Privacy Policy

1. Information We Collect

Vediway Technologies (owned and operated by VIGNESH R) collects information necessary to provide on-demand commercial freight matching, driver dispatching, and secure delivery settlement services. This includes:

• For Shop Owners & Senders: Full name, registered business or store name, primary mobile number, email address, pickup godown address, destination area, and business verification documents (e.g., GSTIN, Shop License, or MSME certificates).
• For Commercial Driver Partners: Full name, phone number, residential location, profile picture, vehicle specifications (registration number, payload capacity in KG, vehicle type, and body style), and verification records (Driving License, Vehicle Registration Certificate, Fitness Certificate, and Commercial Insurance).
• Shipment Details: Cargo type, packaging category (Boxes, Sacks, Packs, Cases), item quantity, approximate weight, expected pickup time, and agreed trip fare.

2. Geolocation & Real-Time GPS Tracking

Real-time spatial tracking is essential for matching nearby vehicles and securing active cargo in transit:

• Driver Location Services: When a driver is marked available or is executing an assigned trip, we collect high-accuracy GPS coordinates to display nearby loads within a 5 km radar and power live milestone tracking.
• Sender Pickup & Drop Coordinates: Senders provide pickup and drop points via Google Maps reverse geocoding to calculate route distances and enforce minimum floor pricing.
• Background Location: Drivers' background location is monitored strictly during active transit runs (from Pickup OTP verification until final Drop OTP submission) to ensure delivery accountability.

3. Payment Security & PhonePe Gateway Integration

All digital payments on Vediway are processed through our authorized, RBI-compliant payment gateway partner, PhonePe:

• Zero Card/PIN Storage: Vediway does not collect, process, or store credit/debit card numbers, CVVs, net banking passwords, or UPI PINs on its servers.
• PCI-DSS Compliant Encryption: All payment flows occur inside PhonePe's encrypted 256-bit SSL environment adhering strictly to PCI-DSS and Reserve Bank of India (RBI) security frameworks.
• Settlement Records: We retain only tokenized transaction IDs, invoice numbers, order timestamps, and payment statuses (Success/Pending/Refunded) to calculate the 10% platform facilitation fee and disburse 90% driver payouts.

4. How We Use Your Information

We process collected data solely for operational, logistical, and safety purposes:

• To verify the authenticity of merchants and commercial drivers before granting marketplace access.
• To enable dynamic price bidding, cargo matching, and real-time shipment status updates.
• To generate and validate unique 4-digit Pickup OTPs and Drop OTPs for secure custody transfers.
• To calculate trip pricing, process upfront digital payments, and disburse 90% net earnings to driver bank accounts.
• To send critical operational notifications, deal acceptance alerts, and automated digital receipts.

5. Data Privacy Masking & Third-Party Disclosure

We prioritize user privacy and prevent data misuse through structured data masking:

• Pre-Acceptance Privacy: When a sender posts a load, drivers can view only the general area, distance, cargo category, and weight. The sender's exact street address, shop name, and phone number remain locked.
• Post-Acceptance Disclosure: Full contact details and exact addresses are unlocked strictly between the matched sender and driver after a bid is formally accepted.
• No Sale of Data: Vediway never sells, rents, or monetizes personal data, phone numbers, or business records to third-party marketing agencies or external advertisers.

6. Data Security, Isolation & Retention

We implement multi-layered industry safeguards to prevent unauthorized access:

• Encryption in Transit & Rest: All web and mobile communications run over HTTPS with TLS 1.3 encryption. Internal databases are protected by parameterized queries and strict access controls.
• Session Authentication: Access to sender and driver portals requires secure mobile OTP verification and JWT session tokens.
• Retention Schedule: Operational data and invoices are retained for the duration of the active account lifecycle and as required by Indian commercial, tax, and GST reporting regulations.

7. User Rights & Account Deletion

In accordance with Indian data protection norms, users have complete autonomy over their stored records:

• Edit Profile: Senders and drivers can update their contact details, address records, and vehicle configurations directly via their app settings dashboard.
• Account Deletion: Users may request permanent account deletion via the settings menu. Upon clearing all open deliveries and financial obligations, all personal identifiers and vehicle photos are permanently purged from active databases.

8. Grievance Redressal & Contact Officer

If you have questions, feedback, or formal data privacy requests regarding this Privacy Policy, please contact our designated Data Protection & Compliance Officer: