Vahos Privacy Policy

1. Who Operates Vahos

Vahos is a product operated by CHETTIAR BROTHERS STRATEGIC ADVISORS LLP (“Vahos”, “we”, “us”, or “our”). The LLP operates the Vahos platform and handles personal data as described in this Privacy Policy.

2. Data We Collect

To facilitate a secure delivery, we collect the following information:

• User/Sender Data: Name, mobile number, and pickup/drop-off addresses.
• Business Sender Data: business name and GSTIN when a sender applies for a business account, used for verification and eligible pricing.
• Recipient Data: Name and mobile number provided by the Sender.
• Carrier (Traveler) Data: Name, mobile number, government ID for verification, and real-time GPS location during an active trip.

2. How We Use Your Data

• Logistics Management: To connect Senders with Carriers and provide real-time tracking of the parcel.
• Communication: Sending automated SMS/WhatsApp updates regarding pickup and delivery status.
• Safety & Verification: Verifying the identity of Carriers to ensure the security of the goods being transported.
• Legal Compliance: To comply with any requests from the Railway Protection Force (RPF) or other law enforcement agencies.

3. GPS Tracking & Location Data

• Background Tracking: For Carriers, Vahos collects location data from the moment a trip is accepted until it is marked as delivered.
• Transparency: Senders can see the live location of the Carrier only for the duration of their specific delivery.
• Permission: Location access is mandatory for Carriers to use the platform but is never tracked when the Carrier is offline or not on an active trip.

4. Data Sharing & Third Parties

• Minimal Disclosure: We only share the Recipient's phone number with the Carrier to facilitate the final hand-off.
• Infrastructure: Data is securely processed on Render.com servers. We do not sell your personal data to third-party marketing agencies.
• Legal Necessity: We may share data if required by Mumbai Railway/Metro authorities during security checks.

5. Data Retention & Deletion

• The 24-Hour Rule: Detailed GPS logs are archived 24 hours after a successful delivery after the claim window closes.
• User Rights: Under the DPDP Act, you have the right to request the deletion of your account and personal data. We will process such requests within 30 days, provided there are no pending legal disputes or active claims.