Privacy Policy
01Who we are
Olyezy is an outstation and intercity cab booking service operated by Olyezy Mobility Solutions Pvt. Ltd., a company incorporated in India and operating primarily from Chennai, Tamil Nadu.
For the purposes of the Digital Personal Data Protection Act, 2023 (the DPDP Act), Olyezy Mobility Solutions Pvt. Ltd. is the Data Fiduciary responsible for the personal data described in this policy. You are the Data Principal.
CIN: CIN · GSTIN: GSTIN
Email: connect@olyezy.com
Phone: +91 99006 10570
WhatsApp: +91 99006 10570
02Scope of this policy
This policy applies to:
- the Olyezy Android application published on Google Play (package ANDROID_PACKAGE_NAME);
- the Olyezy website at https://olyezy.com, including the booking form; and
- bookings, enquiries and support conversations you have with us over phone, WhatsApp or email.
It does not apply to the independent practices of drivers, vehicle operators or any third-party service you reach through a link in our app. Where we name a third party below, their own privacy policy governs what they do with your data once it reaches them.
03Information we collect
We collect only what a cab booking actually requires. The table below lists every category of personal data we handle, and matches the declarations we make on our Google Play Data Safety form.
| Category | What it includes | How we get it |
|---|---|---|
| Identity and contact | Your name, mobile number, and email address if you give one | You enter it when you sign up or book |
| Account credentials | Your mobile number and the one-time password (OTP) used to verify it. We never store the OTP after verification, and we do not use passwords. | You enter it at login |
| Trip information | Pickup and drop addresses, stops, pickup and return date and time, trip type, vehicle chosen, and travel preferences you tick (for example travelling with elders, a patient, women-only travel, or extra luggage) | You enter it when booking |
| Location | Precise or approximate device location, and location recorded during an active trip. See section 4. | Your device, with your permission |
| Payment information | Booking amount, payment status, payment reference and refund records. We never receive or store your full card number, CVV, UPI PIN or net-banking credentials — those go directly to our payment gateway. | Our payment gateway reports it back to us |
| Camera, photos and contacts | A photo or document only if you choose to upload one, and a contact only if you use the contact picker to book on someone else’s behalf. We read only the entry you select, never your whole address book or gallery. | You choose and select it |
| Device and technical data | Device model, operating system version, app version, language, time zone, IP address, app install identifier and push notification token | Collected automatically by the app |
| Diagnostics and usage | Crash reports, error logs, and aggregate in-app events such as screens opened and bookings started | Collected automatically by our analytics SDKs |
| Support communications | Messages, call records and feedback you send us, including WhatsApp conversations | You send it to us |
04Location data, including background location
Location is the most sensitive data our app handles, so we describe it separately and in full.
Location while you are using the app
With your permission, the app reads your device location to detect your pickup point, show nearby landmarks, and estimate distance and fare. You can decline this permission and type your pickup address manually instead — the app remains fully usable.
Location while the app is closed or not in use
For a confirmed, active trip, and only if you grant the separate background location permission, the app collects location while the app is in the background. We use this for one purpose: to show live trip progress, share your trip status with the people you choose, and let our support team locate you if something goes wrong on an outstation route.
- It starts only when a trip is confirmed and stops automatically when the trip ends, is cancelled, or you turn it off.
- We do not track you between trips, and we do not collect location when you have no active booking.
- We do not sell location data, share it with data brokers, or use it for advertising or profiling of any kind.
Before the app asks Android for background location, it shows you a disclosure screen explaining this use, and the permission is entirely optional. You can withdraw it at any time in Android Settings → Apps → Olyezy → Permissions → Location, and the app will continue to work for booking and travelling, without live trip tracking.
05Device permissions the app requests
Every permission is requested in context, with an explanation, at the moment it is first needed. Declining any of them leaves the core booking flow working.
| Permission | Why the app asks | If you decline |
|---|---|---|
| Location (precise, while in use) | Detect your pickup point and estimate fare | Type your pickup address manually |
| Location (background) | Live trip progress during a confirmed trip | Everything works; live tracking is off |
| Notifications | Booking confirmation, driver details, trip and payment updates | You get updates by SMS, call or WhatsApp instead |
| Camera | Take a photo to attach to a support request | Attach an existing file, or send nothing |
| Photos and media | Attach an existing image to a support request | No effect on booking |
| Contacts | Pick a phone number when booking for someone else | Type the number manually |
06How and why we use your data
Under the DPDP Act we must tell you the purpose of every use, and process your data only for that purpose. The legal basis is either your consent, which you give when you sign up or grant a permission, or a legitimate use permitted by the Act, such as performing the service you asked for or meeting a legal obligation.
| Purpose | Data used | Basis |
|---|---|---|
| Creating and securing your account | Mobile number, OTP, device identifiers | Consent / performance of service |
| Taking, confirming and fulfilling a booking, and passing trip details to your driver | Name, phone, trip details, location, preferences | Performance of service |
| Calculating distance, route and fare estimates | Pickup and drop addresses, location | Performance of service |
| Collecting payment and issuing refunds | Name, phone, email, booking and payment reference | Performance of service / legal obligation |
| Sending booking, driver and trip notifications | Phone number, push token, trip status | Performance of service |
| Live trip progress and safety support | Background location during an active trip | Consent (separately granted, withdrawable) |
| Customer support and complaint resolution | Contact details, booking history, your messages | Performance of service / legal obligation |
| Keeping the app stable and diagnosing crashes | Device data, crash logs, aggregate usage events | Legitimate use |
| Preventing fraud, misuse and fake bookings | Device identifiers, phone number, booking patterns | Legitimate use |
| Tax, accounting and statutory record-keeping | Invoices, trip and payment records | Legal obligation |
| Offers and promotional messages | Name, phone number, email | Consent — optional, and you may opt out at any time |
08Cookies, SDKs and advertising identifiers
Our website uses strictly necessary cookies to keep your session and booking form working, and analytics cookies to understand which routes and pages people use. You can clear or block cookies in your browser; strictly necessary ones cannot be turned off without breaking the site.
The Android app does not use cookies, but the SDKs listed in section 7 use device and app identifiers to distinguish one installation from another. We do not use the Android Advertising ID for advertising or cross-app tracking. You can reset or delete the advertising identifier at any time in Android Settings → Privacy → Ads.
09How long we keep your data
We keep personal data only as long as the purpose requires, or as long as the law demands — whichever is longer. When a purpose ends and no legal obligation applies, we delete or irreversibly anonymise the data.
| Data | Retention period |
|---|---|
| Account profile (name, phone, email, saved addresses) | Until you delete your account |
| Trip and booking records, invoices, payment and refund records | 8 years from the end of the relevant financial year, as required by the Companies Act, 2013 and GST law — retained even after account deletion, then permanently deleted |
| Location collected during a trip | 90 days after the trip ends, then deleted or anonymised |
| Push notification tokens | Until you uninstall the app or disable notifications |
| Crash and diagnostic logs | Up to 180 days, per our analytics provider’s retention settings |
| Support conversations and complaint records | 3 years from resolution |
| Marketing consent and opt-out records | Retained as long as needed to honour your choice |
| Encrypted backups | Deleted data may persist in backups for up to 90 days before those backups roll off |
10How we protect your data
We apply reasonable security safeguards appropriate to the sensitivity of the data, including encryption in transit using HTTPS/TLS, encryption at rest for our databases, access controls that limit staff access to those who need it for their role, OTP-based authentication rather than stored passwords, and logging of administrative access.
No system is perfectly secure, and we do not claim otherwise. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by the DPDP Act and applicable CERT-In directions, and tell you plainly what happened and what to do about it.
Please help us: keep your OTP to yourself. Our staff and our drivers will never ask you for your OTP, and you should never share it with anyone who does.
11Your rights under the DPDP Act, 2023
As a Data Principal, you have the following rights. Exercising them is free.
- Right to access — obtain a summary of the personal data we hold about you, how we process it, and who we have shared it with.
- Right to correction and completion — have inaccurate or incomplete data corrected or completed. Most of it you can edit yourself in the app.
- Right to erasure — have your personal data deleted where we no longer need it for the purpose it was collected and no law requires us to keep it.
- Right to withdraw consent — withdraw any consent you gave, as easily as you gave it. Withdrawal applies going forward and does not undo processing already carried out lawfully.
- Right to grievance redressal — complain to our Grievance Officer and receive a response, before escalating anywhere else.
- Right to nominate — nominate another person to exercise these rights on your behalf if you die or become incapacitated.
To exercise any right, email connect@olyezy.com from your registered contact, or write to our Grievance Officer in section 16. We will verify that the request is genuinely yours before acting on it, and respond within the timelines set out in the DPDP Act. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
12Deleting your account and data
You can delete your Olyezy account and the personal data attached to it at any time, from inside the app or from our website — you do not need to install the app to ask for deletion.
On the web: https://olyezy.com/delete-account.
Our Account & Data Deletion Policy sets out exactly what is deleted, what we are legally required to retain and for how long, and how long the process takes.
13Children
Olyezy is not directed at children. You must be at least 18 years old to create an account or make a booking. We do not knowingly collect personal data from anyone under 18, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children, which the DPDP Act prohibits.
A child may of course travel in a booked vehicle, accompanied by an adult. In that case we collect no data about the child beyond what the booking adult chooses to tell us. If you believe a child has given us personal data, write to us and we will delete it promptly.
14Transfers outside India
We store personal data in Indiawherever we can. Some of the service providers in section 7 — notably Google’s analytics and messaging infrastructure, and the Telegram channel our dispatch team uses — process data on servers outside India.
Where data is transferred outside India, we do so in line with section 16 of the DPDP Act and only to countries not restricted by the Central Government, under contracts that require the recipient to protect the data to the standard described in this policy.
15Changes to this policy
We update this policy when our practices, our app or the law changes. The effective date at the top always reflects the current version. If a change materially affects how we use your data or the rights you have, we will give you clear advance notice in the app, by email or by SMS, and where the law requires it we will ask for your consent again.
Continuing to use Olyezy after a change takes effect means you accept the updated policy.
16Contact and grievance redressal
For any question about this policy or about your personal data, contact us first — most issues are resolved quickly:
CIN: CIN · GSTIN: GSTIN
Email: connect@olyezy.com
Phone: +91 99006 10570
WhatsApp: +91 99006 10570
Grievance Officer
If you are not satisfied, or you wish to make a formal complaint about how we handle your personal data, you may contact our Grievance Officer, appointed under the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines) Rules:
Email: GRIEVANCE_OFFICER_EMAIL
Phone: GRIEVANCE_OFFICER_PHONE
Address: GRIEVANCE_OFFICER_ADDRESS
If your complaint remains unresolved, you have the right to escalate it to the Data Protection Board of India.
Olyezy