OXA Cab Service Logo
Legal & Data Protection Compliance

Privacy Policy

This Privacy Policy describes how OXA Cab Service Technologies Pvt Ltd collects, uses, protects, and discloses personal data when you use our mobile applications, websites, and on-demand mobility services.

Effective Date: January 1, 2026Applicable To: Riders, Captain Partners & Website VisitorsVerified Compliance (DPDP Act & IT Rules)

At a Glance: Our Privacy Commitments

Zero Data Monetization

We never sell, rent, or trade your personal travel telemetry or phone numbers to third-party ad networks.

End-to-End Encryption

All in-transit data and payment references are protected using 256-bit TLS encryption protocols.

Driver Safety & KYC

Driver KYC and vehicle inspection data are strictly utilized for regulatory safety verification and dispatch.

Full Account Control

You have full authority to export, correct, or request complete erasure of your profile and history anytime.

1. Information We Collect

Categories of data required to provide on-demand ride services

We collect information you provide directly, data gathered automatically during app operation, and verification records from third-party validation agencies:

A. Account & Contact Credentials

Full legal name, phone number, email address, profile avatar, and emergency SOS contacts registered in your profile.

B. Captain / Driver Partner Records

Driving License details, Vehicle Registration Certificate (RC), commercial permits, vehicle insurance, banking UPI identifiers for payouts, and government-issued photo identity proofs (e.g., PAN / Voter ID / Driver License).

C. Transactional & Payment Records

Fares charged, digital receipts, trip distance, promo codes redeemed, and payment confirmation tokens issued by authorized UPI and payment gateways (we do not store raw credit card numbers or banking PINs).

2. How We Use Your Information

Service execution, transparent billing, and user support

We process your personal information strictly for legitimate operational purposes:

  • Trip Dispatching & Matching: Matching passenger pickup requests with nearby available two-wheelers, autos, and cabs.
  • Transparent Tariff Computing: Calculating upfront flat-rate fares based on exact route distances and vehicle category chosen.
  • Customer Helpline & Lost Item Assistance: Resolving rider-driver disputes, fare inquiries, and retrieving items left behind.
  • Safety Monitoring: Monitoring unusual route deviations, extended stops, or speed threshold exceedances during active rides.
  • Platform Integrity: Detecting fraudulent accounts, unauthorized multiple logins, or false ride cancellation patterns.

3. Location & Telematics

GPS tracking rules for riders and captain partners

Precise location data is essential for an on-demand cab network:

For Riders

Location access is requested while using the app to identify pickup and drop locations. Once a trip commences, telemetry is captured until destination drop-off.

For Captain Partners

Foreground and background GPS tracking is captured while marked "Online" to calculate estimated arrival times and route navigation.

4. Information Sharing & Disclosure

Circumstances under which data is communicated

We share limited information only when necessary to perform trip obligations or comply with lawful requests:

  • Between Rider and Captain: The passenger's first name, pickup location, and destination are shared with the allocated captain. The captain's name, rating, vehicle license plate number, and current live GPS coordinates are shared with the passenger.
  • Emergency Contacts: When the passenger uses the in-app "Share Trip" feature, live GPS telemetry is transmitted to chosen contacts.
  • Law Enforcement & Safety: We may disclose data if legally required by valid judicial orders, warrants, or police emergency investigations.

5. Data Security & Storage

Encryption standards and infrastructure defense

All personal data is hosted in ISO 27001-certified data centers located within India. We deploy strict access controls, automated anomaly monitoring, and TLS/HTTPS encrypted transport layer channels. Access to internal user databases is restricted to authorized operations staff under confidentiality obligations.

6. Data Retention & Erasure

Timeline for holding and deleting personal records

We retain personal data as long as your account remains active. If you request account closure, personal identifiers are anonymized or permanently purged from active systems within 30 days, except records mandated by tax and accounting legislation (e.g., invoices retained up to 7 years for GST audit requirements).

7. Your Rights & Choices

Managing permissions and consent options

As a data principal, you have the right to:

  • Review, correct, or update personal contact information directly within the app profile.
  • Revoke location permissions via phone operating system settings (this will disable real-time ride bookings).
  • Opt out of non-essential promotional SMS or push notifications.
  • Request a portable machine-readable copy of your completed trip history.

8. Grievance Officer & Official Inquiries

Designated officer for legal and privacy grievances

In compliance with the Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are published below:

OXA Cab Service Technologies Pvt Ltd

Designation: Data Grievance Officer

Email: privacy@oxacab.com

Toll-Free Helpline: 1800-OXA-CAB (1800-692-222)

Response SLA: Acknowledged within 24 hours, resolved within 15 business days.