Last Updated: July 2026

Introduction

This Privacy Policy explains how OwnTrip OPC Pvt. Ltd. (CIN: U72900BR2021OPC054083), a company registered under the Companies Act, 2013 with its registered office at Sahorachak, Jehanabad, Bihar – 804427, India, collects, stores, processes, and protects your personal information. This policy has been drafted in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act). By accessing our website, services, or providing us with your information, you agree to the practices described in this policy.

What Information We Collect

We collect various types of information to provide and improve our services. This includes personal information that you voluntarily provide to us when you register for an account, fill out forms, make a purchase, or contact us. Such information includes your name, email address, phone number, billing address, and payment details. When you use our services like CMS, HRM, ERP, CRM systems, GPS tracking, or e-commerce platforms, we may also collect business-related data that you or your employees enter into these systems.

In addition, we automatically collect certain technical information when you visit our website or use our applications. This includes your IP address, browser type and version, operating system, device type, screen resolution, and browsing behavior such as pages viewed, time spent, and click patterns. For users of our GPS tracking services, we collect real-time location data of vehicles with your explicit consent. We also use cookies and similar tracking technologies to enhance your experience and analyze website traffic.

How We Use Your Information

We use the information we collect for several purposes. Primarily, we process your data to deliver the services you have requested, whether that is building a website, activating a hosting plan, setting up a CRM system, or enabling GPS tracking for your fleet. We also use your data to process payments, send invoices, manage your account, and provide customer support. Your contact information may be used to send you service updates, technical notices, security alerts, and administrative messages that are essential for the proper functioning of our services.

With your explicit consent, we may send you promotional communications about new features, special offers, or industry insights. You have the full right to opt out of such communications at any time by clicking the unsubscribe link in our emails or by contacting us directly. We also use aggregated, anonymized data for analytics purposes to understand how our services are used and to make improvements. Where required by law, we may process your data to comply with legal obligations, court orders, or government regulations.

Our Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following legal bases: when it is necessary for the performance of a contract with you (such as delivering the service you purchased), when we have a legal obligation to comply with (such as retaining financial records under the Income Tax Act), when we have a legitimate interest (such as improving our services and ensuring their security), and when you have given your explicit consent (such as for marketing communications). We respect your right to withdraw consent at any time, though please understand that withdrawal may affect our ability to provide certain services to you.

If you are a minor (below 18 years of age), we require that your parent or lawful guardian provides consent on your behalf before you use our services. This is in accordance with Section 9 of the DPDP Act, 2023.

Data Sharing and Disclosure

We take your privacy seriously and do not sell, rent, or trade your personal data to third parties. However, there are certain circumstances where we may need to share your information. We engage trusted third-party service providers who assist us in operating our business, such as payment gateway partners (Razorpay), cloud hosting providers, analytics services (Google Analytics), and authentication services (Firebase). These partners are contractually bound to protect your data and may only use it for the specific purposes we have authorized.

We may also disclose your information when required by law, such as in response to a court order, government regulation, or legal process. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, and we will notify you of such a change. If we share your data across borders, we will ensure compliance with Section 16 of the DPDP Act, 2023, which governs cross-border data transfers, and we will take appropriate safeguards to protect your information.

How Long We Keep Your Data

We retain your personal data only for as long as it is necessary to fulfill the purposes for which it was collected or as required by applicable Indian laws. Account information is retained until you delete your account or after a period of three years of inactivity. Financial records, including payment and transaction data, are retained for eight years as mandated by the Income Tax Act, 1961. Usage analytics data is retained for a period of 26 months. Communications and support correspondence are kept for three years from the last interaction. GPS tracking data is retained according to the specific terms agreed with fleet management clients. Once the retention period expires, we securely delete or anonymize your data so that it can no longer be associated with you.

How We Protect Your Data

We have implemented comprehensive security measures to protect your personal data in compliance with the IT (Reasonable Security Practices and Procedures) Rules, 2011. All data transmitted between your device and our servers is encrypted using SSL/TLS (HTTPS) protocol, ensuring that your information remains private during transmission. Sensitive data stored on our servers is encrypted using AES-256 encryption, which is the industry standard for data at rest.

Access to personal data within our organization is strictly controlled through role-based access controls, and all administrative accounts are protected with multi-factor authentication. We maintain a web application firewall, intrusion detection systems, and conduct 24x7 security monitoring to detect and prevent unauthorized access. Our systems undergo regular security audits, vulnerability assessments, and penetration testing to identify and address potential weaknesses. Additionally, all our employees receive regular training on data protection and privacy practices to ensure they handle your information responsibly.

Your Rights Under DPDP Act, 2023

The Digital Personal Data Protection Act, 2023 grants you several important rights regarding your personal data. You have the right to access your data, which means you can request a summary of the personal information we hold about you and how we have processed it. You have the right to correction, allowing you to request that we update or correct any inaccurate or incomplete information we hold about you. You have the right to erasure, which means you can request that we delete your personal data, subject to certain legal exceptions such as when we are required to retain it for compliance purposes.

You also have the right to data portability, which enables you to request a copy of your data in a structured, machine-readable format so that you can transfer it to another service provider. You have the right to withdraw your consent at any time for processing that is based on consent, and we will honor your request without affecting the lawfulness of processing that occurred before your withdrawal. Additionally, you have the right to nominate a person who can exercise these rights on your behalf in the event of your death or incapacity. To exercise any of these rights, please contact our Grievance Officer whose details are provided below. We will respond to your request within 30 days as mandated by law.

Cookies and Tracking Technologies

Our website uses cookies — small text files stored on your device — and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze how our website is used. We use essential cookies that are necessary for the basic functioning of our website, such as maintaining your login session and remembering your language preference. We also use analytical cookies, including Google Analytics, to understand how visitors interact with our website, which pages are most frequently visited, and how users navigate through our site.

You have control over cookies through your browser settings and can choose to disable cookies if you prefer. Please note that disabling certain cookies may affect the functionality of our website, particularly features that require you to be logged in. We do not use cookies to collect personal information without your knowledge, and we do not allow third-party advertising cookies on our website.

Third-Party Services and Links

Our services may contain links to third-party websites, applications, or services that are not owned or controlled by us. This includes payment gateways like Razorpay, analytics services like Google Analytics, cloud infrastructure providers, and domain registrars. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with your personal information. When you make a payment through our platform, your payment details are handled directly by Razorpay in accordance with their privacy policy and data security standards, and we do not store your complete payment instrument details on our servers.

Grievance Redressal

In compliance with Rule 5(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011 and Section 14 of the DPDP Act, 2023, we have appointed a Grievance Officer to address any concerns you may have regarding your personal data or our privacy practices. If you have any complaints, questions, or requests related to your data or this policy, please reach out to our Grievance Officer using the details below. We take all grievances seriously and will acknowledge receipt of your complaint within 24 hours. We will investigate and resolve your concern within 30 days as required by applicable law. If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India as constituted under the DPDP Act, 2023.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and may provide additional notice through our website or via email. We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this policy constitutes your acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. You can reach us by email at rksharma@owntrip.co.in, by phone at +91 94992 93991, through our support portal at support.owntrip.in, or by visiting our office at Sahorachak, Jehanabad, Bihar – 804427, India.