Digital Personal Data Protection (DPDP) Act, 2023 Compliance Notice

Effective Date: 29 June 2026

At MeraVahan, we are committed to protecting your personal data and respecting your privacy. This notice explains how we collect, use, store, process, and protect your personal information in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws of India.

By accessing or using MeraVahan, you acknowledge that you have read and understood this Compliance Notice.

1. Our Commitment

MeraVahan is committed to processing personal data:

• Lawfully
• Fairly
• Transparently
• Securely
• Only for specified and legitimate purposes

We collect only the information reasonably necessary to provide our services.

2. Personal Data We Collect

Depending on how you use MeraVahan, we may collect:

Personal Information

• Full Name
• Mobile Number
• WhatsApp Number
• Email Address
• Business Name
• Address
• Profile Photo

Vehicle Information

• Vehicle Registration Number
• Engine Number
• Chassis Number
• Vehicle Details
• Insurance Details
• RC Information
• Road Tax Details
• PUCC Details
• Fitness Certificate
• Permit Information

Uploaded Documents

You may upload:

• RC Book
• Insurance Policy
• Aadhaar Card
• PAN Card
• Driving Licence
• Vehicle Images
• Road Tax Receipts
• Fitness Certificates
• Permit Documents

Technical Information

• Device Information
• Browser Information
• Login History
• IP Address
• Session Information
• Activity Logs

3. Purpose of Processing

We process your personal data to:

• Create and manage your account.
• Maintain vehicle records.
• Store and organize documents.
• Send renewal reminders.
• Deliver Email, SMS, WhatsApp, Push, and In-App notifications.
• Process subscription payments.
• Provide customer support.
• Improve platform performance.
• Prevent fraud and unauthorized access.
• Comply with applicable legal obligations.

4. Consent

Where required by law, MeraVahan will obtain your consent before processing your personal data.

You may withdraw your consent at any time where consent is the legal basis for processing. Withdrawal will not affect processing carried out before consent was withdrawn but may limit certain platform features.

5. Your Rights

Subject to applicable law, you may request to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Update your personal information.
• Delete your personal information where applicable.
• Withdraw consent.
• Raise a grievance regarding the handling of your personal data.
• Nominate another individual to exercise your rights where permitted by law.

Requests may require identity verification before processing.

6. Data Security

To protect your information, MeraVahan implements appropriate technical and organizational safeguards, including:

• HTTPS encryption
• Secure password hashing
• Role-Based Access Control
• Secure document storage
• Activity logging
• Infrastructure monitoring
• Regular software updates
• Security incident monitoring

No internet-based system can guarantee absolute security; however, we continually work to maintain a high level of protection.

7. Data Retention

Your personal information is retained only for as long as necessary to:

• Provide our services.
• Meet legal and regulatory obligations.
• Resolve disputes.
• Protect platform security.
• Enforce our agreements.

Retention periods are described in our Data Retention & Deletion Policy.

8. Data Sharing

MeraVahan does not sell your personal information.

We may share your data only:

• With trusted service providers who help operate our platform.
• To process payments.
• To deliver notifications.
• To comply with legal obligations.
• With your consent.

All third-party providers are expected to protect your information appropriately.

9. Third-Party Service Providers

Our platform may integrate with trusted service providers, including:

• Amazon Web Services (AWS)
• Google Cloud Services
• Meta WhatsApp Cloud API
• Fast2SMS
• Resend
• Razorpay

Each provider operates under its own privacy and security policies.

10. Children's Data

MeraVahan is not intended for individuals under 18 years of age.

Where required by applicable law, appropriate consent will be obtained before processing the personal data of children.

11. Grievance Redressal

If you have any concerns regarding the processing of your personal data, you may contact us using the details below.

We will make reasonable efforts to acknowledge and address your grievance in accordance with applicable law.

12. Updates to This Notice

We may revise this Compliance Notice from time to time.

The latest version will always be available on our website with the updated Effective Date.

Your continued use of MeraVahan after any updates constitutes acceptance of the revised notice.

13. Contact Information

For questions, requests, or grievances relating to your personal data, please contact:

MeraVahan

Website: https://www.meravahan.in

Email: support@meravahan.in

Phone: +91 70015 09132

Address: Bihta, Sheikhpura, Bihar 811105, India

By using MeraVahan, you acknowledge that you have read and understood this Digital Personal Data Protection (DPDP) Act Compliance Notice.