Privacy Policy

1. Overview

By registering on or using Truck First, you agree to the practices described in this policy. If you do not agree, please do not use our services.

We are committed to compliance with the Information Technology Act 2000, the IT (Amendment) Act 2008, and the Digital Personal Data Protection Act 2023 (DPDP Act) as applicable.

2. Information We Collect

2.1 Information you provide directly

• Full name, phone number, and email address
• Driver's license number, Aadhaar number, PAN card (for KYC)
• Vehicle registration number, insurance details (for truck owners)
• Company name and GST number (for businesses)
• Bank account / UPI details (for payment processing)
• Profile photo and documents uploaded for verification

2.2 Information collected automatically

• Device identifiers (device ID, OS version, browser type)
• IP address and approximate location (city/state)
• GPS location data (only during an active trip, with permission)
• Usage data — pages visited, searches, loads viewed, time spent
• Crash reports and performance diagnostics

2.3 Information from third parties

• Government databases for Aadhaar, PAN, and RC verification
• Payment gateways (Razorpay) for transaction confirmation
• Google Maps / mapping services for route and distance data

3. How We Use Your Data

We do not sell your personal data to third parties for their own marketing purposes.

4. Sharing Your Data

We share data only as necessary to provide our services:

• Other platform users — Your name, rating, city, and vehicle info are visible to users you transact with. Your Aadhaar/PAN number is never shared.
• Payment processors — Razorpay receives transaction details to process payments securely.
• Government authorities — We disclose data when required by law, court order, or to comply with DPDP Act obligations.
• KYC partners — Verification agencies process identity documents under strict confidentiality agreements.
• Cloud infrastructure — AWS (India region) hosts our servers. Data stays within India wherever possible.

5. Cookies & Tracking

Our website uses the following types of cookies:

• Essential cookies — Required for login, session management, and security. Cannot be disabled.
• Preference cookies — Stores your chosen theme and language. Deleted when you clear browser data.
• Analytics cookies — Used via Google Analytics to understand usage patterns (anonymised). You may opt out.

You can manage cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

6. Data Retention

• Active account data — Retained for the lifetime of your account plus 3 years after closure.
• KYC documents — Retained for 7 years as required by financial regulations.
• Trip and transaction records — Retained for 7 years for tax and audit purposes.
• GPS location data — Trip location data is deleted 90 days after trip completion.
• Marketing data — Deleted within 30 days of you withdrawing consent.

7. Security

We implement industry-standard security measures to protect your data:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest (Aadhaar, bank details)
• Multi-factor authentication for all admin access
• Regular third-party security audits and penetration testing
• Role-based access control — employees access only what they need

Despite these measures, no internet transmission is 100% secure. Please report security concerns to security@truckfirst.in.

8. Your Rights

Under the DPDP Act 2023, you have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Correction — Request correction of inaccurate or incomplete data.
• Right to Erasure — Request deletion of your data (subject to legal retention obligations).
• Right to Grievance Redressal — Raise a complaint with our Data Protection Officer.
• Right to Nominate — Nominate another person to exercise rights on your behalf in the event of your incapacity.

To exercise any right, email privacy@truckfirst.in with subject "Data Rights Request". We will respond within 30 days.

9. Children's Privacy

Truck First is intended for users aged 18 and above. We do not knowingly collect personal data from persons under 18. If we discover that we have collected data from a minor, we will delete it immediately. Contact us at privacy@truckfirst.in if you believe a minor has registered.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an SMS or email notification to registered users
• Display a prominent notice in the app for 30 days

Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or to exercise your rights, contact our Data Protection Officer:

If you are unsatisfied with our response, you may approach the Data Protection Board of India once it is established under the DPDP Act 2023.