Privacy policy

WavyGo Privacy Policy

Effective 27 October 2026.

1. Who we are

WavyGo Mobility Services Private Limited, CIN U77100BR2025PTC077095, registered office at C/o Ramchandra Mehta, Ward No-08, Bishunpur, Daulatpur, Raghopur, Supaul - 852215, Bihar ("WavyGo", "we", "us") runs the WavyGo app and website (the "Platform"), an online marketplace where you can book two-wheelers from independent rental Partners. For the personal data described here, WavyGo decides why and how it is used, so we are the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the "body corporate" under the Information Technology Act, 2000 and the SPDI Rules, 2011.

This policy is written to meet the SPDI Rules that apply today and the DPDP Act and DPDP Rules, 2025 as their obligations come into force in phases.

Contact for privacy matters: Anil Anand, Founder and CEO (Grievance Officer), anil@wavygo.in, 9341162251, 5, ASHINE Building, SVNIT, Surat - 395007.

2. What we collect

Account details: your name, date of birth, mobile number and email address.

Verification details: your driving licence details (and an image of your licence, if you upload one) and the result of our check of its validity.

Aadhaar (only if you choose it): the OTP-based verification described in section 3. We do not store your Aadhaar number.

Booking and payment details: Vehicle booked, Partner, dates, amounts, refunds, challans and damage records. Card, UPI and bank credentials are handled by payment gateways and are not stored by us. The security deposit is paid in cash directly to the Partner, and we only show you the deposit amount.

Vehicle location: the location of Vehicles that have a GPS device fitted, during your Rental Period. We do not track your phone during a Rental Period.

Device and usage data: device model, operating system, app version, IP address, crash logs, in-app activity and the device identifier used to send you notifications.

Communications: messages, support calls or chats with us, and your ratings and reviews.

3. Aadhaar verification

3.1 Giving Aadhaar is voluntary. You can complete verification with your driving licence instead.

3.2 If you choose Aadhaar, you enter your Aadhaar number and UIDAI sends an OTP to your Aadhaar-linked mobile number. The check is carried out through our verification service provider, Quick eKYC, which handles your Aadhaar number only to carry out the check. We take your consent before the request is made.

3.3 We use Aadhaar only to confirm your identity for Booking purposes and for nothing else. We do not use it for marketing.

3.4 We do not store your Aadhaar number. We keep only the result of the verification (verified or not verified) and the date and time it was done. We do not collect your biometrics and we do not keep an image of your Aadhaar card.

3.5 We do not share your Aadhaar number with Partners.

4. Why we use your data

• To create and secure your account, and to verify your identity and driving licence.
• To process Bookings, payments and refunds, and to give you booking receipts.
• To share what a Partner needs to hand over a Vehicle to the right person.
• To keep Vehicles, riders and the public safe, including theft recovery, accident handling and fraud prevention.
• To respond to challans, accident reports and legal requests.
• To provide support, resolve complaints and improve the Platform.
• To send service messages (Booking confirmations, reminders, safety notices). We send promotional messages only if you agree, and you can withdraw that at any time.
• To meet legal duties such as tax, accounting and record-keeping.

We use your data on the basis of your consent, and for the "legitimate uses" the DPDP Act allows, such as performing the Booking you asked for and complying with law.

5. Who we share it with

We do not sell your personal data. We share it only as needed with:

• Partners: your name, mobile number, Booking details, and licence validity and category, so they can hand over the Vehicle. Partners are bound by their agreement with us to use this data only for your Booking and legal record-keeping.
• Service providers acting for us: Quick eKYC (identity verification), Amazon Web Services (hosting), OneSignal (push notifications), payment gateways, and SMS, email and support tools, under contracts that require security and confidentiality.
• Insurers, where a claim arises from your Booking.
• Government and law enforcement, such as transport authorities and police, for challans, accidents, theft or when the law requires or permits it.
• A buyer or successor, if WavyGo is merged or acquired, with notice to you and the same protections.

6. How long we keep it

Data

How long

Aadhaar number

Not stored

Aadhaar verification result (verified or not, date and time)

3 years after your last activity

Driving licence details and verification record

3 years after your last Booking, or longer if the rental licensing rules or a legal duty require

Booking, payment, invoice and refund records

8 years, as tax and company law require

Vehicle GPS data

90 days, longer only if linked to an accident, theft, dispute or legal request

Account details

While your account is active, and 3 years after your last activity

Support records

3 years

When the purpose is complete and the law does not require us to keep the data, we erase it, and we tell our service providers to do the same.

7. Your rights

You may ask us to: show you the personal data we hold and how it is used; correct or complete it; erase it; withdraw your consent; and nominate another person to exercise your rights if you die or become incapacitated. Write to anil@wavygo.in. Withdrawing consent does not affect past use, and it may mean we can no longer verify you or process Bookings. Some data must be kept by law, and we will tell you if that is the case.

We acknowledge requests within 48 hours and aim to resolve them within 30 days.

8. Security

We use reasonable security practices and safeguards suited to the data we hold, including hosting on Amazon Web Services and restricting access to personal data. No system is completely secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

9. Children

The Platform is for people aged 18 and over. We do not knowingly collect data of anyone under 18. If we find that we have, we will delete it.

10. App permissions and notifications

The app may ask for permission to send notifications, to use your location (if you allow it, only to show nearby Vehicles and pickup points) and to access your camera or files (only to upload your documents). You can deny or change these in your phone settings, but some features may then not work. We use OneSignal to send push notifications. We do not use your data for advertising by others.

11. Where data is stored

Your data is stored on Amazon Web Services servers in Mumbai, India. Our notification provider, OneSignal, may process device identifiers and notification data on servers outside India. We transfer data outside India only as the DPDP Act and Rules permit.

12. Grievances

For complaints about privacy, contact our Grievance Officer: Anil Anand, Founder and CEO, anil@wavygo.in, 9341162251, 5, ASHINE Building, SVNIT, Surat - 395007. We acknowledge complaints within 48 hours and resolve them within one month. If you are not satisfied, you may complain to the Data Protection Board of India once it is operational for complaints, after first raising the matter with us.

13. Changes to this policy

We will tell you in the app or by email before material changes take effect. Where the law requires fresh consent, we will ask for it.