Privacy Policy

1. Who this applies to

This policy covers people who use this website: customers (who request or book trips), partners and drivers (who apply to drive or offer vehicles), and visitors. The business that operates TripMila: OWNER DECISION REQUIRED: legal name and registered address

2. What we collect

• Booking requests (customers, with or without an account): your name, mobile number, optional WhatsApp number and email, the pickup and drop places, date and time, number of passengers and luggage, optional passenger details you enter (such as names, age or a need for assistance), and any special requirements you type. We also keep the fare quote shown to you.
• Customer account: your email address and a password. The password is handled by our sign-in provider; TripMila staff cannot read it.
• Partners and drivers: your name, mobile number, city, languages and areas you serve, driving licence details, vehicle details, and the documents and photographs you upload. Uploaded documents are stored privately.
• Payment-related records: this website does not take card, UPI or bank details online and does not process online payments. Our team records the payments you make to us by an offline method (for example cash, UPI or bank transfer): the amount, the date, the method and a reference if one is given. Any refund is recorded the same way.
• Records of what staff do: when an administrator confirms, changes or cancels a booking, or changes prices or settings, the action is recorded with the administrator’s account and the time.

3. Why we use it

• To price your trip, check availability, and confirm or decline your request.
• To call or message you about your booking, send you a link to follow it, and help if something goes wrong.
• To assign a driver and vehicle, and to record payments and refunds.
• For partners and drivers: to decide whether to approve your application and to manage the trips you take.
• To keep the website secure, prevent misuse and meet legal obligations.

4. Who can see it

• TripMila staff who manage bookings and partner applications.
• The assigned driver and vehicle partner see what is needed to carry out your trip (for example pickup place, time and your name and contact number) once they have accepted the trip. Your contact details are not shown to a driver before that.
• Service providers that run the website for us: hosting, the database and sign-in service that store the data, and any email service used to send sign-in or booking messages. OWNER DECISION REQUIRED: name them and say where they operate
• Payment providers: none, because payments are recorded offline today. If online payments are added later this policy must be updated first.
• We may disclose information where the law or a lawful request requires it.

We do not sell personal information. OWNER DECISION REQUIRED: confirm this statement

5. Cookies, local storage, analytics and logs

• Sign-in cookie: when you sign in, we set one cookie that keeps you signed in (up to 30 days). It is needed for sign-in to work and cannot be read by scripts on the page.
• Browser storage: after you request a booking, your browser keeps a private access key for that booking so you can open it again. Partner sign-in details are kept for the tab session only.
• Fonts: this website loads its fonts from Google Fonts, so your browser contacts Google when a page loads.
• Analytics and advertising: this website does not use analytics, advertising or tracking cookies today.
• Technical logs: our systems and hosting provider keep technical logs (such as time, page requested and error details) to run and secure the service. Our own application logs are designed not to include phone numbers, email addresses, names, passwords or tokens. We also use your network address briefly to limit repeated requests. OWNER DECISION REQUIRED: confirm the hosting provider’s log retention

6. Keeping and deleting information

Booking, payment and refund records may need to be kept for accounting and legal reasons. The system does not delete records automatically today. OWNER DECISION REQUIRED: retention period for each kind of record, and the deletion process

7. Security

Access to staff screens requires a staff account, and what each person can do depends on their role, checked on our server. Partner documents are stored privately and opened only by administrators who review applications. Sign-in uses a secure provider. No system is perfectly secure, so we cannot guarantee absolute security.

8. Your choices and rights

You can ask us to show you the information we hold about you, correct it, or delete it where we are allowed to. You can also withdraw consent you gave us, where we rely on consent. Nothing in this policy limits any right you have under applicable law. OWNER DECISION REQUIRED: how to submit a request, response time, and the legal rights that must be listed

9. Children

This website is meant for adults to book trips. A parent or guardian should make a booking that includes a child. OWNER DECISION REQUIRED: confirm wording

10. Changes to this policy

When we change this policy we will update this page and its date. OWNER DECISION REQUIRED: effective date

11. Contact

Privacy contact and grievance officer: OWNER DECISION REQUIRED: name, email and postal address

Until then, you can reach TripMila support by phone at 9551462024 or through the Help page.

Open decisions before this page is final

• OWNER DECISION REQUIRED Legal name and registered address of the business that runs TripMila (not yet provided, so none is shown).
• OWNER DECISION REQUIRED Who answers privacy requests, and the email or phone for them. A grievance officer, if the law requires one for this business.
• OWNER DECISION REQUIRED How long bookings, quotes, partner applications and uploaded documents are kept, and how deletion requests are handled (no automatic deletion exists today).
• OWNER DECISION REQUIRED Whether analytics, advertising or marketing messages will ever be used (none are built today).
• OWNER DECISION REQUIRED Which hosting, database and email companies are named here, and where their servers are located.
• OWNER DECISION REQUIRED Which privacy and data-protection laws apply to the business and what they require (for example India's Digital Personal Data Protection Act, 2023). Legal review needed.
• OWNER DECISION REQUIRED Effective date (to be set when the policy is approved).