Privacy Policy
Effective date: 4 July 2026
Trap is operated by Novetum Private Limited (Private Limited), 1-90/7/B/121, HUDA Techno Enclave, Madhapur, Hyderabad, Telangana 500081 (the "Company", "we", "us").
This policy is aligned with India's Digital Personal Data Protection Act, 2023 (DPDP).
1. Who we are
This policy explains how we collect, use, store, and share your personal data when you use Trap to rent electric two-wheelers in Hyderabad, India.
2. Data we collect
| Category | Examples | Why |
|---|---|---|
| Identity & contact | Name, phone number, email address | Account creation, login (phone + OTP / Google), communication |
| KYC | Driving Licence number and image | Legal eligibility to ride; verified via a licensed verification provider |
| Location | Delivery/drop coordinates; live location of the delivery rider during an active delivery | Geocoding the address, computing distance/fare, delivery tracking |
| Booking & usage | Ride dates, vehicle, pickup/return, handover photos | Fulfilling and recording the rental |
| Payment | UPI/card transactions, deposit, refunds | Processed by Razorpay; we store transaction IDs and status, not full card numbers |
| Device | Push notification (FCM) token, device/app diagnostics | Sending notifications, security, debugging |
We do not knowingly collect data from anyone under 18. A valid driving licence (18+) is required to use the Service.
3. How we use your data
- Create and manage your account and verify eligibility (KYC).
- Quote fares, take payment and security deposits, and process refunds.
- Arrange hub pickup or doorstep delivery, including live delivery tracking.
- Send transactional messages (OTP, booking, payment, delivery, deposit status) by SMS, email, and push.
- Prevent fraud, enforce our Terms, and meet legal obligations.
We rely on your consent (given at sign-up and per the DPDP notice) and on the necessity to perform the rental contract as our legal bases.
4. How we share data
- Razorpay — payment processing (their privacy policy governs payment data).
- KYC verification provider — to validate your driving licence.
- Google Maps / Ola Maps — geocoding and distance/ETA.
- AWS — cloud hosting/storage; Amazon Cognito for authentication; Firebase Cloud Messaging for push.
- Government/legal — when required by law or to protect rights and safety.
We do not sell your personal data.
5. Storage & retention
- Data is stored on AWS infrastructure. KYC licence images are kept in a restricted, non-public store.
- Handover photos are auto-purged ~3 months after the ride.
- We retain booking, payment, and KYC records as long as needed for the Service and to meet legal/tax/audit obligations, then delete or anonymise them.
6. Your rights (DPDP)
You may access, correct, or update your data; withdraw consent; request deletion; and nominate a representative. To exercise these, contact our Grievance Officer below. We respond within the timelines required by law.
7. Security
Encryption in transit, access controls, private storage for sensitive data, and tokenised payments via Razorpay. No system is perfectly secure; we work to protect your data and will notify you and the Data Protection Board of material breaches as required.
8. Grievance / Data Protection Officer
Jaya Prakash — systems@novetum.com, +91 9000149014, 1-90/7/B/121, HUDA Techno Enclave, Madhapur, Hyderabad, Telangana 500081.
9. Changes
We may update this policy; material changes will be notified in-app or by email. Continued use after the effective date means you accept the update.
Questions? Email systems@novetum.com or call +91 9000149014.