Privacy Policy

DriveU Booking Status · Effective 4 November 2026

1. About this policy

DriveU Mobility Solutions Private Limited ("DriveU", "we") runs the DriveU Booking Status portal ("Portal") at getrightcover.driveu.info. The Portal is used to monitor running bookings, record issues on bookings and download booking reports. This policy explains what personal data the Portal handles and why. It covers this Portal only, not DriveU's consumer apps or the website at www.driveu.in.

2. Data we collect about Portal users

• Google account details: when you sign in with Google, we receive your name, email address and a link to your profile picture. Your name and email are stored. The picture link is only held inside your encrypted session cookie, and is neither displayed nor stored in our database.
• Account records: your sign-up date and time, and whether your access is pending, approved or rejected.
• One-time codes: the 6-digit login code is emailed to you. Only a scrambled (hashed) copy is held, in server memory, and it expires after 5 minutes.
• Issue activity: when you raise an issue, we store your email address, the date and time, and your remark. When you resolve an issue, we store your name, the date and time, and the action taken.
• Technical logs: our hosting provider records requests to the Portal, which can include your IP address, browser type and the page requested. Technical errors are also logged.

3. Customer and driver data shown in the Portal

Approved users can view booking details read from DriveU's booking systems: booking ID and type, customer or organisation name, driver name, city, pincodes, trip times and booking status. The Portal does not store this booking data, apart from the booking ID linked to an issue record. Remarks and actions are free text, and should only contain what is needed to handle the issue. Reports you download are saved to your own device, and you are responsible for protecting them.

4. How we use the data

• To verify who you are, sign you in and keep your session secure.
• To let the admin review sign-ups and approve or reject access, including emailing the admin when someone signs up.
• To record who raised and resolved each issue and when, for accountability and reporting.
• To keep the Portal running, investigate faults and detect misuse.

We do not sell your personal data, and we do not use it for advertising.

5. Who can see it

• The Portal admin can see the name, email, sign-up time and access status of everyone who has signed up.
• Approved users can see issue records, and can see who raised and resolved an issue in the reports.
• Authorised DriveU technical staff can access the data to maintain and secure the Portal.
• We may disclose data where the law or a competent authority requires it.

6. Service providers and international transfer

We use these providers to run the Portal, and they process data on our behalf or under their own terms:

• Google: Google sign-in, sending emails through Gmail, and hosting on Google Cloud. The Portal runs in Google's United States region, so your data may be processed outside India.
• ImageKit: serves the DriveU logo. Your browser requests the image from ImageKit, which can see your IP address.

7. How long we keep it

• One-time codes: up to 5 minutes, and sooner if the server restarts.
• Login session: up to 12 hours, or until you sign out.
• Account and issue records: kept while they are needed for operations, audit and reporting, with no automatic deletion date. A record is cleared if its issue is set back to "No issues".
• Technical logs: kept for the period set by our hosting configuration.

8. Security

The Portal requires Google sign-in, a one-time code and admin approval. Traffic to the Portal uses HTTPS, database connections are encrypted, and session cookies are encrypted and cannot be read by page scripts. No system is completely secure, so please tell us promptly if you suspect misuse.

9. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, withdraw consent, nominate someone to act for you, or raise a grievance. Contact us using the details below. If you withdraw consent or your data is erased, you may no longer be able to use the Portal, and we may keep records where the law requires it. If you are not satisfied with our response, you may approach the Data Protection Board of India.

10. Cookies

The Portal only uses cookies needed for sign-in and security. See the Cookie Policy.

11. Changes

We may update this policy and will change the effective date above when we do.

12. Contact

For privacy questions, requests or grievances: