Privacy Policy
This policy explains what personal data RNR VENTURES ("RNR", "we", "us"), GSTIN 06AOHPC7110C1ZO, B054, AIPL The Peaceful Homes, Sector 70A, Gurgaon, Haryana 122101, India, collects, why, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
1. Who this applies to
- Website visitors of rikshalogistics.in.
- Riksha users: merchants who book cartage and drivers who provide it.
- NavDoot merchants: businesses that use NavDoot to message their customers.
- Customers of NavDoot merchants: people who receive WhatsApp messages from a merchant through NavDoot.
2. Data we collect
| Who | Data | Why |
|---|---|---|
| Website visitors | None beyond standard server logs (IP address, browser, time). We use no advertising or tracking cookies. | Security and keeping the site running |
| Riksha merchants | Name, business name, phone number, pickup and drop addresses, shipment details, payment and invoice records | Booking cartage, invoicing, support |
| Riksha drivers | Name, phone number, address, Aadhaar number and photo, passport-size photo, vehicle and licence details for motorised vehicles, trip and payout records, delivery photos | Identity verification before accepting jobs, assigning trips, payouts, proof of delivery |
| NavDoot merchants | Name, business name, phone number, email, WhatsApp Business account details, billing details | Providing the service, login, invoicing |
| Customers of NavDoot merchants | Name and phone number provided by the merchant or by the customer, opt-in and opt-out records, messages sent and received, delivery and read status | Sending the merchant's messages, honouring opt-outs, reports for the merchant |
3. Our role for NavDoot customer data
When a merchant uses NavDoot, the merchant decides whom to message and why, and is the Data Fiduciary for its customers' data. RNR processes that data only on the merchant's instructions, as a Data Processor. Each merchant's customer data is kept separate and is never shared with or used for any other merchant.
Merchants must message only customers who have agreed to receive messages from them. Every recipient can stop messages at any time by replying STOP, or by using the opt-out option in the message.
4. Legal basis
We process personal data on the basis of your consent, or for legitimate uses permitted by the DPDP Act, such as providing a service you asked for, complying with law (for example GST records), and preventing fraud.
5. Service providers we use
We share data only with providers needed to run our services, under their own security and privacy terms:
- Meta Platforms (WhatsApp Business Platform) — to send and receive WhatsApp messages.
- Supabase — database, login and file storage.
- Google (Google Cloud, AI Studio hosting, Google Maps Platform) — app hosting and address lookup.
- MSG91 — SMS one-time passwords for login.
- Payment providers, when you make or receive payments.
We do not sell personal data. We may disclose data when required by law or a lawful order.
6. Where data is stored
Data is stored with the cloud providers above on servers in India and in other countries, including Singapore. Where data is transferred outside India, we do so as permitted under the DPDP Act.
7. How long we keep it
- Account and shipment records: while your account is active, and invoices and tax records for the period required by law.
- Driver identity documents: while the driver account is active, then deleted unless needed for a legal claim.
- NavDoot message content: 12 months by default, or as the merchant sets.
- NavDoot opt-in and opt-out records: as long as needed to prove consent and honour opt-outs.
8. Your rights
You can ask us to access, correct, update or erase your personal data, withdraw consent, or nominate someone to act for you. Withdrawing consent does not affect processing already done. If you are a customer of a NavDoot merchant, you may contact the merchant directly or write to us and we will pass your request to the merchant.
9. Data deletion
To delete your data:
- Email ops@rikshalogistics.in with the subject "Data deletion request".
- Include your name, the phone number linked to your data, and whether it concerns Riksha or NavDoot.
- We will confirm the request and complete it within 30 days, except records we must keep by law (such as tax invoices).
To stop NavDoot messages only, reply STOP to any message.
10. Security
We use access controls, encrypted connections, private storage for identity documents, and separation of each merchant's data. No system is completely secure; we will notify affected users and authorities of a personal data breach as required by law.
11. Children
Our services are for businesses and adults. We do not knowingly collect data from anyone under 18.
12. Grievance Officer
For questions or complaints about your data, contact our Grievance Officer:
Grievance Officer, RNR VENTURES
B054, AIPL The Peaceful Homes, Sector 70A, Gurgaon, Haryana 122101
Email: ops@rikshalogistics.in · Phone: +91 91679 17437
We aim to respond within 7 days and resolve within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
13. Changes
We will post any changes on this page with a new effective date, and notify active users of significant changes.