Privacy & Data Security Policy

Kiraayo Tech Private Limited ("Kiraayo", "we", "us", or "our") is dedicated to protecting the privacy and personal data of our users (including Contractors, Owners, and Normal Users). This Policy governs the collection, processing, and storage of your information in compliance with India's Digital Personal Data Protection Act (DPDP Act) 2023 and related regulations.

1. Information We Collect

To provide a verified equipment rental marketplace, we must collect specific identifiers:

• Identity and KYC Details: For Contractors and Users renting machinery, we collect PAN numbers, Aadhaar details (processed via secure third-party DigiLocker/UIDAI bridges), and bank account numbers for escrow disbursements.
• Telemetry and GPS Location Data: Listed heavy machinery is fitted with IoT GPS telematics sensors. We monitor real-time coordinate data, route playback, active engine hours, and ignition logs to bill active hours accurately and protect assets.
• Transactional and Payment Records: Details of escrow payments, GST invoices, Razorpay transaction tokens, and billing histories are securely stored for legal audit compliance.

2. How We Use Your Data

Your data is processed strictly for the following purposes:

• KYC Verification and fraud prevention.
• Calculating engine run times to prevent price disputes between owners and contractors.
• Resolving claims for damage or delayed returns via standard tri-party contracts.
• Fulfilling legal tax (GST) and accounting requirements.

3. Data Retention and Sharing

We do not sell your personal data. We only share details with:

• The other party in a booking:Sharing the contractor's name and machine location with the user, or the user's contact detail with the lister to coordinate transport.
• RBI-Authorized Payments Partners: Gateways and escrow banks to manage security deposits and payouts.
• Government/Legal Authorities: Only when legally compelled or to enforce the terms of the tri-party agreement.

4. Data Fiduciary Contact

Under the DPDP Act 2023, you have the right to access, correct, or erase your personal data. To exercise these rights or file a grievance, contact our Data Protection Officer: