Legal · Privacy
Privacy policy
1. Who we are
[Legal entity name], [registered address] ("MyCabApp", "we", "us") decides how and why your personal data is processed when you use mycabapp.online and its client portal (the "Site"). Under the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary. This policy should be read with our Terms.
2. Your consent
When you tick the consent box and sign in, you agree to us processing your personal data as described here. You can withdraw consent at any time (see section 9). Withdrawing doesn't affect processing already done, and we may then be unable to give you access to the portal or continue working with you.
3. What we collect
- Mobile number, to send sign-in codes and identify your account.
- Business and contact details you enter: company name, city, your name, email, best time to call, and notes.
- Requirements: fleet size, trip types, apps and features you want, brand and launch preferences, budget range.
- Activity: demo chapters watched, call requests, project milestones, and when you signed in.
- Technical data needed to run and protect the Site, such as device, browser, IP address and security signals processed by Google reCAPTCHA and Firebase.
We don't collect your UPI PIN, card numbers, bank passwords or one-time codes, and you must never send them to us. Please don't submit anyone else's personal data unless you're allowed to.
4. Why we use it
- To sign you in and keep your account secure.
- To understand your requirements, prepare quotes, and contact you by phone, SMS, WhatsApp or email about your project.
- To deliver and support the services you agree to buy.
- To prevent fraud and abuse, and to protect the Site and our users.
- To meet legal, tax and regulatory obligations, and to establish, exercise or defend legal claims.
We don't sell your personal data or use it for third-party advertising.
5. Who we share it with
We share personal data only as needed for the purposes above, with:
- Service providers acting for us (Data Processors), including Google Firebase (hosting, sign-in, database), Google reCAPTCHA (abuse protection), SMS carriers (sign-in codes) and Resend (email notifications to our team). They may process data only on our instructions and must protect it.
- Authorities, when the law requires it or to respond to valid legal process.
- A successor business, if we're involved in a merger, acquisition or sale of assets, under equivalent protections.
6. Where it's stored
Project data is stored on Google Cloud in Mumbai, India. Some service providers may process limited data outside India, for example to send emails or to run security checks. We transfer data abroad only where the DPDP Act allows.
7. How long we keep it
We keep personal data while you have an account or are working with us, and afterwards for as long as needed for the purposes above or as required by law (for example, tax and accounting records). After that, we delete or anonymise it.
8. Security
We use reasonable security safeguards, including encrypted connections, one-time-code sign-in, strict access rules that let each client see only their own project, and automatic logout after inactivity. No method of transmission or storage is completely secure, so we can't guarantee absolute security. If a personal data breach occurs, we'll notify the Data Protection Board of India and affected users as the law requires.
9. Your rights
Under the DPDP Act you may:
- ask for a summary of the personal data we hold about you and how we process it;
- ask us to correct, complete, update or erase your personal data;
- withdraw your consent;
- nominate someone to exercise your rights if you die or become incapacitated;
- raise a grievance with us, and if you're not satisfied, complain to the Data Protection Board of India.
Email email from, or quoting, your registered mobile number. We may verify your identity before acting, and may keep data where the law requires or allows us to. We'll respond within the time the law requires.
10. Grievance officer
[Name], Grievance Officer, [Legal entity name], [registered address]. Email: email.
11. Cookies and local storage
We store a small amount of data in your browser to keep you signed in, remember your light or dark theme, and log you out after 30 minutes of inactivity. Google reCAPTCHA may set its own cookies to detect abuse. We don't use advertising or cross-site tracking cookies.
12. Children
The Site is for businesses and isn't meant for anyone under 18. We don't knowingly collect children's personal data. If you believe we have, contact us and we'll delete it.
13. Changes to this policy
We may update this policy at any time, for example to reflect changes to our services or the law. The updated version takes effect when it's posted on this page with a new "Last updated" date. Where the law requires, we'll notify you or ask for your consent again. If you keep using the Site after an update, you accept the updated policy.
14. Governing law
This policy is governed by the laws of India, including the DPDP Act and the Information Technology Act, 2000. Disputes are handled as set out in our Terms.