Security Policy

Effective Date: 29 June 2026

At MeraVahan, protecting the confidentiality, integrity, and availability of our users' data is one of our highest priorities.

This Security Policy describes the security measures implemented to safeguard our platform, customer information, vehicle records, and uploaded documents.

1. Our Commitment

MeraVahan is committed to maintaining a secure platform by implementing industry-recognized security practices and continuously improving our systems to protect against unauthorized access, misuse, data loss, and cyber threats.

2. Security Objectives

Our security program is designed to:

• Protect user information
• Secure uploaded documents
• Prevent unauthorized access
• Ensure data integrity
• Maintain platform availability
• Detect and respond to security incidents
• Comply with applicable legal and regulatory requirements

3. Data Encryption

Data in Transit

All communication between users and MeraVahan is encrypted using HTTPS with TLS (Transport Layer Security).

This protects information transmitted between your browser or device and our servers.

Data at Rest

Sensitive information stored within our infrastructure is protected using appropriate encryption and access controls where applicable.

4. Authentication & Access Control

MeraVahan uses secure authentication mechanisms including:

• Encrypted passwords using strong one-way hashing algorithms
• Role-Based Access Control (RBAC)
• Session management
• Automatic session expiration after inactivity
• Secure password reset procedures
• Protection against brute-force login attempts

Users are responsible for maintaining the confidentiality of their login credentials.

5. Infrastructure Security

Our platform is hosted on secure cloud infrastructure designed with multiple layers of protection, including:

• Network firewalls
• Secure server configuration
• Operating system updates
• Security patch management
• Continuous infrastructure monitoring
• Backup and disaster recovery mechanisms

6. Document Security

Documents uploaded to MeraVahan, such as:

• RC Book
• Insurance Policies
• Aadhaar Cards
• PAN Cards
• Driving Licences
• Vehicle Images
• Permits
• Fitness Certificates

are stored securely and are accessible only to authorized users with appropriate permissions.

7. Data Backup

Regular backups are performed to protect against accidental data loss.

Backups are:

• Encrypted where applicable
• Stored securely
• Retained according to our Data Retention & Deletion Policy
• Used solely for disaster recovery purposes

8. Monitoring & Logging

To protect the platform, MeraVahan maintains logs including:

• Login history
• Administrative actions
• Account activity
• Notification delivery
• API requests
• Security events
• System errors

Logs are used to detect suspicious activity, troubleshoot issues, and improve security.

9. Third-Party Services

MeraVahan integrates with trusted third-party providers, including:

• Amazon Web Services (AWS)
• Google Cloud Services
• Meta WhatsApp Cloud API
• Fast2SMS
• Resend
• Razorpay

Each provider maintains its own security controls and policies. Users are encouraged to review their respective security and privacy documentation.

10. Secure Software Development

Security is considered throughout our development process.

Our development practices include:

• Secure coding standards
• Input validation
• Output encoding
• Protection against common web vulnerabilities
• Dependency management
• Regular software updates
• Code reviews before deployment

11. User Responsibilities

Users play an important role in protecting their accounts.

We recommend that users:

• Use strong and unique passwords
• Keep login credentials confidential
• Enable two-factor authentication if available
• Log out from shared devices
• Regularly review account activity
• Report suspicious activity immediately

12. Incident Response

If a security incident is detected, MeraVahan will take appropriate action, which may include:

• Investigating the incident
• Containing the threat
• Restoring affected services
• Notifying affected users where appropriate
• Cooperating with relevant authorities when legally required

13. Vulnerability Reporting

We encourage responsible disclosure of potential security vulnerabilities.

If you believe you have discovered a security issue, please report it to us with sufficient detail to allow investigation.

Please do not exploit, publicly disclose, or share vulnerabilities before providing us a reasonable opportunity to investigate and address the issue.

14. Availability

While we strive to maintain a highly available platform, service interruptions may occur due to:

• Scheduled maintenance
• Security updates
• Infrastructure upgrades
• Third-party service outages
• Force majeure events

We work to restore normal service as quickly as reasonably possible.

15. Policy Updates

This Security Policy may be updated periodically to reflect changes in technology, security practices, legal requirements, or our services.

The latest version will always be available on our website.

16. Contact Us

For security-related questions or to report a potential security issue, please contact us:

MeraVahan

Website: https://www.meravahan.in

Email: support@meravahan.in

Phone: +91 70015 09132

Address: Bihta, Sheikhpura, Bihar 811105, India

By using MeraVahan, you acknowledge that you have read and understood this Security Policy.