Legal

Privacy Policy

Last updated: July 2026. Your data belongs to you. Here's exactly what we collect, why, and how you stay in control.

Plain-English summary: We collect only what we need to run your rides safely — name, phone, payment token, and location during trips. We never sell your data. You can download or delete everything from Settings → Privacy. Full detail below.

1. Who We Are

88 Taxi Technologies ("88 Taxi", "we", "us") is the data controller for the rider app, driver app, dispatcher dashboard and marketing website operated at 88taxi.co. For white-label operators, 88 Taxi acts as a data processor and the operator is the data controller for their branded service.

2. Information You Provide

When you sign up as a rider we collect your name, mobile number, email, profile photo (optional), and payment method tokens. Drivers additionally provide license number, vehicle documents, bank account for payouts, and photos for KYC verification. Operators provide business name, GST number, contact person, and payment details for the ₹10/day subscription.

3. Information Collected Automatically

We collect device information (model, OS, unique identifiers, crash logs), IP address, app usage events, ride history, chat messages between rider and driver, ratings, and precise GPS location while the app is in use or actively navigating a trip. Location is essential to match riders with drivers, calculate fares, provide navigation and enable safety features like live trip sharing.

4. How We Use Your Data

We process personal data to (a) create and secure your account, (b) match riders with nearby drivers, (c) calculate fares and process payments, (d) provide customer support, (e) send transactional notifications (booking confirmations, receipts, safety alerts), (f) prevent fraud and abuse, (g) comply with legal obligations such as tax filings, and (h) improve the platform through aggregated analytics. Marketing messages are only sent with your explicit opt-in.

5. Legal Basis (GDPR / DPDP)

Where applicable, we rely on: performance of a contract (to provide the ride you booked), legitimate interest (fraud prevention, platform security), legal obligation (tax, court orders), and consent (marketing, optional features like ride recording). You may withdraw consent at any time from the app settings.

6. Who We Share Data With

We share limited data with: the driver assigned to your ride (name, photo, pickup location), payment processors (Razorpay, Stripe) to process payments, mapping providers (Google Maps, Mapbox) for routing, SMS providers (Twilio, MSG91) for OTP delivery, cloud infrastructure (AWS, Firebase), and law enforcement or regulators when legally required. We never sell your personal data to advertisers.

7. White-Label Operators

If you use a branded app built on 88 Taxi, the operator running that brand is the data controller for your ride and profile data. 88 Taxi hosts and processes the data on their behalf under a Data Processing Agreement. Questions about your data should first be addressed to the operator; we will assist where required.

8. Location Data

We collect precise GPS location: (a) continuously while the driver app is online, (b) when a rider opens the app to see nearby cars or book a trip, and (c) during an active trip until drop-off is confirmed. You can disable location at the OS level, but the Service will not function without it.

9. Cookies & Analytics

Our website uses essential cookies for authentication and preference storage, and privacy-friendly analytics (aggregate page views, no cross-site tracking). You can control cookies from your browser settings. The mobile apps do not use advertising SDKs or cross-app trackers.

10. Data Retention

Ride records are retained for 7 years to comply with Indian tax and transport regulations. Chat messages between rider and driver are retained for 90 days. Support tickets are retained for 2 years. Deactivated accounts are anonymized within 30 days of your deletion request, except records we are legally required to keep.

11. Security

We protect your data with TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access control, mandatory MFA for staff accessing production, quarterly third-party penetration testing, and 24×7 SOC monitoring. Payment card data is never stored on our servers — it is tokenized by our PCI-DSS certified payment partners.

12. Your Rights

You have the right to access, correct, download, or delete your personal data, restrict or object to processing, and lodge a complaint with a supervisory authority. To exercise any right, email privacy@88taxi.co from your registered address; we will respond within 30 days. Most rights can also be exercised directly from Settings → Privacy in the app.

13. Children

88 Taxi is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with data, contact us and we will delete it promptly.

14. International Transfers

Primary data storage is in India (Mumbai region). Some sub-processors (e.g. Google Maps, Firebase) may process data in the EU or US. Where data leaves India, we rely on Standard Contractual Clauses and equivalent safeguards.

15. Data Breach Notification

In the event of a personal data breach likely to result in risk to your rights, we will notify affected users and the relevant supervisory authority within 72 hours of becoming aware, with a description of the breach, likely impact, and steps taken to mitigate.

16. Changes to This Policy

We will update this policy as our platform evolves. Material changes are notified via email and in-app banner at least 15 days before taking effect. The "Last updated" date at the top always reflects the current version.

17. Contact Our DPO

For any privacy-related concern, contact our Data Protection Officer at service@makemeglobal.org or write to DPO, 88 Taxi, 12th Floor, Mani Casadona IT Park, Kolkata, West Bengal 700156, India.