Partner Privacy Policy

This Privacy Policy outlines how YOHO (“Company,” “we,” “our,” or “us”) collects, uses, discloses, and protects information provided when you use our website and mobile application as a customer or driver/delivery partner. This Policy is an electronic record under the Information Technology Act, 2000, and is also framed with regard to the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable rules made thereunder, as well as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Your privacy matters to Bright India Global Industries Private Limited (the “Company”, “we”, “YOHO”, or “us”).

By using our services, you agree and consent to the collection, transfer, use, storage, disclosure, and sharing of your information as described in this Policy. If you do not agree, please do not use our services.

This Policy applies to YOHO Customer and YOHO Partner mobile applications and must be read together with our Partner Terms and Conditions and Shipping & Delivery Policy. If you operate a 3-Wheeler, also read our Partner Privacy Policy (3-Wheeler). This Policy forms part of, and is incorporated within, the Partner Terms and Conditions.

1. Definitions

• “Personal Data” means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act.
• “Data Principal” means the individual to whom the Personal Data relates — that is, you.
• “Data Fiduciary” means YOHO, which determines the purpose and means of processing your Personal Data.
• “Processing” means any operation performed on Personal Data, including collection, recording, storage, use, sharing, disclosure, retention, or erasure.
• “Sensitive Personal Data” means categories of Personal Data warranting a higher standard of care, including financial information, government-issued identity documents, biometric or location data, and information about physical or mental health, to the extent such categories are recognized under Applicable Law.
• “Consent Manager” means any entity registered with the Data Protection Board of India through which you may, where such mechanism becomes available, manage your consent for processing of your Personal Data.

2. Information We Collect

• Personal Information: Name, job title, contact details, email address, mobile number, address, and demographic information.
• Account and Transactional Data: Login details, payment details, invoices, wallet/earnings history, and transaction history.
• Driver Partner Information: Profile picture, government identification documents (KYC — such as Aadhaar and PAN), vehicle details (insurance, registration certificate, driving licence, pollution certificate, fitness certificate), bank details, cancelled cheque, utility bills, and background verification data.
• Location Data: Precise and approximate location in the foreground and background while you are online or on an active trip, including when the app is closed or not in use, to match orders, track trips, share live location with customers during active trips, and for safety and fraud prevention.
• Device and Usage Information: App installation and uninstall details, device identifiers, network carrier, IP address, operating system, and interactions with our services.
• Contacts (Only With Consent): If you opt in to the Referral Program, selected contacts from your phone book, provided only after you separately consent. We do not share your selected contacts with third parties for their own marketing.
• Marketing and Survey Data: Responses to surveys, promotions, and feedback mechanisms.
• Communications Data: Records of communications you have with YOHO support, including calls that may be recorded for training and quality purposes, and in-app chat/messaging logs.
• Background Verification Data: Identity verification, address verification, and, where permitted by Applicable Law, criminal-record or driving-history checks conducted through authorized third-party vendors.
• Photographic and Proof-of-Delivery Data: Photographs taken at pickup/drop-off for proof of delivery, order verification, or dispute resolution, where such functionality is used.

3. Purpose of Collection

Personal data collected by YOHO is processed for the following specific purposes:

• Creation, verification, and management of your Partner account.
• Facilitation of delivery and/or transportation Services, including order assignment, route optimization, and trip fulfilment.
• Processing of payments and maintenance of transaction records.
• Compliance with applicable legal and regulatory obligations, including tax and background-verification requirements.
• Sending transactional communications relating to your bookings, earnings, and account status.
• Enhancing Platform features, security, and user experience through analytics.
• Fraud prevention, safety monitoring, and dispute resolution.
• Investigating and resolving complaints, accidents, or safety incidents reported by Users, Partners, or third parties.
• Facilitating background verification and onboarding compliance, including for Pilots aged 16–18 as described in the Partner Terms and Conditions.
• Internal training, quality assurance, and service-improvement purposes, including use of call recordings and in-app support logs.

4. Consent and Legal Basis

Your use of the Platform, and your acceptance of this Policy, constitutes your consent to the processing described herein for the purposes stated above. Where processing is based on consent (such as marketing communications or referral-contact sharing), that consent is sought separately and you may withdraw it at any time as described below, without affecting the lawfulness of processing carried out prior to withdrawal. Where processing is necessary for the performance of your Agreement with YOHO, for compliance with a legal obligation, or for other grounds recognized under the DPDP Act, YOHO may process your Personal Data without additional consent to the extent permitted by law.

5. Use of Information

• Internal record-keeping and service improvements.
• Enabling transactions and fulfilling contractual obligations.
• Partner onboarding, verification, and account management.
• Processing payments and providing customer/partner support.
• Assigning and tracking orders, route optimization, and trip fulfilment.
• Sending service updates and, only with your separate consent, promotional messages and market research.
• Enhancing security, fraud prevention, and compliance with legal obligations.
• Generating aggregated or anonymised data for business analytics, reporting, and planning.

You may opt out of promotional communications, in accordance with the Telecom Commercial Communications Customer Preference Regulations, 2018, by contacting support@bookyoho.com.

6. Data Security

We employ appropriate technical and organisational security measures, in line with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to prevent unauthorized access, disclosure, alteration, or misuse of your data. These measures include, where appropriate, encryption of data in transit, access controls limiting internal access to Personal Data on a need-to-know basis, and periodic review of our security practices. No method of transmission or storage is completely secure, and while we strive to protect your Personal Data, we cannot guarantee absolute security.

7. Data Retention

We retain information only for as long as required to fulfil the purposes set out in this Policy or as mandated by Applicable Law, after which it is deleted or anonymised. As a general guide:

• Account and KYC information is retained for the duration of your association with YOHO and for a reasonable period thereafter to meet statutory and regulatory recordkeeping obligations.
• Trip, transaction, and geo-location records are retained for as long as necessary for accounting, tax, dispute-resolution, and safety purposes, and as required under Applicable Law.
• Call recordings and support communication logs are retained for a limited period sufficient for quality assurance and dispute resolution, after which they are deleted or anonymised.
• Marketing consent records are retained until you withdraw consent or, where earlier, for the period required to demonstrate compliance with Applicable Law.

These retention periods are indicative and may vary based on operational necessity, ongoing investigations, or specific statutory requirements applicable at the relevant time.

8. Sharing of Information

We share your information only as reasonably necessary, and subject to appropriate contractual safeguards, with:

• Third-party service providers engaged for transaction processing, payment gateways, analytics, cloud hosting, background verification, and customer support.
• Customers — your name, phone number, and profile picture (where applicable) during active service fulfilment, including your live location during an active trip.
• Government or regulatory authorities where required under applicable law, or to prevent fraud, abuse, or illegal activity.
• Academic or research partners, on an anonymised or aggregated basis, for service-improvement purposes.
• Affiliates, successors, or acquirers in connection with a merger, restructuring, or business transfer, subject to those parties being bound by materially similar privacy obligations.
• Financial lending institutions and/or insurance broker entities, but only where you have separately availed, or sought to avail, a related product or service through YOHO, and only to the extent reasonably necessary for that purpose.
• Legal, accounting, and other professional advisors, where necessary for the purposes described in this Policy or to comply with a legal obligation.

We do not sell your personal data to third parties for their independent marketing purposes. Where YOHO shares data with a processor acting on its behalf, such sharing is governed by a data-processing arrangement requiring the processor to maintain confidentiality and appropriate security safeguards.

9. Cross-Border Data Transfer

Certain third-party service providers engaged by YOHO (for example, cloud hosting or analytics providers) may process data on servers located outside India. Where such transfer occurs, YOHO takes reasonable steps to ensure that the recipient maintains a standard of protection consistent with this Policy and Applicable Law, including the DPDP Act and any rules or notifications issued by the Central Government restricting transfer to specific countries or territories.

10. Deletion of Information

Upon account deletion or a verified written request, we will delete your personal information except where retention is necessary for safety, security, fraud prevention, legal compliance, or enforcement of our rights. Trip, transaction, and geo-location records may be retained where legally or operationally required. Requests: grievance@bookyoho.com.

11. Withdrawal of Consent

You may choose not to provide certain information, or withdraw consent for its processing, by writing to us. Withdrawal may limit or prevent your access to Services that require such data, including your ability to go online as a Partner. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal, and YOHO may continue to retain and process data to the extent necessary to comply with a legal obligation notwithstanding withdrawal of consent.

12. Your Rights as a Data Principal (DPDP Act, 2023)

As a Data Principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we process about you, and the processing activities undertaken, including the identities of third parties with whom your data has been shared and the categories of data shared.
• Request correction, completion, or updating of your personal information.
• Request erasure of your personal data, subject to the retention exceptions described above.
• Nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
• Register a grievance regarding the processing of your personal data with YOHO in the first instance, and, if unresolved, with the Data Protection Board of India as provided under the DPDP Act.
• Where applicable, exercise these rights through a registered Consent Manager once such mechanisms become operative under Applicable Law.

Requests may be submitted to support@bookyoho.com or to our Grievance Officer below. We will acknowledge and respond to such requests within the timelines prescribed under Applicable Law, and in any event within a reasonable period, subject to verification of your identity.

13. Automated Processing

YOHO may use automated or algorithmic processes — for example, to assign orders to available Partners, calculate fares, or flag potentially fraudulent activity. Such processes are designed to operate fairly and transparently, and you may contact YOHO support if you have concerns regarding an outcome you believe resulted from an automated process, including an order assignment, fare calculation, or account restriction.

14. Minors on the Platform

Where YOHO onboards a Pilot between 16 and 18 years of age in accordance with the Partner Terms and Conditions, we collect and process the minor's personal data only to the extent necessary for registration and Service delivery, along with the verified consent of a parent or legal guardian. Such data is handled with the same security safeguards described in this Policy, and access is restricted to what is operationally necessary. We do not knowingly collect personal data from any individual below 16 years of age other than as expressly permitted under this clause and the Partner Terms and Conditions, and any such data inadvertently collected will be deleted upon discovery.

15. Cookies and Tracking Technologies

We use cookies and similar technologies, including third-party analytics tools, to enhance user experience, analyse trends, remember preferences, and improve our services. Cookies may be session-based (deleted when you close the app/browser) or persistent (retained for a defined period). You can manage cookie preferences through your browser or device settings; disabling certain cookies may affect Platform functionality.

16. Third-Party Links and Integrations

The Platform may contain links to, or integrations with, third-party websites, payment processors, or services. This Policy does not apply to the privacy practices of such third parties, and YOHO is not responsible for their content or data practices. We encourage you to review the privacy policy of any third-party service you access through the Platform.

17. Security Incident Notification

In the event of a personal data breach that is likely to significantly affect your rights or interests, YOHO will take reasonable steps to notify you and the Data Protection Board of India, as required under the DPDP Act, and will take appropriate remedial measures to contain and address the incident.

18. Prohibited Activities

Users and Partners must not upload, transmit, or store information that:

• Violates laws, is defamatory, obscene, or infringes intellectual property.
• Contains malware, impersonation, or misleading information.
• Threatens national security or public order.
• Is prohibited under Rule 3(1)(b) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

19. Relationship with the Partner Terms and Conditions

This Policy is a part of, and incorporated within, the Partner Terms and Conditions. All capitalized terms used in this Policy but not defined herein shall have the meaning ascribed to them in the Partner Terms and Conditions. In the event of any inconsistency between this Policy and the Partner Terms and Conditions on a matter specifically relating to data protection, this Policy shall prevail to that limited extent.

20. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or Applicable Law. Material changes will be notified through the Platform, an in-app alert, or email to your registered address, generally with at least 14 days’ notice where practicable. Your continued use of the Platform after such notice constitutes acceptance of the revised Policy. You should check this page periodically to stay informed of any changes.

Grievance Officer

Grievance Officer, YOHO (Bright India Global Industries Private Limited)
Western Business Park, 409, Udhana – Magdalla Rd, opp. SD Jain School, Vesu, Surat, Gujarat 395007
Email: grievance@bookyoho.com

Contact Information

Legal Team, YOHO (Bright India Global Industries Private Limited)
Western Business Park, 409, Udhana – Magdalla Rd, opp. SD Jain School, Vesu, Surat, Gujarat 395007
Email: support@bookyoho.com
Phone: +91 75675 83505
Time: Monday to Friday (10 a.m. to 6 p.m.)