DEPO · Effective 2026-06-28
Privacy Policy
What we collect
We collect your phone number to create your account, your name when you choose to share it, and your device location when you actively book or take a ride.
For drivers, we additionally collect your driving licence, vehicle registration certificate, Aadhaar (via DigiLocker), and a profile photo, in line with the Motor Vehicle Aggregator Guidelines 2020.
We collect ride history, ratings, and payment-mode signals to operate the service, comply with DPDP Act 2023 obligations, and prevent fraud.
How we use it
Your data is stored in AWS Mumbai region. We do not replicate user data outside India.
We share masked phone numbers with the other party to a ride only via Exotel's call/SMS bridge — the actual numbers are never exposed.
We never sell your data. We share data with regulators only when legally compelled, and only the specific records required.
Background location (driver app only)
The DEPO Driver app requests ACCESS_BACKGROUND_LOCATION on Android (and the Always permission on iOS). This is required so a driver does not miss ride requests when their phone screen is off, and so a rider can see the driver's live position on the map while the driver is en-route to pickup.
Background location is sampled at most once every 4 seconds while a trip is active and at most once every 15 seconds otherwise. The collected coordinates are never used for advertising and are never sold or shared with third parties.
Background location is automatically suspended when the driver toggles offline in the app, and a "DEPO is using your location in the background" system notification is shown by Android whenever background sampling is active.
Your rights under the DPDP Act
You can download a complete export of your data at any time from Profile → Privacy → Data Export.
You can request account deletion in the app at Profile → Privacy → Delete Account, or via the standalone form at godepo.in/en/legal/account-deletion. We hold your record for a 30-day grace period (during which you can cancel the request) and then perform a cascading delete: personally-identifiable fields (phone, name, email, photo, UPI VPA) are removed; ride records are anonymised and retained for 7 years to satisfy Income Tax + GST audit requirements.
You can file a grievance with our Grievance Officer at [email protected]. We acknowledge within 24 hours and resolve within 15 days, per IT Rules 2021.
Questions? [email protected]