Privacy Policy

Last updated: April 2026 | Effective: April 2026

1. Introduction

RawDrive ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at rawdrive.in. This policy complies with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and the General Data Protection Regulation (GDPR) of the European Union.

2. Information We Collect

We collect information you provide directly: name, email address, phone number, business details, payment information, and photographs uploaded to our platform. We also collect usage data automatically: IP address, device type, browser information, pages visited, and interaction patterns through cookies and similar technologies.

3. How We Use Your Information

We use your information to: provide and maintain our services, process transactions and payments, send service-related communications, improve our platform and user experience, provide customer support, comply with legal obligations, and detect and prevent fraud or abuse.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on: consent (for marketing communications), contractual necessity (to provide our services), legitimate interests (to improve our platform), and legal obligations (tax and regulatory compliance). You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Purpose Limitation (DPDPA)

Under the DPDPA, we process your digital personal data only for the specific purposes stated in this policy. We will not process your data for purposes beyond what is necessary to provide our services unless we obtain your explicit consent.

6. Data Storage and Security

All data is stored in Indian data centers (Mumbai region) using encrypted storage. We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and access controls. We retain your data for as long as your account is active or as needed to provide services.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share data with: payment processors (Razorpay) to process transactions, cloud infrastructure providers for hosting, analytics services (anonymized data only), and law enforcement when required by Indian law. All third-party processors are bound by data processing agreements.

8. Your Rights (DPDPA)

Under the DPDPA, you have the right to: access your personal data, correct inaccurate data, erase your data (right to be forgotten), withdraw consent, and file grievances with our Data Protection Officer. To exercise these rights, contact our DPO at privacy@rawdrive.in.

9. Your Rights (GDPR)

Under the GDPR, you additionally have the right to: data portability, restrict processing, object to processing, and lodge complaints with a supervisory authority. We will respond to all rights requests within 30 days.

10. Cookies and Tracking

We use essential cookies for platform functionality and optional analytics cookies to improve our services. You can manage cookie preferences through your browser settings. Essential cookies cannot be disabled as they are necessary for the platform to function.

11. Children's Privacy

RawDrive is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately at privacy@rawdrive.in.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy. Last updated: April 2026.

Data Protection Officer

For any privacy-related inquiries, contact our DPO at privacy@rawdrive.in