Book your trip.
A verified driver comes to you.

Privacy Policy

1. Introduction

E-One Source Services Inc. ("Company," "we," "us," or "our"), which operates the driver-booking platform under the brand DriveNova (the "Platform," comprising our mobile application, website, and related services), is committed to protecting the privacy of every individual whose personal data we handle.

This Privacy Policy ("Policy") explains how we collect, use, store, disclose, transfer, retain, and protect your personal data, and describes the rights available to you. It is issued in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made thereunder, the Information Technology Act, 2000, and applicable data-protection principles.

For the purposes of the DPDP Act, the Company acts as the Data Fiduciary that determines the purpose and means of processing your personal data, and you are the Data Principal to whom the personal data relates.

By accessing or using the Platform, or by otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy. Where processing is based on consent, we will obtain your consent separately in accordance with applicable law.

2. Scope and Applicability

This Policy applies to all Data Principals who interact with the Platform, including customers, drivers, and website visitors. It governs personal data processed in digital form, as well as personal data collected in non-digital form that is subsequently digitised.

This Policy does not apply to personal data processed by third parties whom we do not own or control, including third-party services referenced in Section 17. Your use of those services is governed by their respective privacy policies.

3. Definitions

Term	Meaning
Data Principal	The individual to whom personal data relates, including, where the individual is a child, their parent or lawful guardian.
Data Fiduciary	The person who, alone or with others, determines the purpose and means of processing personal data — in this Policy, the Company.
Data Processor	Any person who processes personal data on behalf of the Company under a valid contract.
Personal Data	Any data about an individual who is identifiable by or in relation to such data.
Processing	Any operation performed on personal data, such as collection, recording, storage, use, sharing, disclosure, or erasure.
Consent Manager	A registered person who enables a Data Principal to give, manage, review, and withdraw consent through an accessible platform.

4. Information We Collect

We collect only such personal data as is necessary for the specified purposes described in this Policy. The categories of data we may collect are set out below.

4.1 Information You Provide to Us

• Identity data: full name, and where applicable date of birth or government-issued identifiers required for driver verification.
• Contact data: email address, mobile phone number, and postal address.
• Account credentials: username and securely hashed authentication credentials.

4.2 Booking Information

• Pickup location and destination.
• Date, time, and status of each booking.
• Booking and trip history.

4.3 Location Information

With your permission, we collect precise or approximate device location to identify your pickup point, assign an available driver to your booking, support your trip, and improve service quality. You may disable location access through your device settings, although certain features may then be unavailable.

4.4 Payment Information

Where payments are processed through the Platform, we collect the payment method, transaction amount, and billing information. We do not store complete credit or debit card numbers; card payments are handled by PCI-DSS-compliant payment processors. Where a booking is settled directly with the driver, we record only your selected payment method and transaction details.

4.5 Technical and Device Information

• Application version, device model, operating system, and device identifiers.
• Log data, including IP address, access times, and diagnostic or crash information.

5. How We Collect Your Information

• Directly from you, when you register, book, communicate with support, or otherwise interact with the Platform.
• Automatically, through your device and our systems as you use the Platform, including via cookies and similar technologies.
• From third parties, such as payment processors, mapping providers, and communication service providers, in the course of delivering our services.

6. Grounds for Processing

Consistent with the DPDP Act, we process personal data only on lawful grounds. Depending on the activity, we rely on one or more of the following:

• Consent: where you have given free, specific, informed, unconditional, and unambiguous consent for one or more specified purposes.
• Certain legitimate uses recognised under the DPDP Act, including the voluntary provision of data for a specified purpose, provision of a service you have requested, compliance with legal obligations, and responding to medical or safety emergencies.

Where processing relies on consent, you may withdraw that consent at any time as described in Section 10; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. How We Use Your Information

• To create, verify, and administer your account.
• To process bookings and assign an available driver to your trip.
• To confirm, manage, and update reservations, and to send service-related notifications.
• To process payments and maintain transaction records.
• To provide customer support and respond to your requests.
• To maintain the safety, security, and integrity of the Platform, and to detect, prevent, and address fraud or misuse.
• To analyse and improve our services, features, and user experience.
• To comply with applicable legal and regulatory obligations.

8. How We Share and Disclose Your Information

We do not sell your personal data. We may share personal data only as necessary and with appropriate safeguards, including with:

• Drivers assigned to your booking, limited to the information required to fulfil the trip.
• Data Processors and service providers — such as cloud hosting, payment, mapping, and communication providers — who process data on our behalf under binding contractual obligations of confidentiality and security.
• Government, regulatory, or law-enforcement authorities, where disclosure is required by law or necessary to protect rights, safety, or property.
• Successor entities, in connection with a merger, acquisition, or reorganisation, subject to this Policy.

9. International Data Transfers

Your personal data is primarily processed and stored on servers located in India. Where personal data is transferred to or accessed from outside India (for example, by a cloud or service provider), we do so in accordance with the DPDP Act and any restrictions notified by the Central Government, and we implement contractual and technical safeguards to ensure a comparable standard of protection.

10. Your Rights as a Data Principal

Subject to applicable law, you have the following rights in relation to your personal data:

Right	What it means
Right to access	Obtain a summary of the personal data we process about you and the processing activities undertaken.
Right to correction and updating	Request correction, completion, or updating of inaccurate or incomplete personal data.
Right to erasure	Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, unless retention is required by law.
Right to withdraw consent	Withdraw previously given consent at any time, as easily as it was given.
Right to grievance redressal	Have your complaints addressed by our Grievance Officer within the timelines prescribed under applicable law.
Right to nominate	Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, please contact our Grievance Officer using the details in Section 15. We may verify your identity before acting on a request.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required to comply with legal, regulatory, accounting, or reporting obligations. Retention periods are determined based on the duration of your relationship with us, the need to maintain booking and transaction records, the need to resolve disputes and enforce our agreements, and applicable statutory limitation and record-keeping requirements.

When personal data is no longer required, we will erase it or anonymise it in a secure manner.

Account deletion. When you delete your account, your account and personal information are permanently deleted. However, your booking history is retained for legal and safety purposes, and your identity records are retained in a restricted archive for 3 years for legal compliance, after which they are securely deleted. For step-by-step instructions, see our Account Deletion page.

12. Data Security

We implement reasonable and appropriate technical, administrative, and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, as appropriate, encryption in transit, access controls, authentication, logging and monitoring, and periodic review of our security practices.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security, and any transmission of data is at your own risk.

13. Personal Data Breach Notification

In the event of a personal data breach, we will take prompt remedial action and will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act and applicable rules.

14. Children's Privacy

The Platform is not directed at children, and we do not knowingly process the personal data of any individual below the age of eighteen (18) years without the verifiable consent of a parent or lawful guardian. In respect of children, we do not undertake tracking, behavioural monitoring, or targeted advertising. If we become aware that we have collected such data without the required consent, we will delete it promptly.

15. Grievance Officer and Contact Information

If you have questions, requests, or concerns regarding this Policy or the processing of your personal data, or wish to exercise your rights, please contact our Grievance Officer:

Detail	Information
Data Fiduciary	E-One Source Services Inc.
Grievance Officer	Yogananda
Email	grievance@drivenova.ai
Phone	+91 9036065769
Website	drivenova.ai

We will acknowledge and endeavour to resolve your grievance within the timelines prescribed under applicable law.

16. Cookies and Similar Technologies

Our website may use cookies and similar technologies to enable core functionality, remember your preferences, analyse traffic, and enhance your experience. You can control or disable cookies through your browser settings, though some features may not function properly as a result.

17. Third-Party Services

The Platform may integrate third-party services, including mapping services (such as Google Maps or equivalent), communication services (such as Twilio), and cloud/backend services (such as Supabase). These providers process data under their own privacy policies, and we encourage you to review them.

18. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with a revised "Effective Date" and, where required, we will provide additional notice or seek fresh consent. Your continued use of the Platform after the changes take effect constitutes acceptance of the updated Policy.