logo

CabsWale - Privacy Policy

Last Updated: April 6th, 2026

1. Who are We?

We are Sahita Cabswale Innovations Private Limited ("CabsWale", "We", "Us", or "Our"), a company incorporated under the laws of India with its registered office at Delhi, India. We operate the following:

  • the Cabswale.ai website (the "Website"); and
  • the Cabswale partners application and the Cabswale passengers application (the "App").

The Website and the App are hereinafter collectively referred to as the "Platform".

This Privacy Policy is made in compliance with the provisions of the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"). All capitalised terms not defined in this Privacy Policy are defined in the DPDP Act and the DPDP Rules.

CabsWale is committed to protecting your Digital Personal Data and respecting your privacy rights, as laid out in the DPDP Act and the DPDP Rules. This Privacy Policy explains how We collect, use, disclose, retain, and safeguard your Digital Personal Data when you interact with Us on the Platform.

We act as the data fiduciary (as defined under the DPDP Act), responsible for processing your Digital Personal Data through the Platform.

2. What does this Privacy Policy cover?

This Privacy Policy applies to any Digital Personal Data that CabsWale processes about you in its capacity as a data fiduciary. It covers interactions including when you:

  • visit the Platform; and/or
  • register as a passenger or driver partner; and/or
  • search for, book, or undertake outstation cab trips facilitated through the Platform; and/or
  • communicate with Us via in-app chat, calls, support queries, or other means; and/or
  • upload documents for verification (e.g., for driver partners); and/or
  • otherwise interact with Our services as a technology intermediary connecting passengers with independent driver partners.

We do not own vehicles, employ drivers, or process payments (which occur directly between passengers and driver partners). CabsWale may provide tools for fare estimation or trip recording, but does not act as a payment intermediary. This Policy does not apply to data We process solely as a Data Processor on behalf of another entity.

Our Platform is directed to individuals in their personal or professional capacities for outstation travel needs and is not intended for children under 18 years of age. All accounts must be held by individuals aged 18 years or older. We do not knowingly process Digital Personal Data of children without verifiable parental or guardian consent as required under the DPDP Act. If you believe We have processed a child's data without such consent, please contact Us immediately, and We will take steps to delete it. Where an adult user books a trip involving a minor as a co-passenger, the adult confirms they have appropriate authority to share such data on the minor's behalf.

3. What Digital Personal Data do We process?

The types and categories of digital personal data We process depend on your interaction with the Platform. We collect only data necessary for the specified purposes, in line with data minimisation principles under the DPDP Act.

Interactions Where Digital Personal Data is CollectedCategories of Digital Personal Data Processed
Registration, profile creation, or account management (passengers and driver partners)Identifiers and contact information: Name, mobile number, email address (optional), profile photo (optional for passengers; required for driver partners).

Verification data: KYC details as required under applicable laws or internal risk policies, which may include Aadhaar number or masked Aadhaar copy, and other government-issued ID documents.
Driver partner verification and onboardingVerification data: Government-issued ID (including Aadhaar number and masked Aadhaar copy/PAN/driving license, processed in masked/encrypted form where required), vehicle registration, permits, insurance documents, photographs and any other KYC documents required under law or by Our verification partners for identity, background, and criminal record checks.
Trip search, booking, matching, and active tripsLocation data: Real-time GPS (with consent during active trip/search), pickup/drop-off addresses.

Usage and trip data: Trip details (route, time, negotiated fare), in-app chat/call logs, ratings/reviews, cancellation history.
Device and technical interactionsDevice and network information: IP address, device ID, OS/browser version, app logs, cookies (for essential functionality and analytics).
Support, feedback, or emergency featuresOther data: Feedback/support queries, emergency contact (optional).
Job applicants (careers page)Recruitment data: Full name, phone number, email address, gender, GitHub and LinkedIn profile links, resume/CV, intro video (camera permission where applicable).
Emergency contacts and co-passengersThird-party data: Name and contact details of emergency contacts (provided voluntarily); name of co-passengers where provided by the booking user.

We do not collect payment card details, bank information, or financial data. We may obtain data from third parties (i.e., verification providers, maps APIs) or public sources only as permitted by law and necessary for compliance or service provision. If you provide data about others, you confirm you have authority and necessary consents.

We use cookies and similar technologies for essential functions, security, and analytics. For details, refer to Our separate Cookie Policy linked on the website.

4. Legal Bases and Purposes

  • Consent (where required): To facilitate account creation, trip matching (including AI-based recommendations), in-app communications, safety features (e.g., verification, emergency support, trip sharing), and customised experiences. Consent is free, specific, informed, unconditional, and unambiguous via clear affirmative action. You may withdraw consent at any time (with comparable ease) via app settings or by contacting Us, though withdrawal may limit features.
  • Legitimate Uses (without separate consent, per Section 7 of DPDP Act): For voluntary provision of data for specified purposes (e.g., trip facilitation where you initiate), compliance with law (including Motor Vehicles Aggregator Guidelines 2025), fraud prevention, safety, employment-related processing (if applicable), or responding to emergencies/disasters.

We process Digital Personal Data for purposes such as: account management; trip facilitation and direct user connections; safety and emergency support; compliance with aggregator regulations and law enforcement requests; fraud/misuse prevention; analytics and service improvement; and internal Platform functionality.

5. How long do We retain your Digital Personal Data?

We retain Digital Personal Data only as long as necessary to fulfil the purposes for which it was collected, or longer if required by law. After the retention period, We erase or anonymise the data.

  • Passenger and driver partner accounts: Retained for the duration of the account and for seven (7) years after account closure or deactivation.
  • Trip data and location logs: Retained for seven (7) years after trip completion for safety, dispute resolution, and regulatory compliance.
  • Chat and call metadata: Retained for seven (7) years after the relevant trip or interaction.
  • Support tickets and complaint records: Retained for seven (7) years from resolution for legal and regulatory purposes.
  • KYC/Aadhaar and background check records: Typically seven (7) years from completion of the verification process, unless a longer period is required by law.
  • Public profiles post-deactivation: Removed from public view upon deactivation; residual cached versions in search engine results may persist until search engines process removal requests.
  • Emergency incident records: Retained for seven (7) years for safety, legal, and insurance purposes.
  • Recruitment data: Retained for seven (7) years from the conclusion of the recruitment process, unless the applicant consents to longer retention for future opportunities.
  • Law-enforcement preservation: Where required by a lawful order or legal obligation, data may be preserved beyond standard retention periods.

6. What are your rights and how can you exercise them?

As a Data Principal under the DPDP Act, you have rights including:

  • access to your digital personal data and a summary of processing, and the categories of other data fiduciaries and data processors with whom your Digital Personal Data has been shared (subject to applicable legal limitations);
  • correction of inaccurate or incomplete data;
  • erasure of data (subject to legal retention obligations);
  • grievance redressal; and
  • nomination of a person to exercise rights in case of death or incapacity.

To exercise these rights or withdraw consent, contact Us at dpo@cabswale.in or via in-app mechanisms. We respond within timelines prescribed under the DPDP Rules. Requests require sufficient verification of identity.

7. With whom do We share your Digital Personal Data?

We share Digital Personal Data only when necessary and under strict controls:

  • with other Platform users on a limited basis: (a) driver partner profile (name, verification badges, ratings, vehicle details, languages, routes) is shared with passengers during the search and selection stage; (b) pre-booking and during-trip, driver partners may see the passenger's name, pickup location, drop-off location, and trip time; the passenger's phone number is not shared directly with drivers;
  • with service providers (for services such as cloud hosting, verification agencies including Aadhaar/KYC and background verification APIs and platforms, maps, SMS gateways) under contracts ensuring confidentiality and purpose limitation;
  • with insurers (on a limited basis, if you opt into coverage partnerships);
  • with law enforcement, government authorities, or courts when required by law; and
  • in case of Our merger, acquisition, or restructuring.

We do not sell Digital Personal Data or share it for unrelated purposes. Cross-border transfers of Digital Personal Data, if any, are made only in accordance with the DPDP Act and applicable Indian law, to jurisdictions not restricted by the Central Government, and subject to contractual and technical safeguards with third-party processors to ensure confidentiality and purpose limitation.

We implement reasonable security safeguards (including encryption, access controls, regular audits, and secure storage) to protect against unauthorised access, loss, disclosure, or breach, in line with DPDP Act requirements. In case of a breach likely to affect your rights, We will notify you and the Data Protection Board as required.

8. Aadhaar and Background Verification

In certain cases, for example when required by law, by Our insurance or aggregator partners, or as part of enhanced safety checks, we may collect Aadhaar details (including Aadhaar number and/or a masked Aadhaar copy) and other KYC identifiers through the Platform. This is done solely to verify your identity, prevent fraud, and enable background or criminal record checks.

Where We collect Aadhaar, it is processed in encrypted or masked form where feasible, and is accessible only to authorised personnel on a strict need-to-know basis. We do not use Aadhaar for profiling or marketing.

For conducting background and identity verification, We may share your Aadhaar and other KYC details with specialised third-party verification providers and APIs engaged by Us or by Our partners (for example, insurers or compliance solution providers). Such third parties process your data in accordance with written contracts that include confidentiality, purpose limitation, and security obligations.

Where a background verification product is offered or provided by a third party, that third party may independently collect, use, store, and retain your Aadhaar and other personal data as per its own privacy policy. We strongly encourage you to review such third-party privacy policies before proceeding.

You acknowledge that certain features (for example, access to Trips, insurance, or driver partner onboarding) may not be available or may be restricted if you choose not to provide Aadhaar or required KYC information for background verification. Where a driver partner's profile displays an "Aadhaar Verified" badge, this indicates that We have completed identity verification using Aadhaar or an equivalent UIDAI-approved method.

9. Grievance Redressal

Grievance Officer:

Name: Ayush Sharma
Email: dpo@cabswale.in
Address: Gurugram, Haryana

We acknowledge complaints within 24 hours and resolve within timelines under DPDP Rules (or as prescribed). You may escalate unresolved issues to the Data Protection Board of India.

For questions, rights requests, or grievances: dpo@cabswale.in or support@cabswale.in.

10. Third-Party Services and Independent Data Fiduciaries

The Platform may integrate with or link to third-party services, SDKs, APIs, or websites, including but not limited to background verification providers, KYC/Aadhaar verification services, insurers, maps, communication tools, or analytics providers.

When you interact directly with such third-party services, those third parties may determine their own purposes and means of processing your personal data and may be independent data fiduciaries under applicable law. Their processing is governed by their own terms and privacy policies, which We do not control.

We are not responsible for and do not guarantee the privacy, security, accuracy, or availability of any third-party services. Your use of such services is at your own discretion and risk, and you should review their privacy policies and terms carefully.

11. Public Profiles, Ratings, and Public Exposure

Driver partner profiles on the Platform may be publicly visible and indexable by search engines. Public profile fields may include name, photograph, routes, language preferences, bio text, ratings, last active status, and verification badges. Driver partners may control the visibility of certain optional fields through their profile settings. Deletion or deactivation of a profile removes it from the Platform, but cached versions in search engine results may persist until search engines process removal requests. The lawful basis for publishing profile data is consent, obtained during onboarding. Passenger profiles are not publicly indexed.

12. Communications: Calls, Chat, Support and Emergency Features

CabsWale may facilitate in-app calls and chat between passengers and driver partners. Calls may be direct or relayed through the Platform; call metadata (duration, timestamp, device identifiers) is logged and retained for a limited period. Chat content is stored and may be reviewed by Our support team when a complaint or safety concern is raised. Emergency/SOS events are logged and, where necessary, relevant data may be shared with emergency contacts, law enforcement, or insurers to address an immediate safety risk.

13. AI-Based Services and Automated Decision-Making

CabsWale provides an AI-based trip assistant and driver-matching service. These systems use data such as user profile information, trip history, ratings, location, behaviour within the Platform, and prior queries to generate recommendations and match passengers with suitable driver partners. Where third-party AI vendors or large language model providers are used, prompts and responses may be processed by those vendors under agreements requiring confidentiality and restricting use of data for model training without consent. AI-based systems do not make final binding decisions without human oversight; where a material automated decision affects a Data Principal, We provide an explanation or human review mechanism on request, in accordance with applicable law.

14. Notice and Consent

CabsWale surfaces privacy notices and consent requests at key data collection points within the Platform, including during account registration, KYC upload, location permission requests, AI assistant use, public profile publishing, emergency feature activation, marketing opt-ins, and job applications. Notices are provided in plain English and, where required by the DPDP Act, in applicable Eighth Schedule languages. We maintain records of consents as required under the DPDP Act.

15. Service and Marketing Communications

We may send you service messages essential to the Platform (such as OTPs, trip updates, safety notices, and account alerts) without separate marketing consent, as these are necessary for service delivery. We may also send marketing and promotional communications via SMS, email, WhatsApp, or push notification, with your prior consent. You may withdraw marketing consent at any time through in-app settings or by contacting Us, without affecting your access to core services.

16. User-Generated Content, Reviews, and Ratings

Users may submit ratings, reviews, bio text, and other content on the Platform ("User Content"). We moderate User Content in accordance with Our Terms of Use. Content that is abusive, illegal, or violates platform standards may be removed; however, such content may be retained for a limited period for safety investigation, dispute resolution, or compliance with law, even after a user attempts to delete it. Users grant CabsWale a limited licence to display, moderate, and use User Content for Platform operations.

17. Applicant Privacy Notice

This section applies to individuals who apply for positions at CabsWale through Our careers page or other recruitment channels. We collect information submitted through the Platform. This data is used solely for recruitment purposes, including candidate evaluation, background and reference checks, and legal compliance. Applicant data is retained for a limited period from the conclusion of the recruitment process, after which it is deleted unless you have consented to longer retention for future opportunities.

18. How will We update this Privacy Policy?

We may amend this Policy from time to time. Material changes will be notified via the app, email, or prominent notice on the Platform. For material changes that introduce new categories of processing where consent is the legal basis, We will obtain fresh consent through a clear affirmative action. Continued use may constitute acceptance for non-material or contractual changes.

The "Last Updated" date will reflect revisions. This Policy is governed by the laws of India. Thank you for trusting CabsWale with your Digital Personal Data.

Plan your trip with Raahi.

Get it on Google PlayDownload on the App Store

Copyright @2024. All Rights Reserved by Sahita Cabswale Innovations Private Limited

  • Social Links -