1. Introduction

Welcome to TVAR ("we," "our," or "us"). We operate the TVAR ASSOCIATES application ("App") designed for restaurant owners and merchants to manage their food menus, incoming customer orders, kitchen preparation times, inventory, and settlements.

This Privacy Policy explains how we collect, use, store, process, and protect your information when you access or use our App. It is prepared in strict accordance with the Google Play Developer Program Policies (User Data & Data Safety) and the Digital Personal Data Protection Act (DPDP Act), India.

By registering, logging into, or using the App, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We collect only the minimum data necessary to enable reliable merchant onboarding, order fulfillment, and transaction record-keeping:

• Account & Business Profile Information:
  • Merchant representative name, phone number, and official email address.
  • Restaurant name, commercial address, landmark, and pin code.
  • Legal and compliance details: TIN number And Certificate.
• Financial & Settlement Information:
  • Bank account number, IFSC code, and account holder name or UPI Virtual Payment Address (VPA) required for remitting order payouts. (Note: Payment card credentials such as CVV or full card numbers are never accessed or stored by our App; payment gateways process transactions directly via PCI-DSS compliant channels).
• Location Data:
  • Coarse & Precise Location: Collected during outlet onboarding and configuration to accurately pin the kitchen/restaurant location on the delivery network and calculate customer delivery radii. Location data is collected while using the app and not tracked silently in the background when not in use.
• App Activity & System Information:
  • Device model, operating system version, unique device identifiers, and crash logs collected for diagnostic stability and fraud prevention.

3. Purpose of Data Collection

We process your personal and business data strictly for the following purposes:

• Order Processing & Fulfillment: To alert your kitchen of new orders, display customer order specifications, and coordinate delivery handovers.
• Payouts & Accounting: To disburse completed order settlements directly into your designated bank account and generate GST-compliant invoices.
• Authentication & Security: To send one-time passcodes (OTP) for secure merchant logins and verify merchant identity.
• Platform Health & Bug Resolution: To diagnose software crashes, prevent fraudulent account activity, and maintain system integrity.

4. Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal data to data brokers or third-party advertisers. We share data solely with trusted technical service providers operating under strict confidentiality obligations:

• Cloud & Database Infrastructure: Secure cloud servers hosting databases and API operations.
• Payment Gateways: Regulated third-party payment gateways to execute automated payouts and settlements.
• Communication & Verification Providers: SMS gateway providers and transactional email providers to dispatch verification OTPs and invoice receipts.
• Delivery Partners & Customers: Limited to the restaurant's operational name, address, contact telephone, and preparation status to facilitate pickup.
• Legal Authorities: When mandated under applicable Indian law, judicial summons, or regulatory inquiries.

5. Data Security Standards

We enforce industry-standard administrative, physical, and technical safeguards:

• Encryption in Transit: All traffic between the App and backend servers is encrypted using modern Transport Layer Security (HTTPS / TLS 1.2+) protocols.
• Access Controls: Database and administrative access is strictly restricted through role-based permissions and authenticated endpoints.

6. Data Retention and Account Deletion

• Retention Period: We retain merchant profile data as long as your merchant account remains active. Financial records, payout summaries, and invoice histories are retained for up to 7 years to comply with Indian statutory and tax regulations.
• Right to Erasure / Account Deletion: In accordance with Google Play's Account Deletion Policy and India's DPDP Act, you can request the full deletion of your merchant account and associated personal data at any time:
  • Via Web Email: Email our Grievance Officer with the subject line "Account Deletion Request". Deletion requests are fulfilled within 30 days, excluding data required to be held under tax or financial laws.

7. Your Rights Under the DPDP Act (India)

As a Data Principal under the Digital Personal Data Protection Act, you possess the right to:

• Confirm whether TVAR ASSOCIATES is processing your personal information.
• Access a summary of personal data held about your account.
• Request correction of inaccurate, outdated, or incomplete details.
• Withdraw consent at any time (which may impact your ability to receive new orders on the platform).
• Nominate an individual to exercise these rights in the event of incapacity.

8. Grievance Redressal Officer

If you have any questions, concerns, complaints, or wish to exercise your data rights, contact our designated Grievance Officer:

• Entity: TVAR ASSOCIATES
• Designation: Grievance & Data Protection Officer
• Address: Aska, Ganjam, Odisha, India - 761111
• Official Support Email: support@tvar.in

We will acknowledge grievances within 48 hours and resolve verified requests within 30 days of receipt.

9. Changes to This Policy

We may update this Privacy Policy to reflect modifications in our App functionality or changes in statutory law. Material revisions will be notified via in-app banner or electronic communication before becoming active.

1. Introduction

Welcome to TVAR ("we," "our," or "us"). We provide the TVAR Captain mobile application ("App"), designed for independent delivery partners and riders ("Captains") to accept delivery tasks, navigate to pickup and drop-off points, manage delivery statuses, and track payouts.

This Privacy Policy explains how we collect, use, store, process, and disclose your personal and device data. It complies with the Google Play Developer Program Policies (specifically Location & Foreground Service / Background Location policies) and India's Digital Personal Data Protection Act (DPDP Act).

By installing, registering, or operating the TVAR Captain App, you consent to the data collection and processing activities described below.

2. Prominent Disclosure: Location Data Collection (Foreground & Background)

The core functionality of the TVAR Captain App relies on continuous, accurate location tracking.

• Foreground Location (While the App is Open or on Screen): Used to display nearby delivery requests, guide your turn-by-turn navigation between restaurant kitchens and customer locations, and estimate delivery arrival times.
• Background Location (When the App is Minimized, Closed, or Screen is Locked): When your duty status is set to "Online" or "Active", the App accesses your device's precise and coarse location in the background:
  • To dispatch delivery assignments closest to your real-time position.
  • To provide customers and restaurants with live, real-time tracking of their food order.
  • To compute accurate trip distance for delivery fee payouts and fuel incentives.
  • For emergency routing and rider safety verification during active transit.
• Rider Control Over Tracking: Background location tracking stops immediately whenever you switch your status to "Offline" in the App or log out. We never sell your real-time or historical location data to advertising networks or third parties.

3. Other Information We Collect

To verify your eligibility, ensure delivery compliance, and process payouts, we collect:

• Identity & Verification Details (KYC):
  • Full name, contact phone number, and email address.
  • Government-issued identification (Aadhaar number/card, PAN card) for identity verification.
  • Driving License details, vehicle registration certificate (RC), and vehicular insurance records.
  • Live profile photo/selfie for partner identification and in-app customer trust.
• Financial & Payout Information:
  • Bank account number, IFSC code, account holder name, or UPI Virtual Payment Address (VPA) for weekly/daily payout transfers. (We do not process or store credit/debit card numbers).
• Order & Trip Telemetry:
  • Completed trips, pickup and delivery timestamps, route taken, kilometers traveled, and customer delivery confirmations (including delivery OTP entries).
• Device & Technical Data:
  • Device model, operating system version, battery level (to prevent dropouts during transit), network connectivity status, and crash/diagnostic logs.

4. Purpose of Data Processing

We process your personal and telemetry information strictly for:

• Order Allocation & Logistics: Pairing your live coordinates with nearby pickup points and customer delivery addresses.
• Earnings & Payout Calculations: Measuring actual kilometers traveled and completed orders to compute fair wages, tips, and promotional bonuses.
• Safety & Fraud Prevention: Detecting simulated locations (fake GPS spoofing), verifying driver identity at pickup points, and resolving transit disputes.
• Regulatory & Tax Compliance: Maintaining KYC and transaction records as required by local transport and tax authorities.

5. Data Sharing & Third Parties

We do not sell, rent, or trade delivery partner information. Data is shared only with:

• Customers & Restaurants: While executing an active order, customers and restaurants see your first name, vehicle details, contact phone (masked or in-app dialer), and live transit map.
• Map & Cloud Infrastructure Services: Cloud hosting servers and mapping/geocoding API providers to calculate travel time and render routes.
• Payment Gateways: Payout processors to disburse earnings into your bank account.
• SMS & Notification Gateways: Gateways to send one-time passcodes (OTPs) and account alerts.
• Law Enforcement: When required by valid legal process or to investigate transit incidents or safety concerns.

6. Data Security

• Transit Encryption: All telemetry, location, and identity data are transmitted over HTTPS with TLS 1.2+ encryption.
• Restricted Access: KYC documents and banking records are stored in secure databases accessible only by authorized administrative personnel.

7. Data Retention & Account Deletion

• Retention Duration: Active account data is retained while your partnership is active. Financial settlement records and trip receipts are stored for up to 7 years in compliance with Indian tax legislation.
• Account Deletion: You have the right to delete your delivery account and remove personal identifiers:
  • Email Request: Write to our Grievance Officer with your registered phone number requesting account termination. We fulfill non-statutory data deletion requests within 30 days.

8. Your Rights Under India's DPDP Act

You possess the legal right to:

• Review the personal information held about you.
• Request corrections to outdated vehicle or contact records.
• Withdraw consent for background location tracking (by going Offline or revoking permission in device settings; note that active delivery duty requires location access).
• Lodge a grievance if your data privacy concerns are not adequately resolved.

9. Grievance Redressal Officer

For questions about your data, background location tracking, or to request account deletion, contact our designated Grievance Officer:

• Entity: TVAR ASSOCIATES
• Designation: Grievance & Data Protection Officer
• Address: Aska, Ganjam, Odisha, India - 761111
• Official Contact Email: support@tvar.in

Grievances are acknowledged within 48 hours and resolved within 30 days.

10. Updates to This Policy

We may periodically update this policy to reflect new features or legal requirements. When significant changes occur, we will post an in-app notice requiring your acknowledgment before going online.