Skip to main content

Privacy Policy

Last updated: January 2026

1. Information We Collect

GARI collects information you provide directly, including:

  • Account Information: Phone number, name, email, profile photo
  • Identity Verification: Aadhaar (masked), driving license, PAN (for owners)
  • Vehicle Information: Registration details, photos, insurance documents
  • Transaction Data: Booking history, payments, subscriptions
  • Location Data: GPS data during active trips (with consent)

2. How We Use Your Information

  • To verify your identity and maintain account security
  • To facilitate bookings between renters and owners
  • To process payments securely via Razorpay
  • To provide customer support via WhatsApp and email
  • To improve our services through analytics

3. Aadhaar Data Handling (UIDAI Compliance)

We comply fully with UIDAI regulations:

  • Only the last 4 digits of Aadhaar are stored
  • Full Aadhaar is used only for verification via authorized ASA (Digio)
  • Aadhaar data is never shared with third parties
  • You can request deletion of Aadhaar data anytime

4. Data Protection (DPDPA 2023)

Under the Digital Personal Data Protection Act 2023:

  • Right to Access: Request a copy of your personal data
  • Right to Correction: Update inaccurate information
  • Right to Erasure: Request deletion of your data
  • Right to Grievance Redressal: File complaints with our Data Protection Officer

5. Data Sharing

We share data only with:

  • Booking Partners: Owner sees renter's first name and phone (for pickup coordination)
  • Payment Processors: Razorpay for secure transactions
  • Verification Partners: Digio for Aadhaar/DL verification
  • Legal Requirements: When required by Indian law

6. Data Security

  • All data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Servers hosted in AWS Mumbai (ap-south-1)
  • Regular security audits and penetration testing
  • Employee access limited to need-to-know basis

7. Data Retention

  • Active accounts: Data retained while account is active
  • Deleted accounts: Data anonymized after 30 days
  • Legal records: Retained for 7 years as per Indian law

8. Contact Us

Data Protection Officer
Email: privacy@gari.app
Phone: +91 6000 000 000
Address: Guwahati, Assam, India