Privacy Policy

1. Data we collect

We collect only what we need to run the platform and complete your deliveries:

Account data: your mobile number (used for OTP sign-in) and your name.
Booking data: pickup and drop addresses, sender and receiver names and phone numbers, pickup date and time slot, parcel type, goods category, declared value, e-way bill number, and the LR number of each booking.
Goods photos: up to 3 photos of the goods you choose to upload with a booking.
Business data: your GSTIN, if you add it for business billing.
Location data: the pickup and drop locations you choose on the map, and, during an active trip, the driver-partner’s live location (see Section 3).
Trip records: pickup and delivery OTP verification, proof of delivery, the receiver’s name recorded at delivery, and in-app chat messages between you and the driver-partner.
Payment data: payment status, amounts and transaction references from our payment gateway partner.
Device data: a push notification token so we can send you booking updates, and basic technical information such as app version and device type needed to keep the app working.
Support data: messages you send us, for example by email.

We do not collect or store your card number, CVV or UPI PIN. These are entered directly with our payment gateway partner. We do not sell personal data.

2. How we use your data

To create and secure your account, including OTP verification.
To quote prices, take payment, and issue GST invoices.
To match your booking with a driver-partner or transport partner and share the details they need to perform it.
To verify pickup and delivery with OTPs, record proof of delivery, and show live tracking.
To send the receiver a tracking link and delivery OTP by SMS or WhatsApp, and to send you booking updates by push notification, SMS or WhatsApp.
To handle support requests, cancellations, refunds, claims and grievances.
To prevent fraud, abuse and the movement of prohibited goods, and to keep partners and customers safe.
To comply with tax, transport and other legal obligations, and to respond to lawful requests from authorities.
To understand how the platform performs and improve it, using aggregated or de-identified data where possible.

3. Location data

We use location to set pickup and drop points and to show you where your goods are. If you allow it, the app may use your device location to help you pick an address; you can instead type or search for an address.

During an active trip, the driver-partner’s live location is shared with you, and with the receiver through the tracking link, so you can follow the delivery. Live trip location is shared only while the trip is in progress.

We process personal data on the basis of the consent you give when you sign up and when you place a booking, and for legitimate uses permitted by the DPDP Act, such as complying with law and responding to emergencies. Our consent request is in plain language and tells you what we collect and why.

You can withdraw consent at any time by deleting your account in the app or writing to us. Withdrawal does not affect processing already done, and we may not be able to provide the service without the data it needs. We may keep data needed to complete a booking already in progress or to meet legal obligations.

When you enter another person’s details, such as a receiver’s name and phone number, you confirm that they have agreed to be contacted about the delivery.

We share personal data only where needed to provide the service:

Partners: the driver-partner or transport partner assigned to your booking sees the names, phone numbers, addresses and goods details needed to collect and deliver the goods.
Receivers: the receiver gets the tracking link, delivery OTP and trip status for their delivery.
Service providers: our payment gateway, SMS and WhatsApp messaging, maps, push notification, cloud hosting and file storage providers, who process data only on our instructions and under contract.
Insurance partner: if optional transit cover becomes available and you choose it, the booking details the insurer needs.
Authorities: where required by law, court order or a lawful government request, or to protect the safety of any person.
Business transfers: a successor entity if our business is merged, acquired or restructured, subject to this policy.

Some service providers may process data outside India. Where they do, we take steps to ensure the transfer is permitted under Indian law and the data stays protected.

6. How long we keep data

We keep personal data only as long as needed for the purposes above. Booking, invoice and payment records are kept for as long as tax, accounting and other laws require, generally up to 8 years. Goods photos, chat messages and trip location are kept for as long as needed to complete the booking and handle any claims or disputes about it.

When you delete your account, we erase or anonymise your personal data within 90 days, except for records we must keep by law or to resolve a pending dispute, claim or investigation.

7. Your rights

Under the DPDP Act you have the right to:

Access: get a summary of the personal data we hold about you and how we use it.
Correction and completion: ask us to correct inaccurate or incomplete data. You can update most account details in the app.
Erasure: ask us to delete your data. You can request deletion of your account directly in the app.
Withdraw consent: withdraw consent at any time, as described in Section 4.
Grievance redressal: raise a complaint with our Grievance Officer and, if it is not resolved, with the Data Protection Board of India.
Nomination: nominate another person to exercise your rights in case of death or incapacity.

To exercise these rights, write to hello@bookroket.com from or quoting your registered mobile number, with the subject line "Data Rights Request". We may need to verify your identity. We will respond within 30 days.

8. Security

We use reasonable security safeguards, including encryption in transit, short-lived sign-in tokens, access controls on a need-to-know basis, and private file storage: goods photos and documents are not publicly accessible and are shown only through links that expire. No system is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as the law requires.

9. Children

Bookroket is meant for people aged 18 and over. We do not knowingly collect personal data from children or track or target them. If you believe a child has given us personal data, contact us and we will delete it.

10. Cookies

Our website does not currently use tracking or advertising cookies. See our Cookie Policy for details.

11. Grievance Officer

In line with the DPDP Act, 2023 and the Information Technology Act, 2000 and rules made under it, you can contact our Grievance Officer about how your personal data is handled.

Grievance Officer: write to hello@bookroket.com with the subject line "Grievance". The name and postal address of our Grievance Officer will be published on this page once formally designated.

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days of receipt.

12. Changes to this policy

We may update this policy when our practices or the law change. The current version is always on this page with its last updated date. If a change materially affects how we use your data, we will notify you in the app or by SMS before it takes effect and, where the law requires, ask for your consent again.