Oct 26, 2026 · @Snehal

1. Introduction and Scope

This Privacy Policy explains how Techwe Innovation Private Limited (“Company”, “we”, “us”, “our”) collects, uses, stores, shares and protects your personal data when you use TruckSathi, our mobile application and web platform (the “Platform”), available at trucksathi.com and on Android and iOS.

TruckSathi is a SaaS platform that helps truck owners, fleet operators and transporters manage truck-related ledgers (accounting), trips, expenses, documents and compliance on their phone or computer, and connects with Government and private third-party service providers through APIs.

This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 together with the rules made under it (“DPDP Act”).

By registering for, accessing or using the Platform, you confirm that you have read this Policy and consent to the processing of your personal data as described here. If you do not agree, please do not use the Platform.

• Effective date: [DD Month YYYY]
• Last updated: 26 October 2026
• Registered office: [Registered address of Techwe Innovation Private Limited, Surat, Gujarat, India]
• CIN: [CIN number]

2. Definitions

3. Information We Collect

We collect only the data needed to run the Platform. It falls into the groups below.

3.1 Information you provide

• Account details: name, mobile number, email address, business or firm name, address, city and state, profile photo, and login credentials or OTP verification.
• Business identity: GSTIN, PAN, and other business registration details you choose to add.
• Fleet details: truck registration numbers, make, model, chassis and engine details, permits, insurance, fitness, PUC and tax documents, and driver details such as name, mobile number and licence number.
• Ledger and trip data: party and customer names, freight and rent entries, payments received and paid, expenses (fuel, toll, repairs, driver salary and advances), trip routes, loads, LR and bilty details, invoices and balances.
• Financial information: bank account details, UPI IDs or payment references that you enter for ledger or payment purposes. We do not store full card numbers, CVV or net-banking passwords.
• Documents and files: images, PDFs and scans that you upload, such as RC, licence, challans and receipts.
• Support communication: messages, emails, call records and feedback you send us.

3.2 Information collected automatically

• Device data: device model, operating system, app version, unique device and advertising identifiers, language, and network type.
• Usage data: screens viewed, features used, timestamps, crash logs and performance data.
• Log data: IP address, browser type, and pages visited on the web platform.
• Location data: approximate or precise location, only if you enable trip tracking, GPS or location-based features and grant permission on your device. You can turn this off at any time in your device settings.

3.3 Information from Third-Party Providers

When you request a service on the Platform, we receive data from Government and private API providers. Examples are vehicle registration and ownership details, driving licence status, FASTag and toll transactions, e-challan and traffic violations, GST and PAN verification results, and payment status. We fetch this data only on your request or with your authorisation.

3.4 Data about other people

You may enter details of drivers, staff, customers and suppliers. You confirm that you have the right to share this data and, where required, have informed them or obtained their consent.

4. How We Use Your Data and Your Consent

We process your data only for specific, lawful purposes:

1. Provide the service: create and secure your account, maintain ledgers, record trips and expenses, generate reports, invoices and reminders, and sync data across your devices.
2. Fetch and verify records: retrieve vehicle, driver, FASTag, challan, GST and similar data from Third-Party Providers at your request.
3. Payments and billing: process subscriptions and payments through our payment partners and send receipts.
4. Communication: send OTPs, transaction alerts, document-expiry and compliance reminders, service updates, and support replies by SMS, WhatsApp, email, push notification or call.
5. Improve the Platform: analyse usage and crash data, fix bugs, develop features and personalise your experience.
6. Security and fraud prevention: detect misuse, unauthorised access and violations of our Terms of Use.
7. Legal compliance: meet obligations under applicable law and respond to lawful requests from courts, regulators and law enforcement.
8. Marketing: tell you about new features, offers and services. You can opt out at any time.

Consent

We process your personal data on the basis of your free, specific, informed and unambiguous consent, given when you accept this Policy, register, or grant a device permission. We also process data without consent where the DPDP Act permits, for example to comply with law or to respond to a medical emergency.

You may withdraw consent at any time through the Platform settings or by writing to us (Section 12). Withdrawal does not affect processing done before withdrawal. If you withdraw consent needed to run the service, we may not be able to continue providing it.

What we do not do

We do not sell your personal data or Business Data. We do not use your ledger or financial records for advertising to third parties.

5. Third-Party APIs and Data Sharing

We share personal data only as needed to deliver the service, with your consent, or as required by law.

Important points

• Third-party policies apply. Government and private providers act on their own terms and privacy policies once your data reaches them. We are not responsible for their practices, but we choose partners with care and bind our service providers by written agreements requiring confidentiality and security.
• Your instruction triggers the lookup. We call an external API for your data only when you request the service or authorise it.
• Within your business. Data you enter is visible to other users you add to your account (for example managers or drivers) according to the access you give them. You control these roles.
• Aggregated data. We may use anonymised or aggregated data that cannot identify you for analytics and research.

6. Data Retention, Security and Breach

6.1 Retention

We keep your personal data while your account is active and for as long as needed for the purposes in this Policy. After you delete your account or request erasure, we delete or anonymise your data within [30] days, except where we must keep it longer to meet legal, tax, accounting or audit obligations, resolve disputes, or enforce our agreements. Financial and transaction records may be kept for up to [8] years as required by applicable law. Backups are overwritten in the normal course within [90] days.

6.2 Security

We use reasonable security practices consistent with the SPDI Rules and ISO/IEC 27001-style standards, including:

• Encryption of data in transit (TLS) and encryption of sensitive data at rest.
• Role-based access controls and authentication, with access limited to staff who need it.
• Regular backups, monitoring, vulnerability testing and security updates.
• Confidentiality undertakings from employees and service providers.

No system is completely secure. You are responsible for keeping your login credentials and OTPs confidential, using a secure device, and logging out on shared devices. Please tell us immediately if you suspect unauthorised use of your account.

6.3 Data breach

If a personal data breach occurs, we will take steps to contain it and will notify the Data Protection Board of India and affected users in the manner and within the time required by the DPDP Act and applicable rules.

7. Your Rights

Under the DPDP Act and applicable law, you have the right to:

• Access: get a summary of the personal data we process and the parties we have shared it with.
• Correction and completion: correct inaccurate data and complete incomplete data.
• Erasure: ask us to delete your data when it is no longer needed or you withdraw consent, subject to legal retention duties.
• Withdraw consent: at any time, as easily as you gave it.
• Grievance redressal: raise a complaint with us and receive a response within the time set by law.
• Nominate: name another person to exercise your rights in the event of your death or incapacity.

To use these rights, write to us using the details in Section 12. We may verify your identity first and will respond within [30] days or the period required by law. If you are not satisfied with our response, you may approach the Data Protection Board of India.

8. Children

The Platform is for businesses and is not meant for anyone under 18 years of age. We do not knowingly collect personal data of children. If you believe a child has given us data, write to us and we will delete it.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to keep you logged in, remember preferences, measure traffic and improve performance. You can control or block cookies in your browser settings, though some features may stop working. The mobile app may use device identifiers and SDKs for analytics and crash reporting for the same purposes.

10. App Permissions

The mobile app may ask for the permissions below. Each is optional unless the feature needs it, and you can change them in your device settings at any time.

11. Storage and Transfer of Data

Your data is stored on servers located in India [confirm with your hosting provider]. If any service provider processes data outside India, we will do so only in line with the DPDP Act and any restrictions notified by the Central Government, and with safeguards at least as protective as this Policy.

12. Grievance Officer and Contact

In accordance with the Information Technology Act, 2000, the SPDI Rules and the DPDP Act, our Grievance Officer is:

• Name: [Name of Grievance Officer]
• Designation: [Designation]
• Company: Techwe Innovation Private Limited (TruckSathi)
• Address: [Registered office address]
• Email: [privacy@trucksathi.com]
• Phone: [Phone number], [Mon to Sat, 10:00 AM to 6:00 PM IST]

We will acknowledge your complaint within [48] hours and aim to resolve it within [15] days or the time required by law.

13. Changes to This Policy and Governing Law

We may update this Policy from time to time. We will post the updated version on the Platform with a new “Last updated” date and, for material changes, notify you by app notification, SMS or email. Continued use after the update means you accept the revised Policy.

This Policy is governed by the laws of India. Subject to applicable law, the courts at [Surat, Gujarat] have exclusive jurisdiction over any dispute arising from it.