers" or "Partners").

This Privacy Policy describes in clear terms what information we collect from you, how that information is utilized to provide smooth transit services, the strict circumstances under which information may be disclosed, and your legal rights under applicable data protection regulations.

2. Location Information & Background Tracking

A. Foreground Location

When you open and interact with the Vysa application on your screen, we collect your precise geographic coordinates (latitude and longitude) to:

• Detect your exact pickup point without requiring manual address typing.
• Display nearby available drivers (bikes, autos, cabs).
• Provide real-time turn-by-turn navigation for drivers to reach your destination.
• Calculate trip distance and upfront fare estimates.

B. Background Location (Mandatory Play Store Disclosure)

Depending on your user role, Vysa requires "Allow all the time" (Background Location) access for specific essential operations:

• For Driver Partners (Vysa Partner App): We collect precise background location when the driver is "Online" or on an active trip, even when the application is closed or minimized. This is strictly required to:
  • Dispatch nearby ride requests to the closest active driver.
  • Provide continuous, accurate vehicle tracking to waiting riders.
  • Accurately track distance traveled and calculate fare even if the driver switches to another navigation app or turns off the screen.
  • Ensure driver safety and emergency response tracking.
• For Riders (Vysa Rider App): Background location may be requested during an active, in-progress trip to:
  • Enable real-time trip sharing with your emergency contacts until drop-off.
  • Detect route anomalies or extended unexpected stops for safety.
  • Facilitate instant location sharing in the event of an SOS trigger.
  Riders can turn off background location permission in their device settings at any time, though doing so may limit live safety tracking features.

3. Personal Data We Collect

In addition to location, we collect the following categories of information:

A. Account & Profile Information

• Personal Details: Full name, mobile phone number, and email address.
• Profile Photo: Optional profile picture to help drivers and riders identify each other at pickup points.
• Emergency Contacts: Trusted phone numbers you choose to save for emergency SOS alerts.

B. Driver Partner Verification & Regulatory Data

To comply with transport regulations and ensure rider safety, we collect verification documents from drivers:

• Valid Government-issued Driving License.
• Vehicle Registration Certificate (RC) and Commercial Permit.
• Vehicle Insurance Certificate and Fitness/Pollution documents.
• Government Identity Proof (e.g., Aadhaar card or national ID).

C. Financial & Payment Information

When you pay for rides or drivers receive earnings, financial data is processed:

• Transaction history, payment method selection, date, time, and fare amounts.
• PCI-DSS Compliance: We do not store full credit or debit card numbers or CVV codes on our servers. All digital payments are processed through certified, PCI-DSS Level 1 compliant payment gateways (such as Razorpay, Stripe, or Cashfree).
• For driver payouts: Bank account number, IFSC code, or UPI ID for earnings remittance.

D. Device, Log & Diagnostic Information

• Device hardware model, operating system version, app version, language, and unique device identifiers (FCM token for push notifications).
• IP address, network carrier, connection type, and crash log diagnostics via Firebase/Google Play Console.

4. Device Permissions Requested

5. How We Use Your Information

• Service Delivery: Facilitating ride matching, vehicle dispatch, turn-by-turn routing, and fare billing.
• Customer Support: Resolving booking disputes, lost item inquiries, refund requests, and user feedback.
• Trust & Safety: Verifying driver partner identities, authenticating rider accounts via phone OTP, and powering 24/7 SOS alerts.
• Communications: Sending administrative receipts, safety advisories, system alerts, and critical account notices.
• Legal & Compliance: Complying with municipal transport rules, tax reporting laws, and lawful police requests.

6. Information Sharing & Third-Party Services

We share information only in strict, necessary scenarios:

• Between Rider & Driver: When a ride is booked, we share the Rider's first name, pickup location, drop point, and phone contact with the Driver. The Rider receives the Driver's name, photograph, vehicle make, model, license plate number, rating, and real-time GPS location.
• Third-Party Service Providers:
  • Google Maps Platform: For geocoding addresses, route generation, and map display.
  • Firebase (Google LLC): For authentication SMS OTP delivery, Cloud Messaging (FCM) notifications, and crash analysis.
  • Payment Gateways: For processing online payments and driver direct-bank payouts.
• Emergency Contacts & Public Safety: If an emergency SOS is triggered, trip telemetry and location are broadcast to designated emergency contacts and relevant public emergency dispatchers.
• No Sale of Data: Vysa does not sell, rent, monetize, or trade your personal data with third-party advertisers or data brokers.

7. User Rights & Account / Data Deletion Policy

8. Data Security & Retention

We implement robust administrative, technical, and physical safeguards to safeguard personal information. Data transmission is encrypted using industry-standard TLS/SSL protocols, and stored data is restricted behind firewalled systems with multi-factor authentication.

We retain personal information for as long as your account remains active. When you delete your account, information is wiped except for statutory records (such as completed ride invoices retained for 7 years under applicable taxation statutes).

9. Children's Privacy

Vysa services are not directed to or intended for individuals under eighteen (18) years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information without parental consent, please contact us immediately for prompt deletion.

10. Grievance Officer & Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, you may contact our designated Grievance Officer: