Legal

Privacy Policy

Last updated: May 1, 2026

ORI DRIVE (“we”, “our”, or “us”) is operated by OriDrive. This Privacy Policy describes how we collect, use, and protect information when you use our mobile application (the “App”).

1. Information We Collect

Personal Information

  • Name, email address, phone number — when you log in or are added by your company admin.
  • Employee ID and role — to identify you within your company's transport system.

Location Data

  • Precise location — used during active trips for real-time driver tracking and ETA calculation.
  • Approximate location — used for trip routing.
  • Location data is collected only during active trips and stops when the trip ends.

Camera and Photos

  • We request camera/photos access to allow you to set a profile picture (optional).
  • Images are not stored on our servers unless you upload them as a profile photo.

Device Information

  • Push notification tokens — to deliver trip updates.
  • Device model and OS version — for support and bug fixing.

App Activity

  • Trip history, OTP verification events, and rating submissions.
  • Login/logout events.
  • Crash reports and performance metrics.

2. How We Use Information

  • To provide trip pickup/drop services.
  • To match drivers with employees.
  • To send trip status notifications (driver arrived, trip completed, etc.).
  • To verify identity via OTP for pickup/drop.
  • To enable in-app chat and masked-number calling between driver and employee.
  • To improve app stability and performance.

3. How We Share Information

  • With your company admin — they see all trip activity for accounts under their organization.
  • With assigned drivers — they see your name, pickup point, and trip OTP.
  • With service providers — Exotel/Twilio (masked calling), Google Maps (routing), Firebase Cloud Messaging (push notifications).
  • Never with third parties for marketing purposes.

4. Data Security

  • All data is encrypted in transit using HTTPS (TLS 1.2 or higher).
  • Authentication uses JWT tokens.
  • Phone numbers are masked through Exotel relays — drivers never see your real number.
  • OTPs are single-use and expire after the trip stop completes.
  • Master OTP overrides are auto-generated only after 3 failed normal-OTP attempts and are audit-logged.

5. Your Rights

  • Access: Request a copy of your data via support@oridrive.org.
  • Deletion: Request account deletion via support@oridrive.org. We will remove your account within 30 days, retaining only data legally required for accounting.
  • Correction: Update profile info via the in-app Profile screen.
  • Withdraw consent: Stop using the app at any time; uninstalling the app removes all locally stored data immediately.

6. Children's Privacy

ORI DRIVE is not intended for users under 18. We do not knowingly collect data from children under 18.

7. International Data Transfers

If you use the app from outside India, your data is transferred to and processed in India where our servers are hosted. By using the app you consent to this transfer.

8. Retention

  • Trip data is retained for 2 years for billing, audit, and dispute resolution purposes.
  • Failure logs and crash reports are retained for 30 days.
  • Account data is retained while your account is active and for up to 30 days after deletion.

9. Changes to this Policy

We may update this policy from time to time. The updated version will appear at this URL with a new “Last updated” date. Continued use of the app after changes means you accept the updated policy.

10. Contact Us

OriDrive

For privacy questions or data requests specifically, please email support@oridrive.org with the subject line “Privacy Request”.