Privacy policy

Charters is operated by TYLT TECHNOLOGIES PRIVATE LIMITED, Bengaluru, Karnataka, India ("we", "us"). For the data of a vendor's or company's own trips, passengers and drivers, that vendor or company decides why the data is used (it is the Data Fiduciary) and we process it on its behalf (as its Data Processor). For accounts, billing of Charters itself and the security of the platform, we are the Data Fiduciary.

Privacy questions, requests and grievances: raghavbn@gmail.com.

• Vendors and companies (workspace users): name, work e-mail, mobile number, role, company name, GSTIN / PAN, billing address, bank details for payouts, sign-in history and the settings you choose.
• Passengers and employees: name, mobile number, e-mail, employee ID and cost centre (when the company provides them), pickup and drop places, home pickup point for office commute, trip history, ratings and feedback, special requests, and the Start OTP for each trip.
• Drivers: name, mobile number, photo, driving licence and other documents the vendor uploads, vehicle details, duty history, earnings and, while on duty, the phone's location (see section 4).
• Messages: WhatsApp, SMS, e-mail and in-app messages sent to you about trips (confirmations, driver details, tracking links, Start OTPs, invoices, payment links) and messages you send to Charters — including text, shared locations, voice notes, photos and button replies on WhatsApp — and their delivery status.
• Calls: when you call a driver or passenger through Charters, both numbers stay masked; we keep the call time and duration, not the content, unless a recording is announced at the start of the call.
• Payments: amounts, invoice and receipt numbers and payment references. Card, UPI and bank credentials are handled by the payment gateway (Razorpay); we never see or store them.
• Safety: SOS alerts, safe-drop confirmations, escort check-ins and the location at that moment.
• Technical: device type, app version, IP address, push-notification token and error logs, used to run and secure the service.

• To book, approve, dispatch, track, complete and bill trips, and to show each party only what it needs (for example, a company never sees a sub-vendor's rates).
• To send trip messages on WhatsApp, SMS, e-mail and app notifications, and to understand and answer the messages you send us (for example, a booking request on WhatsApp).
• For safety: live tracking during a trip, SOS, safe-drop checks for night drops and alerts when a vehicle stops or leaves its route.
• To produce duty slips, invoices, tax records and reports the law or your contract requires.
• To keep the platform secure, prevent fraud and fix problems.

We process personal data on the basis of your consent, given when you sign up, accept a trip or message us, or for the legitimate uses the DPDP Act allows — for example, where you provided the data for a trip you asked for, for employment-related transport arranged by your employer, to comply with law, or in a medical emergency or threat to safety. We do not sell personal data and do not use it for advertising.

The Charters Driver app records the phone's location only while the driver is on a duty (from going on duty until the duty is closed) to show the trip to the passenger, the vendor and the company, to calculate kilometres and to raise safety alerts. It does not track drivers off duty. Passengers' locations are used only when they share them (for example, sending a pickup location on WhatsApp) or press SOS.

Trip messages are sent through the WhatsApp Business Platform (Meta Platforms), SMS gateways registered on India's DLT system, and e-mail services (Amazon SES, Brevo), either from Charters's accounts or from a vendor's or company's own accounts. These providers receive the phone number or e-mail address and the message content only to deliver the message. You can ask your vendor or company, or write to us, to stop non-essential messages, and you can block a WhatsApp number at any time; messages needed for an ongoing trip or for safety continue while the trip is active.

• The vendor, partner vendor, company and driver involved in a trip — only the details each needs for that trip.
• Service providers that help us run the platform: cloud hosting in India (Amazon Web Services, Mumbai region) and Vercel, maps (Google Maps, Ola Maps), messaging (Meta WhatsApp, SMS gateways, Amazon SES, Brevo), payments (Razorpay) and flight status. They may use the data only to provide their service to us.
• Authorities, when the law requires it or to protect someone's safety.

Data is stored in India. Phone numbers, e-mail addresses, message content and other personal fields are encrypted at rest with keys kept separately per workspace; connections are encrypted in transit; access is limited by role and logged. If a personal data breach happens, we will inform the Data Protection Board of India and the affected people as the DPDP Act requires.

• Trip, duty slip, invoice and payment records: as long as tax and accounting law requires (currently up to 8 years), then deleted or anonymised.
• Detailed GPS points: up to one year, after which only the trip route summary and kilometres are kept with the trip record.
• Messages and conversation history: while the workspace that sent them is active, or until deletion is requested.
• Account data: until the account is closed or deletion is requested, apart from what the law requires us to keep.

Under the DPDP Act you may ask for a summary of your personal data and how it is processed, have it corrected or completed, have it erased (see data deletion), withdraw consent, nominate someone to exercise these rights on your behalf, and raise a grievance. Write to raghavbn@gmail.com; we reply within 30 days. If your data belongs to a vendor's or company's trips, we may pass your request to them and help them answer it. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Charters is meant for adults. A child may travel as a passenger on a trip booked by a parent, guardian or school; we process only the details needed for that trip.

We will post changes to this policy on this page and update the date at the top; important changes will also be shown in the app.