This privacy policy describes how AbhiTaxi ("we", "us", or "our") collects, uses, stores, and shares personal information when you use our website abhitaxi.com, the customer mobile application, and the driver mobile application (together, the "Services").
By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
1. What data we collect
We only collect the data we need to run the Services. The exact data depends on whether you are a customer or a driver.
From customers (booking a ride)
| Data | Why we need it |
|---|---|
| Mobile number (10-digit Indian) | Send OTP for login; share with the driver assigned to your booking so they can contact you. |
| Name | Identify you on bookings, bills, and to the driver. |
| Email address | Send your bill after each trip and account-related notifications. |
| Pickup and drop locations | Calculate fare estimate, dispatch the nearest driver, and let the driver navigate to you. |
| Approximate device location (during booking) | Auto-fill the pickup field for convenience. Only requested when you tap the "use my location" button. |
| Booking history | Show your past trips and bills in your account; respond to support queries. |
From drivers
| Data | Why we need it |
|---|---|
| Mobile number, name, email, photo | Identify you on the platform; let customers contact and identify you. |
| KYC documents: Aadhaar, driving licence, vehicle RC, insurance, monthly verification selfie | Verify you are licensed and authorised to drive commercially, in compliance with Motor Vehicles Act requirements. |
| Vehicle details (type, model, registration plate) | Match the right vehicle to each booking; show customers what to look for. |
| Live GPS location (while you are online) | Show you on the admin live map, dispatch nearby bookings, and let customers track the assigned vehicle to their pickup. |
| Bank / UPI ID | Accept commission payments from you to the company. |
| Trip-start and trip-end photos (odometer + selfie at start) | Audit trail for the trip; resolve fare disputes. |
Automatically collected (both customers and drivers)
- Device type, operating system, app version
- IP address (for rate limiting and abuse prevention)
- Anonymous usage analytics (which pages you visited, which buttons you tapped) via Google Analytics
- Firebase Cloud Messaging token (so we can send push notifications about your booking)
2. How we use your data
- Run the service: match customers to drivers, calculate fares, deliver bills, process commission payments.
- Authenticate you: send OTPs via SMS to verify your phone number; issue and validate session tokens.
- Communicate with you: notify you about booking status (driver assigned, on the way, completed), payment confirmation, support replies.
- Audit and dispute resolution: use trip photos, GPS history, and bill data to resolve disputes between customers and drivers.
- Safety and fraud prevention: verify driver KYC, enforce monthly selfie verification, detect duplicate / fake accounts.
- Service improvement: analyse aggregated usage patterns to improve features and pricing. We do not sell individual personal data to third parties.
- Legal compliance: respond to lawful requests from Indian authorities, retain records as required by tax / transport law.
3. Third-party services we use
Running AbhiTaxi requires us to share certain data with these processors. Each is bound by their own privacy and security obligations.
| Service | Data shared | Purpose |
|---|---|---|
| MSG91 (Walkover Web Solutions) | Mobile number, OTP code | Send authentication OTPs via SMS |
| Google Maps Platform | Pickup / drop coordinates, route polyline | Distance calculation, map display, route navigation |
| Firebase (Google Cloud) | Device push token, booking status | Push notifications to customer and driver apps |
| Google Analytics | Anonymous usage events, IP address | Aggregate website analytics |
| Meta Pixel (Facebook) | Anonymous conversion events | Ad campaign measurement (when you arrive from an ad) |
| AquaHost cPanel hosting | All booking and account data (stored on the server) | Data hosting |
| Drivers assigned to your booking | Customer name, phone, pickup address | So the driver can call you and navigate to the pickup |
We do not sell personal data to advertisers, data brokers, or any third party.
4. How long we keep data
| Data type | Kept for |
|---|---|
| Booking records, bills, trip photos | 7 years (Indian tax law requirement for financial records) |
| Customer account (phone, email, name) | Until you request deletion (see below) |
| Driver KYC documents | For the duration of your driver account, plus 3 years after termination (for fraud and dispute resolution) |
| GPS location history | 30 days (after which it is automatically deleted) |
| OTP codes | 10 minutes (then deleted) |
| Authentication session tokens | 30 days from issue (then expire) |
| SMS delivery logs | 90 days |
5. Your rights (under India's DPDP Act 2023)
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or outdated data (you can update your name and email directly in the app's profile section)
- Erase your data, subject to legal retention requirements (see below)
- Withdraw consent for non-essential processing (e.g. analytics)
- Lodge a complaint with the Data Protection Board of India
6. Delete your account & data
To delete your AbhiTaxi account and associated personal data:
- Visit abhitaxi.com/data-deletion.html
- Fill in your registered mobile number and email; we will send an OTP to verify it's you.
- Confirm the deletion request.
Once confirmed, we delete your name, email, GPS history, KYC documents (drivers), and push notification tokens within 30 days. Financial records (bills, payments) are retained for 7 years as required by Indian tax law, but are anonymised (your name is replaced with a generic identifier).
You can also email admin@abhitaxi.com from your registered email address with the subject "Delete my account" — we will process within 30 days.
7. Security
- All communication between your device and our servers is encrypted via HTTPS (TLS 1.2+).
- Passwords (admin) and OTP codes are stored as bcrypt hashes — never in plain text.
- Session tokens are random 256-bit strings, scoped to your device, and revoked on logout.
- Server access is restricted by IP allowlist and SSH key authentication.
- Database backups are encrypted at rest.
No system is perfectly secure. If we discover a breach affecting your data, we will notify affected users within 72 hours and report to the Data Protection Board of India.
8. Contact us
For any privacy question, complaint, or data request:
- Email: admin@abhitaxi.com
- Phone: +91 80723 31571
- Postal: AbhiTaxi, Tamil Nadu, India
This policy may be updated from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be notified to registered users by email and an in-app banner at least 14 days before they take effect.
AbhiTaxi