Privacy Policy

Effective date: 1 January 2025

Last updated: 17 May 2026

CSC Travels ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our ride-booking application and website. By using our services you agree to the practices described below.

1. Information We Collect

Personal information: name, email address, phone number, and profile photo.
Location data: real-time GPS coordinates when using the app for ride booking and tracking.
Trip data: pickup/drop-off addresses, trip history, and payment information.
Device information: device type, operating system, and app version for technical support.
Communication data: messages exchanged between riders and drivers through our platform.

2. How We Use Your Information

To provide and improve our ride-booking services.
To match you with available drivers in your area.
To process payments and generate invoices.
To send ride confirmations, OTP codes, and trip updates via SMS or push notification.
To resolve disputes, enforce our Terms of Service, and ensure platform safety.
To personalise your experience and show relevant offers.
To comply with legal obligations under applicable Indian law.

3. Location Data

We collect precise location data only when the app is in use.
Driver location is shared with the assigned passenger during an active trip.
We use OpenStreetMap services for map display and routing. No location data is sent to third-party advertising networks.
You may disable location access in your device settings, but this will prevent you from using ride-booking features.

4. Data Sharing

We do not sell your personal data to third parties.
Driver name, phone number, and vehicle details are shared with the matched passenger for the duration of the trip.
Passenger name and phone number are shared with the assigned driver.
We may share anonymised, aggregate data for analytics and business reporting.
We may disclose data to law-enforcement agencies if required by a valid court order or applicable law.

5. Data Retention

Account data is retained for as long as your account is active.
Trip history is retained for 3 years for dispute resolution and regulatory compliance.
You may request deletion of your account and associated data by contacting us. Retention obligations under law may prevent full deletion.

6. Data Security

Passwords are stored using industry-standard bcrypt hashing and are never stored in plain text.
All API communication is conducted over HTTPS/TLS encryption.
Access to production databases is restricted to authorised personnel only.
We regularly review our security practices and update them as required.

7. Your Rights

Access: You may request a copy of the personal data we hold about you.
Correction: You may update inaccurate or incomplete information via the app or by contacting us.
Deletion: You may request deletion of your account subject to legal retention requirements.
Portability: You may request your data in a machine-readable format.
To exercise these rights, contact us at booking@csctravels.com.

8. Cookies & Analytics

Our website uses essential cookies for session management only.
We do not use third-party advertising cookies.
The mobile app does not use cookies; authentication is handled via JWT tokens.

9. Children's Privacy

Our services are not directed to children under 18 years of age.
We do not knowingly collect personal data from minors.
If you believe a minor has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time.
Significant changes will be communicated via in-app notification or email.
Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

CSC Travels, Shanti Devi Nivas, Anishabad, Patna – 800002, Bihar, India
Email: booking@csctravels.com
Phone: +91 98731 01537
For privacy-related queries, please use the subject line "Privacy Request".