Privacy Policy of YeloCab

YeloCab Private Limited (“YeloCab”, “Company”, “we”, “us”, or “our”) operates and manages a Technology-enabled Mobility Platform through the YeloCab mobile application, YeloCab Driver App, website, and related digital systems (collectively, the “Platform”).

This Privacy Policy describes how YeloCab collects, receives, stores, processes, uses, shares, transfers, discloses, retains, and protects personal data and other information of Passengers, Driver Partners, Vehicle Owners, Users, and visitors accessing or using the Platform.

User Acceptance

By accessing, registering on, onboarding with, or using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy and consent to the collection and processing of your information in accordance with this Privacy Policy and applicable laws.

If you do not agree with this Privacy Policy, you should not access or use the Platform.

1. Definitions

“Applicable Laws” means all applicable laws, rules, regulations, notifications, circulars, and governmental directions including the Information Technology Act, 2000, Digital Personal Data Protection Act, 2023, Motor Vehicles Act, 1988, and Uttar Pradesh Motor Vehicle (Aggregator and Delivery Service Provider) Rules, 2026.

“YeloCab Driver” means an independent driver, vehicle owner, or operator onboarded on the Technology-enabled Mobility Platform for providing ride services to Passengers.

“Passenger” means any person using the Technology-enabled Mobility Platform to seek or avail ride services from a YeloCab Driver.

“Personal Data” means any data about an identifiable individual.

“Platform” means the YeloCab App, YeloCab Driver App, website, backend systems, software systems, APIs, communication systems, and related digital infrastructure.

“Services” means technology-enabled ride facilitation, mobility, transportation aggregation, payment facilitation, communication, safety, support, and related services provided through the Platform.

“Aggregator” means YeloCab Private Limited, a company incorporated under the Companies Act, 2013, which has applied for / is seeking licence or authorization under the Uttar Pradesh Motor Vehicle (Aggregator and Delivery Service Provider) Rules, 2026, for operating and maintaining a technology-enabled digital platform under the brand name “YeloCab” for facilitating transportation, mobility, and delivery-related services in accordance with applicable laws.

“User” means any person accessing or using the Platform.

“Device” shall mean computer, mobile or other device used to access the Services.

“Device Identifier” shall mean IP address or another unique identifier of the Device.

“Promotion” shall mean any contest and other promotions offered by us.

“Sensitive Personal Data” shall include such categories of sensitive information as may be classified under applicable laws, including government-issued identity documents, biometric information where lawfully collected, financial information, precise location information, police verification records, and such other information requiring enhanced protection under applicable laws.

“Personal Information” shall mean such categories of information that could reasonably be used to identify you personally, including your name, e-mail address, and mobile number.

2. Nature of Platform Services

2.1 YeloCab operates solely as a Technology-enabled Mobility Platform facilitating connections between Passengers and independent Driver Partners.

2.2 YeloCab does not itself provide transportation services or employ drivers for providing transportation services unless specifically stated otherwise.

2.3 Ride services are independently provided by Driver Partners and Vehicle Owners onboarded on the Platform.

2.4 YeloCab acts as an intermediary technology platform for booking management, communication, payment facilitation, safety support, and related platform services.

3. Information We Collect

YeloCab may collect, receive, process, store, or generate the following categories of information:

3.1 Personal Information

• Full name
• Mobile number
• Email address
• Residential or business address
• Date of birth
• Profile photograph
• Emergency contact information
• Gender information where voluntarily provided

3.2 Identity and KYC Information

• Aadhaar details (where lawfully permitted)
• PAN details
• Driving licence
• Voter ID
• Passport
• Police verification records
• Background verification records
• Other KYC documents required under applicable laws

3.3 Vehicle-Related Information

• Vehicle registration certificate
• Permit details
• Insurance documents
• Fitness certificate
• Pollution certificate
• Vehicle photographs
• AIS-140 compliance details
• GPS and tracking device details

3.4 Ride and Transaction Information

• Trip details
• Pickup and drop locations
• Ride routes
• Timestamps
• Ride duration
• Fare details
• Payment details
• Cancellation information
• Complaint records
• Customer support records

3.5 Device and Technical Information

• IP address
• Device ID
• Operating system
• Browser information
• App version
• Crash reports
• Network information
• Cookies and analytics information
• Camera permissions
• Microphone permissions
• Storage access permissions
• Bluetooth or nearby device permissions where required for safety or operational features

3.6 GPS and Location Information

YeloCab may collect precise or approximate real-time GPS location information before, during, and after rides for:

• Ride allocation
• Route navigation
• Safety monitoring
• Emergency assistance
• Fraud prevention
• Operational analytics
• Compliance with AIS-140 and applicable laws

3.7 Communication Information

YeloCab may record, monitor, or store communications including calls, chats, WhatsApp messages, emails, support interactions, and emergency communications, for safety, quality, training, fraud prevention, and compliance purposes.

4. Sources of Information

We may collect information:

• Directly from Users
• During onboarding or registration
• Through use of the Platform
• From government databases
• From law enforcement authorities
• From payment gateways
• From third-party verification agencies
• From analytics providers
• From cookies and tracking technologies
• From publicly available sources

5. Purpose of Collection and Use

YeloCab may collect and use information for the following purposes:

• Onboarding and registration
• Identity verification and KYC
• Police verification and background checks
• Ride allocation and operational management
• GPS tracking and navigation
• Payment processing and settlement
• Fraud prevention and platform security
• Customer support and grievance handling
• Safety monitoring and emergency response
• Legal and regulatory compliance
• Dispute resolution
• Analytics, research, and service improvement
• Marketing and promotional communications
• Audit and compliance requirements
• Enforcement of agreements and platform policies

For the purposes of applicable data protection laws including the Digital Personal Data Protection Act, 2023, YeloCab shall act as a Data Fiduciary in relation to personal data processed through the Platform and shall process such personal data in accordance with applicable laws, lawful purposes, consent obligations, and reasonable security safeguards.

6. Automated Processing and Platform Operations

YeloCab may use automated systems, algorithms, analytics tools, fraud detection mechanisms, GPS intelligence systems, behavioural analysis systems, dynamic allocation systems, and technology-assisted operational processes for ride allocation, fraud prevention, pricing assistance, safety monitoring, compliance review, customer support prioritization, and Platform operations in accordance with applicable laws.

YeloCab may suspend, restrict, investigate, flag, or deactivate accounts involved in suspected fraud, fake bookings, identity manipulation, document forgery, unauthorized account usage, payment abuse, platform misuse, or suspicious activities in accordance with applicable laws and Platform policies.

7. Legal Basis and Consent

7.1 By accessing or using the Platform, Users expressly consent to the collection, processing, storage, disclosure, sharing, and use of their information in accordance with this Privacy Policy and applicable laws.

7.2 Consent obtained through OTP verification, click-wrap acceptance, Aadhaar-based authentication, electronic signatures, digital onboarding, or electronic acknowledgements shall constitute valid consent under applicable laws.

7.3 YeloCab may process information:

• Based on consent
• For compliance with legal obligations
• For performance of contractual obligations
• For fraud prevention and safety
• For legitimate operational and business purposes permitted under law

8. Driver Verification and Background Checks

Driver Partners expressly consent to:

• Police verification
• Background verification
• Criminal record verification
• Driving licence verification
• KYC verification
• Periodic re-verification
• Document renewal checks

YeloCab may engage authorized third-party agencies for conducting such verification processes.

9. GPS Tracking, Safety, and AIS-140 Compliance

9.1 Users consent to real-time GPS tracking, route monitoring, trip recording, emergency response monitoring, and AIS-140 compliance systems.

9.2 YeloCab may maintain emergency assistance systems, panic button integrations, control room systems, and law enforcement coordination mechanisms.

9.3 Ride details and location data may be monitored for safety, compliance, fraud prevention, operational, and regulatory purposes.

9.4 YeloCab may monitor rides, trip patterns, cancellations, route deviations, suspicious activities, account activities, device identifiers, behavioural patterns, and operational metrics for safety, fraud prevention, platform security, regulatory compliance, investigation, dispute resolution, and lawful business purposes in accordance with applicable laws.

10. Data Sharing and Disclosure

YeloCab may share information with:

• Government Authorities
• Transport Authorities
• Police Authorities
• Courts and Tribunals
• Regulatory Bodies
• Payment Gateway Providers
• Insurance Companies
• Technology Service Providers
• Cloud Hosting Providers
• Verification Agencies
• Analytics Providers
• Emergency Response Agencies
• Legal Advisors and Auditors

where required for: legal compliance; safety; fraud prevention; investigations; operational support; dispute resolution; lawful business purposes.

YeloCab may preserve, monitor, intercept, disclose, or share information, records, communication logs, GPS data, transaction details, or other information where required under applicable laws, lawful interception requirements, judicial orders, governmental directions, law enforcement requests, national security obligations, or regulatory compliance requirements.

11. Data Retention

YeloCab may retain trip records, GPS logs, communication records, transaction records, KYC documents, complaints, safety incident records, verification records, and related information for such duration as may be required under applicable laws, regulatory requirements, audit obligations, fraud prevention policies, dispute resolution, investigations, or lawful business purposes.

Upon expiry of applicable retention periods and subject to legal, regulatory, audit, fraud prevention, dispute resolution, or enforcement requirements, YeloCab may delete, anonymize, archive, or securely destroy information in accordance with applicable laws and internal retention policies.

12. Cross-Border Data Transfer

YeloCab may store, process, transfer, or access personal data outside India through cloud infrastructure, technology service providers, affiliates, or partners, subject to applicable laws, security safeguards, contractual protections, and governmental restrictions applicable from time to time.

13. Data Security

13.1 YeloCab implements reasonable technical, organizational, administrative, and security measures to protect information against unauthorized access, misuse, alteration, disclosure, destruction, or loss.

13.2 Such measures may include:

• Encryption
• Access controls
• Firewall protections
• Authentication systems
• Monitoring systems
• Secure cloud infrastructure

13.3 While YeloCab implements reasonable security safeguards, no electronic platform, storage system, transmission mechanism, or internet-based service can be guaranteed to be completely secure. Accordingly, YeloCab does not guarantee absolute or foolproof security of any information.

13.4 Users shall be responsible for maintaining confidentiality of their login credentials, OTPs, passwords, devices, and account access information. YeloCab shall not be responsible for unauthorized access resulting from User negligence, credential sharing, device compromise, phishing, malware, or misuse not attributable to YeloCab.

14. Data Breach and Security Incident Response

In the event of any actual or suspected data breach, cybersecurity incident, unauthorized access, or compromise affecting personal data, YeloCab may take such preventive, corrective, investigative, containment, mitigation, reporting, notification, or compliance measures as may be required under applicable laws, internal policies, or directions of competent authorities.

15. User Rights

Subject to applicable laws, Users may have the right to:

• Access their information
• Request correction of inaccurate information
• Update account details
• Withdraw consent where legally permissible
• Request grievance redressal
• Request deletion of information subject to legal retention obligations
• Nominate another person to exercise rights in the event of death or incapacity, where applicable under law
• Seek details regarding processing activities to the extent required under applicable laws
• File complaints with the Data Protection Board of India or other competent authority where permitted under applicable laws

Requests may be submitted through the support channels provided on the Platform.

Withdrawal of consent may affect YeloCab’s ability to provide certain Platform services, onboarding facilities, ride allocation functionalities, safety features, payment services, or continued access to the Platform where such processing is necessary for service delivery, safety, fraud prevention, or legal compliance.

Requests for deletion or erasure of information shall remain subject to applicable legal retention obligations, ongoing investigations, fraud prevention requirements, regulatory compliance obligations, dispute resolution requirements, audit requirements, enforcement rights, and lawful business purposes.

16. Cookies and Analytics

16.1 YeloCab may use cookies, SDKs, pixels, analytics tools, and related technologies for:

• Authentication
• Analytics
• Fraud prevention
• Personalization
• Performance monitoring
• Advertising and marketing

16.2 Users may modify browser settings to restrict cookies; however, certain Platform functionalities may be affected.

Users may opt out of promotional communications, marketing messages, or non-essential notifications through account settings, unsubscribe mechanisms, or support channels, subject to operational, transactional, safety, or legal communications that may continue to be sent where necessary.

17. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, payment gateways, or services. YeloCab is not responsible for the privacy practices, policies, or content of such third parties.

Users are advised to review the privacy policies of such third parties independently.

18. Children’s Privacy

The Platform is not intended for persons below eighteen (18) years of age. YeloCab does not knowingly collect personal data from minors without lawful authorization.

19. Electronic Records and Digital Acceptance

The Parties acknowledge and agree that this Privacy Policy, onboarding forms, declarations, consents, OTP verifications, electronic signatures, click-wrap acceptances, Aadhaar-based authentication, digital acknowledgements, and records generated through the Platform or Driver App shall constitute valid and legally enforceable electronic records and contracts under the Information Technology Act, 2000 and applicable laws.

Such electronic records shall be admissible as evidence and enforceable to the fullest extent permitted under law.

20. Amendments

YeloCab reserves the right to modify, update, revise, or amend this Privacy Policy from time to time.

Any revised version shall become effective upon publication on the Platform unless otherwise specified.

Continued use of the Platform after such update shall constitute acceptance of the revised Privacy Policy.

21. Grievance Redressal

YeloCab shall appoint a Grievance Officer and/or Compliance Officer in accordance with applicable laws.

Any grievance, complaint, concern, or request relating to privacy, data protection, or information handling may be submitted through the contact details published on the Platform.

YeloCab shall make reasonable efforts to address grievances in accordance with applicable laws and internal policies.

22. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Subject to applicable arbitration provisions and applicable laws, courts at Lucknow, Uttar Pradesh shall have jurisdiction over matters arising out of this Privacy Policy.

YeloCab shall process personal data in accordance with applicable data protection and privacy laws in force in India, including the Digital Personal Data Protection Act, 2023.

23. Contact Details

For privacy-related queries, grievances, or requests, Users may contact:

YeloCab Private Limited
Email: info@yelocab.in

24. Acceptance

By accessing, registering on, onboarding with, or using the Platform, the User acknowledges that he/she has read, understood, and agreed to this Privacy Policy.