Privacy Policy

BidYatra is a technology marketplace intended to connect riders with independent third-party drivers. Riders may submit ride requests, receive bids or offers from drivers, and choose a driver. BidYatra provides the technology platform; it does not itself own, supply or operate drivers’ vehicles. Drivers are independent third parties. Features may vary by app version and location.

• Information you provide: Depending on whether you use rider, driver or vehicle-owner features, we may collect your name, mobile number, email address, profile details, authentication information, support messages, ratings, feedback, ride details, bids, counter-offers and information submitted during registration or verification.
• Driver and vehicle verification: We may collect identity/KYC details, driving licence and vehicle registration information, permits, insurance and other vehicle documents, photographs or selfies used for verification, and vehicle-owner authorisations.
• Location information: With device permission, we may collect precise or approximate location for ride requests, pickup/drop-off, matching, navigation, driver availability and ride safety. If background location is used, it must be necessary for a core feature, clearly disclosed in the app and handled with required permissions and Play Console declarations. Tracking should stop when a ride is completed or cancelled, except for limited processing needed for security, disputes, fraud prevention or legal compliance.
• Ride and transaction information: We may process pickup and destination details, scheduled rides, bids, selected offers, trip status, timestamps, cancellations, platform fees, payment status, refunds and transaction records. Payment details may be handled by a provider such as Cashfree if integrated. This policy does not claim BidYatra stores full card or bank credentials.
• Device and usage information: Depending on the released app and SDKs actually used, we may receive device model, operating system and app version, IP address, diagnostic logs, crash reports, app interactions, notification tokens and security/fraud signals. SMS, call logs, contacts, microphone or camera data should be disclosed only if the app actually requests and uses the relevant permission.

We may use information to manage accounts; verify riders, drivers and vehicle owners; display and manage ride requests and bids; let riders select drivers; coordinate pickup/drop-off; send service, safety and scheduled-ride notifications; process fees, payments and refunds; provide support; detect fraud and security incidents; maintain service quality; comply with legal obligations; and enforce our terms and policies.

For scheduled rides, the platform may notify nearby drivers using a configurable notification radius. The default radius is 25 km and may be adjusted by the administrator to 5 km or another suitable distance. This radius rule does not itself impose a Long Bidder Rating (LBR) or other eligibility requirement; any separate eligibility rules must be disclosed in the relevant product terms.

We process information to provide requested services, operate and secure the platform, comply with law and, where applicable, on the basis of consent or other lawful grounds. Device permissions are requested when needed for a feature. Disabling a required permission may limit the related feature.

We may share necessary information with riders, drivers or vehicle owners involved in a ride; service providers supporting hosting, maps, messaging, authentication, analytics, customer support, payments or security; professional advisers; regulators or law-enforcement authorities where legally required; and parties involved in a corporate transaction. Service providers should be restricted to authorised purposes. We do not sell personal information as a standalone data product.

The app or website may use third-party services such as map providers, cloud hosting, OTP/authentication providers, payment gateways, crash reporting or analytics tools. Those providers may process information under their own terms and privacy policies. The final policy and Google Play Data safety form must accurately reflect the services and SDKs included in the released app.

We retain information only as long as reasonably necessary for account operation, safety, dispute handling, fraud prevention, accounting, tax and legal requirements. Retention periods vary by data type and circumstances. Information may be securely deleted, anonymised or retained longer where required or permitted by law.

You may request account deletion or exercise applicable data rights using the contact details below. We will verify the request and process it in accordance with applicable law. Some records may be retained where legally required or reasonably necessary for fraud prevention, safety, disputes or accounting. If users can create accounts in the app, BidYatra must provide the required in-app deletion pathway and a public web page for deletion requests, and enter that URL in Google Play Console.

We use reasonable technical and organisational safeguards designed to protect information against unauthorised access, loss, misuse, alteration or disclosure. No electronic system or transmission method can be guaranteed completely secure. Users should protect their devices and account credentials and notify us promptly of suspected unauthorised access.

BidYatra is not intended for children who are not legally permitted to use the service. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information unlawfully, contact us.

Depending on hosting and service-provider arrangements, information may be processed or stored outside the state or country where you live. Where applicable, we take steps required by law to protect such information.

Subject to applicable law, you may request access to, correction of or deletion of personal information, withdraw consent where processing relies on consent, or raise a complaint. We may need to verify your identity before acting on a request. You may also manage app permissions through device settings.

We may update this Privacy Policy from time to time. We will publish the updated version with a revised effective date and provide additional notice or seek consent for material changes where required.

This policy is intended to be interpreted in accordance with applicable laws of India, subject to mandatory legal rights and requirements.