Information we collect

We may collect account details (name, mobile number, email), booking and ride information, saved addresses, pickup and drop locations, location during relevant ride stages, support messages, device and notification tokens, and payment references.

Driver onboarding also includes identity, driving licence, PAN, profile photo and vehicle-expertise information needed for verification and operations.

Payment and financial information

Online payments on DriveSathi are processed by PayU. When you pay, your card number, CVV, UPI ID/PIN, net-banking and wallet credentials are entered on PayU's RBI-authorised, PCI-DSS-compliant payment page and are handled by PayU and its partner banks. DriveSathi does not collect or store your card, CVV, UPI PIN or wallet credentials.

DriveSathi receives only a payment reference/transaction identifier and the payment status from PayU so we can confirm your booking or verification fee. We do not receive or store your full card number, CVV, UPI PIN, net-banking password or wallet credentials.

PayU and its partner banks, card networks and UPI infrastructure process the transaction under their own terms and privacy policies. You can read PayU's privacy statement at payu.in.

How we use information

We use information to create accounts, estimate and fulfil bookings, match drivers, verify driver eligibility, process and reconcile payments, deliver notifications, prevent fraud and misuse, provide support and meet legal obligations.

Location and sharing

Customer and driver location is used only for service delivery and safety. Driver live location is shared with the assigned customer only from the driver-leaving stage through the active ride.

When we share information

We do not sell your personal information. Service providers are bound by contract and their own privacy practices.

• Payment providers and banks — PayU and its partner institutions, to process and refund your payment.
• The other party to a booking — the assigned driver or customer, for service delivery and safety.
• Technology service providers — maps, hosting, analytics, messaging, SMS/WhatsApp and notification providers, solely to operate DriveSathi.
• Authorities — where required by law, a valid legal request, or to investigate fraud and safety incidents.

Storage, retention and security

We retain account and booking records only as long as needed for operations, safety, dispute handling and applicable law. We may retain records required by tax, accounting and payment regulations, and records relevant to an open dispute, for the legally required period.

We limit access to authorized employees and processors, use reasonable technical and organisational safeguards, and rely on PayU's PCI-DSS-compliant infrastructure for card data so that sensitive payment credentials never reach our systems.

Your rights and consent

You may contact us to request access to, correction of, or deletion of eligible information, and to withdraw consent for optional processing. Some records may be retained where law, fraud prevention or dispute handling requires it.

We process your information on the basis of the contract for our services, your consent (which you may withdraw), and our legal and safety obligations. You can manage payment consent through PayU where applicable.

Grievance officer and contact

For any privacy question, data request or complaint, contact our Grievance Officer at grievance@drivesathi.in. You can also write to support@drivesathi.in.

Legal entity: DriveSathi. Registered address: available on request.

Changes to this policy

We may update this policy as our services and the law evolve. The revised policy will be posted here with a new last-updated date.