This Privacy Policy is formulated in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Motor Vehicle Aggregator Guidelines. AMARTYA INNOVATION PRIVATE LIMITED ("CabX", "We", "Us", or "Our") acts as the Data Fiduciary responsible for processing your personal data fairly, transparently, and securely.
1. Notice & Consent (Section 5 & 6)
Before or at the time of collecting your personal data, CabX provides this clear and unconditional notice. By registering, requesting a quote, or booking a ride through our platform (website, mobile applications, call center, or WhatsApp concierge), you give free, specific, informed, unconditional, and unambiguous consent for the processing of your personal data for specified lawful mobility purposes.
You have the absolute right to withdraw your consent at any time with ease through your account settings or by emailing our Data Grievance Officer at grievance@thecabx.com.
2. Personal Data We Collect
We collect and process only the minimal personal data necessary to provide reliable transportation services:
Identity & Contact Data
Full Name, Mobile Number, Email Address, and emergency contact details.
Location & Telematics Data
Exact Pickup and Drop coordinates, live GPS route telemetry during active trips for safety monitoring.
Financial & Transaction Data
Invoices, payment transaction IDs, ride receipts, GST details (if applicable). Card/UPI details are processed securely via RBI-authorized, PCI-DSS compliant payment aggregators (Razorpay / Cashfree) and never stored on our servers.
Device & Technical Data
IP address, browser type, operating system, device identifiers, and session cookies for authentication and fraud prevention.
3. Purpose of Processing
Your personal data is strictly processed for the following purposes:
- Service Delivery: Assigning verified drivers, dispatching vehicles, sharing vehicle details, and calculating accurate trip distances and dynamic fares.
- Passenger Safety: Real-time GPS ride monitoring, SOS emergency assistance, and 24x7 control room surveillance.
- Communication: Sending booking confirmations, driver arrival SMS, WhatsApp trip updates, invoices, and service notices.
- Customer Support: Resolving complaints, lost-and-found claims, and refund processing.
- Legal & Tax Compliance: Maintaining trip logs as mandated by the Motor Vehicles Act, GST invoices, and lawful requests from law enforcement agencies.
4. Your Rights as a Data Principal (Sections 11–14)
Under the DPDP Act 2023, you have clear and enforceable rights:
Right to Access (Section 11)
You may request a summary of your personal data and identities of any Data Processors with whom it has been shared.
Right to Correction & Erasure (Section 12)
You can request correction of inaccurate data, completion of incomplete data, or erasure of personal data that is no longer required for the purpose for which it was collected.
Right of Grievance Redressal (Section 13)
You have the right to readily available grievance redressal mechanisms with guaranteed response timelines.
Right to Nominate (Section 14)
You can nominate any other individual to exercise your rights in the event of death or incapacity.
5. Protection of Children's Data (Section 9)
CabX does not intentionally collect personal data of children under 18 years without verifiable parental or guardian consent. We do not engage in behavioral tracking or targeted advertising directed at children.
6. Data Security & Retention (Section 8)
We implement robust organizational, physical, and technical safeguards including SSL/TLS 256-bit encryption in transit, AES-256 encryption at rest, role-based access controls, and regular vulnerability audits to prevent data breach.
Personal data is retained only for the duration necessary to satisfy the purposes set out in this Policy or as mandated by Indian transport and taxation laws (e.g., GST audit records retained for 6 years). Thereafter, data is securely erased or anonymized.
7. Data Protection & Grievance Redressal Officer
Designated Under Section 13, DPDP Act 2023
Grievance Redressal Officer
Company: AMARTYA INNOVATION PRIVATE LIMITED (CabX)
Email: grievance@thecabx.com / privacy@thecabx.com
Address: Lucknow, Uttar Pradesh, India - 226001
Turnaround Time: Grievances will be acknowledged within 24 hours and resolved within 7 to 15 working days. If unresolved, you may approach the Data Protection Board of India.