In short
- We collect only what we need to run your bookings safely: your name, phone number, trip details and, during a trip, your location.
- Captains see only your name. Your phone number is shared only if you choose to share it.
- We never sell your data. You can see, correct or delete it by writing to info@goloc.in.
1. Who we are
This policy explains how GoLoc handles personal data when you use goloc.in, the GoLoc traveler app or the GoLoc Captain app. GoLoc is operated by [Proprietor full name], sole proprietor, of [Registered business address]. GoLoc is the "Data Fiduciary" for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. What we collect
Everyone
- Account details: name, mobile number, and optionally email address, city and profile photo.
- Device and usage data: device type, operating system, app version, a notification token, IP address, and logs of what you do in the app (for example sign-ins and errors). We use these to keep the service secure and working.
- Messages and support: in-app chat messages, support tickets and SOS alerts.
Travelers
- Trip details: bookings, dates, number of guests, comfort tier, meeting points, notes and special requests, saved trips and saved Captains.
- Payments: payment status, amount and reference IDs. Our payment partner Razorpay processes the payment itself. We never receive your full card number, CVV or UPI PIN.
- Reviews you write.
Captains and Guides
- Verification (KYC) documents: government ID and, where relevant, driving licence, vehicle registration, insurance and permits. These are stored privately, and only authorised GoLoc staff can view them, through short-lived links.
- Payout details: bank account or UPI details, and tax details such as PAN and GSTIN where the law requires them.
- Profile and listings: bio, languages, services, prices, vehicles, itineraries, photos and reels.
Location
- We use your device's location only while a paid trip is in progress, for live tracking, trip sharing and SOS, and only if you allow location access. You can turn it off in your phone's settings, but live tracking and parts of SOS will stop working.
- We may use your approximate city to suggest trips near you.
3. Why we use it
| Purpose | Data used |
|---|---|
| Signing you in securely with OTP | Phone number, device data |
| Making, managing and paying for bookings | Account, trip and payment data |
| Verifying Captains before they can take bookings | KYC documents |
| Paying Captains and meeting tax rules | Payout and tax details |
| Live tracking, trip sharing and SOS | Location, booking, contacts you choose |
| Chat, notifications and support | Messages, notification token |
| Drafting itineraries and text with AI tools | Trip details you or your Captain enter |
| Preventing fraud and abuse, and keeping GoLoc secure | Usage logs, IP address, device data |
| Following the law and responding to lawful requests | Whatever the law requires |
We process your data with your consent, which you give when you sign up and when you allow app permissions, and for the "legitimate uses" the DPDP Act permits, such as complying with law and responding to medical emergencies. We don't use your data for automated decisions that significantly affect you, and we never sell your personal data.
4. Who we share it with
- Between Travelers and Captains: a Captain sees a Traveler's name and the booking details. A Traveler's phone number is shown to the Captain only if the Traveler chooses to share it on a paid booking, and the Traveler can hide it again at any time. Travelers see the Captain's public profile.
- Service providers who work for us, under contract and only to provide their service:
- Razorpay (payments and payouts)
- Twilio (OTP text messages)
- Cloudflare (website and file storage)
- Our cloud hosting provider (servers and database)
- Expo (push notifications)
- Groq (AI text generation; we send trip details, not your phone number)
- OpenStreetMap map servers (map images)
- Google Workspace (our email)
- Our insurance partner, where a trip cover fee is charged, to issue and service the cover.
- Emergency services and people you choose, if you raise an SOS or share a trip.
- Authorities, when Indian law requires it or to protect someone's life or safety.
- A buyer or successor, if GoLoc's business is transferred. Your data would remain protected by this policy.
Some of these providers may store or process data outside India. We use only providers with appropriate safeguards and will follow any restrictions the Government of India notifies under the DPDP Act.
5. How long we keep it
- Account data: while your account is open. After you delete your account, we delete or anonymise your data within 30 days, except what we must keep as described below.
- Bookings, payments and invoices: for 8 years, as required by tax and accounting laws.
- Live trip location: for 90 days after the trip ends, or longer if there's an open SOS, complaint or legal claim about that trip.
- Captain KYC documents: while the Captain account is active and for up to 1 year after it closes, for safety and legal claims.
- Security logs: for up to 180 days, or longer where the law requires.
6. How we protect it
We use encryption in transit (HTTPS), access controls, private storage for identity documents, short-lived links, rate limits on sign-in, and staff access only on a need-to-know basis. No system is perfectly secure. If a personal data breach affects you, we'll tell you and the Data Protection Board of India as the law requires.
7. Your rights and choices
Under the DPDP Act you can:
- Access: ask for a summary of the personal data we hold about you and who we've shared it with.
- Correct and update: fix inaccurate or incomplete data. Much of it you can edit yourself in the app.
- Erase: ask us to delete your account and data, subject to what the law requires us to keep.
- Withdraw consent: at any time. This won't affect processing that already happened, but some features may stop working.
- Nominate someone to exercise your rights if you die or become unable to.
- Raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied.
To delete your account or use any of these rights, email info@goloc.in from your registered email address, or include your registered mobile number. We'll confirm it's you and respond within 30 days. Open bookings must be completed or cancelled first.
You can turn off notifications and location access at any time in your phone's settings.
8. Children
GoLoc is for adults. We don't knowingly create accounts for, or collect data directly from, anyone under 18. Children may travel only as part of a booking by a parent or guardian. If you believe a child has created an account, contact us and we'll delete it.
9. Website cookies
goloc.in doesn't use advertising or tracking cookies. Our hosting provider may set strictly necessary security cookies. If you send us a message through the website form, it is delivered to our inbox through the FormSubmit email service.
10. Changes to this policy
We'll update this page when our practices change and show the new date at the top. For important changes, we'll tell you in the app or by SMS or email, and ask for fresh consent where the law requires it.
11. Contact and grievance officer
For privacy questions, requests or complaints, contact:
Grievance Officer: [Proprietor full name], Proprietor, GoLoc
Email: info@goloc.in (subject: "Grievance")
Phone: +91 99667 58389, Monday to Saturday, 10 am to 6 pm IST
Address: [Registered business address]