Customer Privacy Policy

Developer and scope

Indiery is the developer and operator of the Indiery Customer app and related delivery platform. This Customer Privacy Policy applies to the customer app, website, tracking, account-deletion, and customer-support services.

For privacy questions, access or correction requests, account deletion, or grievances, contact support@indiery.com.

This policy should be read with the Customer Terms and Conditions and the notice shown immediately before the Customer app requests a sensitive permission.

Account and authentication data

We collect the name, mobile number, email address, city, account role, language choice, profile status, and support information that a user provides.

Phone authentication is provided through Firebase. We process authentication tokens and security information needed to verify a session and protect an account.

We process device push tokens and notification preferences to send booking, payment, safety, account, and delivery-status messages.

Customer booking and location data

For customer bookings, we collect pickup, stop, and drop addresses; sender and recipient names and phone numbers; exact coordinates selected or provided by the user; goods type and weight; vehicle choice; fare, discount, wallet, coin, cancellation, refund, and order-history information.

The customer app accesses precise or approximate location only after permission is granted, such as when the user chooses current location or confirms a pickup or drop point. Location is transmitted to provide place search, route calculation, fare estimation, dispatch, and delivery tracking.

Customers should provide another person's contact details only when authorized to use them for the delivery.

Driver Partner information and live tracking

For an assigned delivery, customers may see the Driver Partner name, phone number, rating, vehicle information, order status, and current delivery location needed to coordinate and track the service.

When a Driver Partner is online or has an active delivery and grants foreground location permission, location may be shown to the relevant customer and through the order private tracking link. The Partner app does not request background location.

Government identification records, bank details, authentication secrets, payment credentials, and delivery OTPs are not displayed to customers or on public tracking pages. Driver Partner data is governed in more detail by the separate Driver Partner Privacy Policy.

Payments and financial information

We process customer payment mode, amount, provider references, payment status, wallet and coin ledger entries, cancellation charges, waiting charges, refunds, and related fraud or dispute information.

Razorpay or another disclosed payment provider handles card, bank, or UPI checkout details. Indiery receives transaction references and status needed to verify payment, but does not intend to store full card numbers, CVV values, UPI PINs, or online-banking passwords.

Payment, payout, tax, accounting, fraud-prevention, and dispute records may be retained when required by law or reasonably necessary to establish or defend legal claims.

Device, diagnostics, and support data

We may process app version, device and operating-system information, network information, notification status, security events, error details, IP-derived approximate information, and support communications needed to operate, secure, diagnose, and improve the service.

We do not sell personal or sensitive user data and do not use it for third-party targeted advertising.

How we use data

We use customer data to create and secure accounts; provide estimates and bookings; match customers with Driver Partners; process payments, refunds, wallets, and Coins; verify pickup and delivery; provide live tracking and notifications; answer support requests; prevent fraud and unsafe conduct; resolve disputes; and comply with tax, accounting, safety, and legal obligations.

We limit access and use to service functionality, security, support, compliance, and other purposes described at the time of collection.

When data is disclosed

Relevant booking details are disclosed between the customer and assigned partner as needed to complete a delivery. Live partner location may be shown to the customer and through the order's private tracking link while tracking is active.

We use service providers for authentication, notifications, maps and place search, payment processing, media storage, cloud hosting, database hosting, diagnostics, support, and fraud prevention. These may include Firebase, Expo, Google Maps, Razorpay, Cloudinary, and our hosting and database providers.

We may disclose information to payment partners, banks, insurers, professional advisers, courts, regulators, law-enforcement bodies, or public authorities when reasonably necessary to comply with law, enforce agreements, investigate fraud, or protect users, Indiery, or the public.

Service providers may process information in India or other countries where they operate, subject to safeguards required by applicable law.

Security

We use HTTPS encryption in transit, authentication tokens, role-based access controls, protected provider credentials, restricted upload flows, and reasonable administrative and technical safeguards.

No system is completely secure. Users should protect their phone, OTPs, and account access and promptly report suspected unauthorized use to support@indiery.com.

Retention and deletion

Account and profile data is kept while the account is active. Operational location, booking, proof, payment, wallet, safety, support, and audit records are retained only for service, verification, fraud prevention, dispute, tax, accounting, safety, and legal needs.

Customers can request deletion from Account settings in the Customer app or from the public account-deletion page. After ownership verification, we process eligible deletion requests without unreasonable delay and may contact the customer if more information or a legal retention period is required.

When a request is completed, we delete or irreversibly de-identify account data that is no longer required. Data retained for payment reconciliation, tax, accounting, fraud prevention, safety, dispute resolution, or another legal obligation is restricted to those purposes and deleted or de-identified when the applicable need ends.

Deleting the app from a device does not by itself delete the user's Indiery account.

Choices, children, changes, and contact

Users may request access, correction, deletion, or grievance support through the app or by emailing support@indiery.com. We may verify identity before acting on a request.

Customers can decline or later disable location or notification permissions in device settings. The related feature may be unavailable, but unrelated app features remain accessible where practical.

The customer service is not directed to children under 18. A customer who is not legally able to enter a contract must use the service through a parent or legal guardian.

We may update this policy when our services, providers, or legal duties change. We will update the effective date and provide additional notice when a change materially affects user rights or data use.