Privacy Policy

Last updated: January 2025

1. Information We Collect

1.1 Information You Provide

When you use GrabtoGo, you may provide us with:

  • Account Information: Name, email address, phone number, password
  • Profile Information: Profile picture, bio, preferences
  • Vendor Information: Business name, address, GST number, PAN card, business documents
  • Payment Information: Billing address, payment method details (processed securely via Razorpay)
  • Communications: Messages, reviews, support tickets, feedback
  • Content: Photos, reviews, ratings you upload or post

1.2 Automatically Collected Information

When you use our Service, we automatically collect:

  • Device Information: IP address, browser type, device type, operating system
  • Usage Data: Pages viewed, time spent, clicks, search queries
  • Location Data: GPS location (with your permission), IP-based location
  • Cookies: Session cookies, preference cookies, analytics cookies

1.3 Information from Third Parties

  • OAuth providers (Google) if you sign in using social login
  • Payment processors (Razorpay) for transaction processing
  • Analytics services (Google Analytics) for platform improvement
2. How We Use Your Information

We use your information to:

2.1 Provide and Improve Services

  • Create and manage your account
  • Process vendor registrations and verifications
  • Display vendor listings and products
  • Enable communication between users and vendors
  • Process subscriptions and payments
  • Provide customer support
  • Improve platform features and user experience

2.2 Personalization

  • Show relevant vendors based on your location
  • Recommend products and services
  • Customize search results
  • Remember your preferences

2.3 Communication

  • Send transactional emails (account verification, password reset)
  • Notify you about account activity
  • Send promotional emails (with your consent, you can opt-out)
  • Respond to your inquiries and support requests

2.4 Safety and Security

  • Verify identity and prevent fraud
  • Detect and prevent security incidents
  • Monitor for policy violations
  • Enforce our Terms of Service

2.5 Legal Compliance

  • Comply with legal obligations
  • Respond to legal requests and court orders
  • Protect our rights and property
3. How We Share Your Information

We may share your information with:

3.1 Public Information

Your profile name, reviews, and ratings are publicly visible to help other users make informed decisions.

3.2 Vendors

When you interact with a vendor, they may see your name and contact information to facilitate communication.

3.3 Service Providers

  • Payment Processors: Razorpay for payment processing
  • Cloud Services: Supabase for data storage
  • Analytics: Google Analytics for usage statistics
  • Email Services: For sending notifications
  • SMS Services: For OTP and notifications

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

3.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

4. Data Security

We implement security measures to protect your data:

  • Encryption: HTTPS/SSL encryption for data in transit
  • Password Security: Bcrypt hashing for password storage
  • Access Controls: Role-based access to sensitive data
  • Two-Factor Authentication: Optional 2FA for additional security
  • Regular Audits: Security assessments and vulnerability testing
  • Data Backups: Regular backups to prevent data loss

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Your Rights and Choices

5.1 Access and Update

You can access and update your account information at any time through your profile settings.

5.2 Delete Account

You can delete your account from the Security settings page. This will permanently remove your account and associated data (except as required by law).

5.3 Marketing Communications

You can opt-out of promotional emails by clicking the unsubscribe link in any email or updating your notification preferences.

5.4 Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

5.5 Location Data

You can control location permissions through your device settings. Disabling location may limit certain features like location-based search.

5.6 Data Portability

You can request a copy of your data by contacting us at privacy@grabtogo.in.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data:

  • For legal compliance (tax records, transaction history)
  • To resolve disputes and enforce agreements
  • For fraud prevention and security
  • In backup systems (deleted within 90 days)

Reviews and ratings may remain visible (anonymized) to maintain platform integrity.

7. Children's Privacy

GrabtoGo is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

8. International Data Transfers

Your information may be stored and processed in India or other countries where our service providers operate. By using GrabtoGo, you consent to the transfer of your information to these locations.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Email: privacy@grabtogo.in

Data Protection Officer: dpo@grabtogo.in

Address: GrabtoGo Technologies Pvt Ltd

Infopark, Kochi, Kerala, India - 682030