Privacy Policy

Welcome to Gear On ("we", "our", or "us"). Gear On is a self-drive vehicle rental platform operating across India, accessible through our mobile application and website (gearon.xyz).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our mobile application. Please read this policy carefully. If you disagree with its terms, please discontinue use of our platform.

By using Gear On, you consent to the practices described in this Privacy Policy.

We collect information you provide directly to us when you register, book a vehicle, or contact support:

• Personal Identifiers: Full name, email address, mobile number, date of birth.
• Payment Information: UPI IDs, card details (processed securely via third-party gateways; we do not store raw card data).
• Location Data: GPS location during active booking sessions to enable vehicle tracking, pickup coordination, and safety features (only with your permission).
• Device & Usage Data: Device model, OS version, browser type, pages visited, and in-app actions — collected automatically via analytics tools.
• Communication Data: Messages and content you share with our customer support team.

We use the information we collect for the following purposes:

• Create and manage your Gear On account.
• Process bookings, payments, deposits, and refunds.
• Send booking confirmations, reminders, and service-related communications via SMS, email, or in-app notifications.
• Provide customer support and resolve disputes.
• Improve our platform, prevent fraud, and ensure safety of users and vehicles.
• Send promotional offers and updates (you may opt out at any time).
• Comply with applicable legal obligations under Indian law.

We do not sell or rent your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: Trusted third-party vendors (payment processors, SMS gateways, cloud hosting, analytics) who assist us in operating our platform, bound by data processing agreements.
• Vehicle Partners: Minimal necessary information (booking ID, pickup details) shared with vehicle partners to fulfil your rental.
• Legal Authorities: When required by law, court order, or government authority under applicable Indian regulations.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred — you will be notified via email and/or a prominent notice on our platform.

All third-party service providers are contractually obligated to protect your data and use it solely for the purposes specified.

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained for the duration of your account and up to 3 years after closure for legal and audit purposes.
• Transaction and booking records are retained for 7 years to comply with Indian financial regulations.
• Identity documents are securely stored for 1 year after your last booking, then permanently deleted.
• Location data is retained for 90 days after a completed trip for dispute resolution.

You may request deletion of your data by contacting us (see Section 8). Deletion requests are subject to applicable legal retention requirements.

Our website uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the website to function correctly (session management, security).
• Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). Data is aggregated and anonymised.
• Preference Cookies: Remember your settings and preferences for a better experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. Our mobile app uses similar SDKs for crash reporting and analytics.

We take the security of your information seriously and implement industry-standard measures:

• All data transmission is encrypted using TLS 1.2 / 1.3 (HTTPS).
• Sensitive data at rest is encrypted using AES-256 encryption.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• We conduct periodic security audits and vulnerability assessments.
• Payment information is handled by PCI-DSS-compliant payment gateways.

However, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach, we will notify affected users and relevant authorities as required by law within 72 hours.

Under applicable data protection laws in India, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time via app settings or by emailing us.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing of your data for certain purposes.

To exercise any of these rights, please contact us at support.gearon@gmail.com. We will respond within 30 days.

Gear On services are intended for users who are 18 years of age or older and hold a valid driving licence. We do not knowingly collect personal information from individuals under 18.

If we become aware that we have inadvertently collected personal data from a minor, we will promptly delete such information. If you believe a minor has provided us with personal data, please contact us immediately.

Our platform may contain links to third-party websites or services (e.g., Google Play Store, Apple App Store, payment portals). These third parties have their own privacy policies, and we do not accept any responsibility or liability for their practices.

We encourage you to review the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time. When we make changes:

• The "Last Updated" date at the top of this page will be revised.
• For significant changes, we will notify you via email or in-app notification at least 7 days before they take effect.
• Continued use of Gear On after the effective date constitutes your acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, a Grievance Officer has been designated:

• Name: Gear On Privacy Team
• Email: support.gearon@gmail.com
• Response Time: Within 30 days of receiving your grievance.