BYT PRIVACY POLICY

Effective Date: 01 April 2026


I. APPLICABILITY AND SCOPE

BYT TRANSIT INDIA PRIVATE LIMITED (“BYT”, “BOOKYOURTRUCK.IN”, “Company”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy describes:

  1. the types of information we collect;
  2. the manner in which such information is collected, used, stored, processed, and shared; and
  3. your rights in relation to your personal data

This Privacy Policy applies to all Users of the BYT Platform, including:

  1. Load Providers
  2. Vehicle Providers
  3. buyers and sellers in the vehicle marketplace
  4. drivers, agents, and authorized representatives

This Policy applies to all interactions with the Platform, including through:

  1. mobile applications
  2. websites
  3. APIs and system integrations
  4. communication channels such as SMS, calls, WhatsApp, email, and in-app messaging

This Privacy Policy applies only to information collected by BYT through the Platform and related services.

This Policy does not apply to third-party services or entities, including but not limited to:

  1. Payment Aggregators and partner banks
  2. GPS, telematics, or IoT service providers
  3. insurance providers
  4. external websites or applications

Such third parties operate independently and are governed by their own privacy policies. BYT does not control and is not responsible for the data practices of such third parties.

II. CONSENT AND ACCEPTANCE

By accessing, registering on, or using the Platform in any manner, you:

  1. provide your free, specific, informed, and unambiguous consent to the collection, use, storage, and processing of your personal data for the purposes set out in this Privacy Policy;
  2. agree to be bound by this Privacy Policy and applicable laws, including the Digital Personal Data Protection Act, 2023; and
  3. represent and confirm that all data and information provided by you is true, accurate, complete, and lawfully obtained

BYT may obtain separate or additional consent, where required under applicable law, for specific data processing activities, including but not limited to:

  1. location tracking and real-time GPS data;
  2. AI-based tools, analytics, or automated processing;
  3. marketing and promotional communications;
  4. telematics, fuel monitoring, SIM-based, or other device-based data collection

You may withdraw your consent at any time through available Platform controls or by contacting the Grievance Officer, subject to:

  1. applicable legal or regulatory retention requirements; and
  2. completion of ongoing transactions or contractual obligations

Withdrawal of consent for processing that is essential to the provision of core Platform services may result in limited functionality or discontinuation of access to such services.

III. LEGAL BASIS

BYT processes personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable laws in India.

Personal data is processed on the following lawful grounds:

  1. User Consent: where you have provided free, specific, informed, and unambiguous consent for the processing of your personal data for specified purposes;
  2. Legitimate Uses (as permitted under applicable law): including processing that is reasonably necessary for:
  3. provision and performance of services requested by you;
  4. compliance with applicable legal and regulatory requirements;
  5. fraud detection, prevention, and security monitoring;
  6. enforcement of contractual rights, platform integrity, and dispute resolution;
  7. Legal Obligations: where processing is required to comply with applicable laws, regulations, court orders, or directions of governmental or regulatory authorities

Where required under applicable law or for specific processing activities, BYT shall obtain separate and explicit consent, including but not limited to:

  1. processing of precise or real-time location data;
  2. AI-based tools, profiling, or automated decision-making;
  3. marketing and promotional communications;
  4. telematics, GPS, fuel monitoring, SIM-based, or IoT-enabled data collection

All personal data shall be processed only for lawful, specific, and clearly communicated purposes, and in a manner consistent with applicable data protection principles.

IV. INFORMATION WE COLLECT

BYT collects and processes different categories of information depending on your interaction with the Platform and the services availed by you.

1. Personal and Business Information

  1. name, mobile number, email address, and other contact details;
  2. residential or business address;
  3. GST, PAN, and other tax-related information;
  4. Aadhaar and other KYC documents (to the extent permitted under applicable law);
  5. bank account details, UPI IDs, and related payment information

2. Transaction and Operational Data

  1. shipment details (including nature, weight, value, route, and instructions);
  2. booking history and transaction records;
  3. invoices, e-way bills, and Proof of Delivery (POD);
  4. Platform-recorded transaction milestone records (including loading, delivery, and POD confirmations) and BYT’s own revenue records (Platform Fees, Booking Fees, subscription charges, and service-related charges); freight payment and settlement records are maintained solely by the Payment Partner

3. Device and Technical Data

  1. IP address and device identifiers;
  2. device type, operating system, and browser details;
  3. application usage logs, activity patterns, and system interactions

4. Location and Tracking Data

  1. real-time and historical GPS location data;
  2. route, trip, and vehicle movement data

Such data is collected only where applicable, including when:

  1. you enable location permissions on your device;
  2. you use tracking-enabled services; or
  3. GPS, telematics, or IoT devices are installed or activated

5. Communication Data

  1. call records or metadata (to the extent permitted under applicable law);
  2. chat messages exchanged through the Platform;
  3. customer support interactions and grievance communications

6. Marketplace Data

  1. vehicle listings and related descriptions;
  2. ownership or registration details (as provided by Users);
  3. pricing information and transaction-related communications

7. Telematics and Device Data (GPS / Fuel / IoT)

In connection with device-based or telematics-enabled services, BYT may collect:

  1. fuel consumption and usage patterns;
  2. vehicle performance and operational data;
  3. tracking and location-based data;
  4. device diagnostics and system health information

Such data shall be collected and processed only:

  1. with appropriate consent, where required; and
  2. for purposes including operational insights, safety, analytics, service optimization, and fraud prevention

BYT does not guarantee any specific performance outcomes, fuel savings, or financial benefits arising from such data or devices.

8. Insurance-Related Data

In connection with insurance services facilitated through the Platform, including cargo insurance for Load Providers and commercial vehicle insurance for Vehicle Providers, BYT may collect and process:

  1. policy-related information (policy number, coverage details, insurer information);
  2. vehicle details (registration certificate, permit, fitness, and related information);
  3. shipment and cargo details (value, nature of goods, route);
  4. claims-related information (incident details, supporting documents, loss data);
  5. KYC and regulatory information as required by insurers

Such information may be:

  1. collected directly from Users or received from insurance partners; and
  2. used solely for policy issuance, servicing, claims processing, regulatory compliance, and fraud prevention

BYT acts solely as a facilitator or intermediary for insurance services and does not underwrite, insure, or assume any insurance risk. Insurance services are provided by licensed insurers or intermediaries and are governed by their respective terms and privacy policies.

V. HOW WE COLLECT DATA

BYT collects personal data through multiple sources and methods, depending on your interaction with the Platform and the services availed by you.

1. Information Provided Directly by Users

We collect data that you voluntarily provide, including when you:

  1. register or create an account on the Platform;
  2. complete KYC or onboarding processes;
  3. post shipments, list vehicles, or participate in transactions;
  4. communicate with other Users or with BYT (including customer support);
  5. upload documents, images, or other content;
  6. purchase or opt for additional services such as insurance, GPS devices, or other offerings

2. Information Collected Automatically

We automatically collect certain data when you access or use the Platform, including:

  1. device and technical information (IP address, device type, operating system);
  2. usage data (logins, activity history, navigation patterns);
  3. location data (where enabled);
  4. system logs, diagnostics, and performance data

This information is collected through cookies, SDKs, and similar technologies.

BYT does not collect, receive, hold, store, or control freight payment records or escrow balances

3. Information from Third-Party Sources

We may receive data from third parties, including:

  1. Payment Partners (including Payment Aggregators and partner banks) for transaction and settlement processing;
  2. KYC and verification service providers for identity and compliance checks;
  3. insurance companies, brokers, and intermediaries for policy issuance and claims processing;
  4. GPS, telematics, and IoT service providers for tracking and device-related data;
  5. analytics and technology service providers

Such data is processed only for lawful purposes and in accordance with applicable agreements and laws.

4. Combined and Derived Data

We may combine information collected from multiple sources and derive insights (such as usage patterns, risk indicators, or performance metrics) to:

  1. improve Platform functionality;
  2. enhance safety and fraud detection; and
  3. optimize service delivery

VI. PURPOSE OF DATA USE

BYT processes personal data only for lawful, specific, and clearly defined purposes, as set out below:

1. Core Platform Operations

  1. user registration, onboarding, and KYC verification;
  2. enabling logistics coordination between Load Providers and Vehicle Providers;
  3. facilitating shipment creation, bidding, acceptance, and execution;
  4. enabling vehicle marketplace listings and transactions;
  5. maintaining transaction records and operational workflows

2. Platform Milestone Recording and Payment Partner Coordination

  1. recording transaction milestones on the Platform and making such confirmations available to authorized Payment Partners (including RBI-regulated Payment Aggregators and their partner banks) for processing;
  2. supporting settlement and escrow workflows that are managed and operated exclusively by the Payment Partner and its partner bank in accordance with applicable law; BYT does not establish, operate, or control any escrow account;
  3. recording Platform milestone confirmations (including loading and delivery confirmations) that are transmitted to the Payment Partner to facilitate freight settlement and payout to Vehicle Providers;
  4. detecting and preventing payment-related fraud

BYT does not collect, receive, hold, store, or control freight payments or any transaction funds between Users at any stage. BYT does not operate, manage, or control any escrow account, payment system, or settlement mechanism. All freight payments, including escrow handling, settlement, reversals, and adjustments, are processed and executed exclusively by RBI-regulated Payment Aggregators and their partner banks in accordance with applicable law. BYT’s role is limited to recording transaction milestones on the Platform, which are made available to the Payment Partner for processing.

3. BYT Platform Revenue

BYT may collect and receive the following charges directly from Users as its own revenue, in consideration for access to and use of the Platform and related services. Such amounts do not form part of freight payments between Users:

  1. Platform Fees, Booking Fees, and service access charges;
  2. subscription or bundle plan charges;
  3. charges for SIM-based tracking, GPS services, fuel security devices, or other technology-enabled services; and
  4. any other service-related charges as notified on the Platform from time to time.

The above charges are processed through authorised payment mechanisms directly to BYT and are independent of any freight payments or contractual consideration between Load Providers and Vehicle Providers. Data relating to such charges is processed and retained as BYT’s own commercial records.

4. Safety, Fraud Prevention, and Compliance

  1. identity verification and KYC compliance;
  2. fraud detection, prevention, and risk management;
  3. monitoring suspicious or unlawful activities;
  4. compliance with applicable laws, including tax, transport, and financial regulations;
  5. responding to legal requests, regulatory directions, and law enforcement requirements

5. Platform Improvement and Analytics

  1. analyzing usage patterns, performance metrics, and operational data;
  2. improving Platform functionality, reliability, and user experience;
  3. developing and deploying analytics tools and AI-based features (subject to separate consent, where required under applicable law); and
  4. using anonymised User interaction data collected through BYT’s AI Assistant to improve and retrain BYT’s AI models — this constitutes a specific and separate processing purpose for which BYT shall obtain your free, specific, informed, and unambiguous consent under the Digital Personal Data Protection Act, 2023, at the time of onboarding or prior to your first AI Assistant interaction. Such consent may be withdrawn at any time through available Platform controls or by contacting the Grievance Officer, subject to ongoing contractual obligations;
  5. enhancing safety, efficiency, and service quality

6. Communication and Support

  1. sending service-related notifications, booking updates, and transaction alerts;
  2. responding to user queries, grievances, and support requests;
  3. communicating important policy, legal, or operational updates

7. Marketing and Promotional Activities

  1. sending promotional communications, offers, and product updates;
  2. conducting campaigns and user engagement activities

Such communications shall be sent only with your consent, and you may opt out at any time.

8. Insurance Facilitation

  1. facilitating issuance of cargo insurance for Load Providers and commercial vehicle insurance for Vehicle Providers;
  2. enabling policy servicing, renewals, and related communications;
  3. assisting in claims processing and coordination with insurers;
  4. ensuring compliance with applicable insurance laws and regulatory requirements

BYT acts solely as a facilitator and does not underwrite or assume insurance risk.

9. Telematics, Device, and Tracking Services

  1. enabling GPS tracking, route monitoring, and trip visibility;
  2. processing fuel consumption and vehicle performance data;
  3. supporting SIM-based and IoT-enabled tracking solutions;
  4. enhancing operational efficiency, safety, and fraud prevention

Such processing shall be carried out only with appropriate consent, where required.

10. Enforcement of Rights and Dispute Resolution

  1. enforcing contractual rights and platform policies;
  2. investigating and resolving disputes between Users;
  3. maintaining audit trails and evidentiary records

VII. DATA SHARING AND DISCLOSURE

BYT acts as an intermediary platform under the Information Technology Act, 2000, and shares personal data only on a need-to-know basis and for lawful purposes in accordance with this Privacy Policy and applicable laws.

1. Sharing Between Users

To enable Transactions and service delivery, BYT may share relevant information between Users, including:

  1. Load Providers and Vehicle Providers;
  2. buyers and sellers in the vehicle marketplace

Such sharing may include:

  1. contact details;
  2. shipment or vehicle details;
  3. transaction-related information

This sharing is necessary for the execution and completion of Transactions on the Platform.

Users shall use such data solely for transaction-related purposes and in compliance with applicable data protection laws.

2. Service Providers and Partners

BYT may share personal data with trusted third-party service providers and partners, including:

  1. Payment Partners (including RBI-regulated Payment Aggregators and partner banks) for payment processing and settlement;
  2. insurance companies, brokers, and intermediaries for policy issuance, servicing, and claims handling;
  3. GPS, telematics, and IoT service providers for tracking and device-based services;
  4. KYC verification and compliance service providers;
  5. cloud hosting, analytics, and technology vendors

Such third parties are engaged under appropriate contractual arrangements and are required to:

  1. process data only for specified and lawful purposes;
  2. maintain confidentiality and security of personal data; and
  3. comply with applicable data protection laws

3. Legal and Regulatory Disclosures

BYT may disclose personal data to:

  1. courts, tribunals, and judicial authorities;
  2. government authorities, regulators, or law enforcement agencies

where such disclosure is required:

  1. under applicable law;
  2. pursuant to legal process or regulatory direction; or
  3. for the purpose of preventing fraud, unlawful activities, or threats to safety

4. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the relevant successor entity, subject to:

  1. continuation of applicable data protection safeguards; and
  2. use of data only for the purposes permitted under this Privacy Policy

5. No Sale of Personal Data

BYT does not sell, rent, or trade personal data to third parties for monetary consideration.

6. Limited Role of BYT

BYT facilitates data exchange necessary for Transactions but does not control or assume responsibility for:

  1. how Users use or process data received through the Platform; or
  2. the independent data practices of third-party service providers

Users are responsible for ensuring compliance with applicable laws in their own use of shared data.

VIII. DATA STORAGE AND RETENTION

BYT stores and processes personal data in accordance with applicable laws and industry standards.

1. Data Storage Location

2. Data Retention Period

BYT retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted under applicable law.

The indicative retention periods are as follows:

Data Type Retention Period
Transaction and financial records Minimum 7 years
KYC and verification data As required under applicable law and regulatory guidelines
Account and profile data Deleted within 30 (thirty) days of account closure or receipt of a valid deletion request, whichever is earlier, except where retention for a longer period is required or permitted under applicable law, regulatory obligations, audit requirements, or for the purposes of dispute resolution and fraud prevention

3. Extended Retention

Personal data may be retained beyond the above periods where necessary for:

  1. compliance with legal, regulatory, or tax obligations;
  2. audit requirements and financial record-keeping;
  3. dispute resolution and enforcement of contractual rights;
  4. fraud detection, prevention, and risk management

4. Deletion and Anonymization

  1. Upon expiry of the applicable retention period, or upon a valid deletion request (subject to legal requirements), personal data shall be deleted or anonymized in a secure manner.
  2. Certain data may be retained in anonymized or aggregated form for analytical and research purposes.

5. Third-Party Systems

Security of data processed by third-party service providers (including Payment Partners, insurance providers, and GPS/IoT vendors) is governed by their respective systems and policies. BYT does not control such third-party infrastructure.

Personal data shall not be transferred outside India except to jurisdictions notified as permissible under the DPDP Act. Where cross-border transfer is necessary for platform operations, BYT shall ensure adequate data protection safeguards, including contractual safeguards and compliance with notified jurisdictions under applicable law.

6. User Responsibility

Users are advised to retain their own records of transactions, documents, and communications as required for their business or legal purposes.

IX. USER RIGHTS

Subject to applicable law, Users have the following rights in relation to their personal data:

1. Right to Access Information

You have the right to request:

  1. confirmation as to whether your personal data is being processed;
  2. a summary of personal data being processed; and
  3. information regarding processing activities

2. Right to Correction and Updating

You have the right to:

  1. correct inaccurate or misleading personal data;
  2. update incomplete or outdated information

3. Right to Erasure

You may request deletion of your personal data, subject to:

  1. applicable legal and regulatory retention requirements;
  2. completion of ongoing transactions or contractual obligations

4. Right to Withdraw Consent

You may withdraw your consent for processing of personal data at any time.

Such withdrawal shall not affect the lawfulness of processing carried out prior to withdrawal.

Withdrawal of consent for essential services may result in:

  1. restricted access; or
  2. discontinuation of certain Platform services

5. Right to Grievance Redressal

You have the right to raise complaints or grievances regarding:

  1. processing of your personal data;
  2. violation of this Privacy Policy;
  3. any unauthorized use or disclosure of data

Such requests may be made to the designated Grievance Officer.

6. Right to Nominate

You may nominate another individual to exercise your rights in the event of:

  1. your death; or
  2. incapacity

7. Exercise of Rights

  1. Requests may be submitted through the Platform or via the Grievance Officer.
  2. BYT shall process such requests within timelines prescribed under applicable law.
  3. BYT may require reasonable verification of identity before processing requests.

X. DATA SECURITY

BYT implements reasonable technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

BYT implements industry-standard security practices in accordance with applicable information security frameworks.

1. Security Measures

Such measures include, but are not limited to:

  1. encryption of data in transit and, where applicable, at rest;
  2. role-based access controls and authentication mechanisms;
  3. monitoring systems, audit logs, and activity tracking;
  4. secure infrastructure and network protections;
  5. periodic review of security practices and systems

2. No Absolute Security

While BYT strives to protect personal data, no system, network, or method of transmission over the internet is completely secure.

Accordingly:

  1. BYT does not guarantee absolute security of personal data; and
  2. Users acknowledge and accept the inherent risks associated with digital platforms

3. User Responsibility

Users are responsible for:

  1. maintaining the confidentiality of their account credentials;
  2. restricting access to their devices and accounts;
  3. promptly notifying BYT of any unauthorized access or suspected security breach

4. Incident Handling

In the event of a data security incident, BYT shall take reasonable steps to:

  1. investigate and mitigate the impact;
  2. comply with applicable legal and regulatory requirements; and
  3. notify affected Users or authorities, where required under law

XI. COOKIES AND TRACKING

BYT uses cookies and similar tracking technologies to enhance user experience, improve Platform functionality, and ensure security.

1. Types of Technologies Used

We may use:

  1. cookies and similar browser storage technologies;
  2. device identifiers and SDKs;
  3. analytics and tracking tools

2. Purpose of Use

These technologies are used for:

  1. enabling core Platform functionality and performance;
  2. personalizing user experience and preferences;
  3. ensuring security, fraud prevention, and system integrity;
  4. analyzing usage patterns and improving services

3. User Control and Preferences

  1. Users may manage or disable cookies through browser or device settings.
  2. Certain features of the Platform may not function properly if cookies or tracking technologies are disabled.

4. Consent for Tracking

Where required under applicable law, BYT shall obtain user consent for the use of non-essential cookies or tracking technologies through a clear and accessible cookie consent banner or preference management tool available on the Platform, allowing Users to manage or modify their preferences at any time.

5. Third-Party Tools

Some tracking technologies may be provided by third-party analytics or service providers. Such providers may process data in accordance with their own privacy policies.

XII. THIRD-PARTY SERVICES DISCLAIMER

The Platform may integrate with or provide access to third-party services, tools, or systems.

BYT is not responsible for the services, systems, or data practices of such third parties, including but not limited to:

1. Independent Operation of Third Parties

Such third parties operate independently and are governed by their own:

  1. terms and conditions; and
  2. privacy policies

BYT does not control, endorse, or assume responsibility for:

  1. the availability, accuracy, or performance of such third-party services;
  2. the handling, processing, or security of data by such third parties

2. User Responsibility

Users acknowledge that:

  1. engagement with third-party services is at their own discretion and risk; and
  2. they are responsible for reviewing and accepting the applicable terms and privacy policies of such third parties

3. No Liability for Third-Party Actions

To the extent permitted under applicable law, BYT shall not be liable for:

4. Aggregate Liability Cap

Without prejudice to the specific exclusions set out in Clauses XII.1 to XII.3 above, and applicable to all claims arising out of or in connection with data processing, third-party data sharing, or any other matter governed by this Policy:

Notwithstanding any other provision of this Policy or any other BYT policy, BYT's total aggregate liability to a User in connection with the Platform, arising under any theory of liability including contract, tort (including negligence), statute, or equity, shall not in any event exceed the lesser of: (a) the total Platform Fees actually paid by that User to BYT in the three (3) calendar months immediately preceding the event giving rise to the claim; or (b) INR 10,000 (Rupees Ten Thousand only). This cap shall apply to all claims in aggregate and not per incident.

This aggregate liability cap is consistent with and forms part of the general limitation of liability framework set out in the BYT Terms & Conditions, which are incorporated into this Policy by reference.

XII-A. LIMITATION OF LIABILITY — GENERAL

To the fullest extent permitted under applicable law, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, BYT's total aggregate liability to a User in connection with this Privacy Policy, arising under any theory of liability, shall be subject to the cap set out in Clause XII.4 above. BYT shall not be liable for any indirect, incidental, consequential, or punitive damages arising from any data protection or privacy claim. Nothing in this Policy shall be construed to exclude liability for acts involving gross negligence or wilful misconduct on the part of BYT.

XIII. CHILDREN’S PRIVACY

The Platform is not intended for use by individuals below the age of 18 years.

BYT does not knowingly collect or process personal data of minors and does not permit account creation by individuals below 18 years of age.

If you are below 18 years of age, you must not access or use the Platform or provide any personal data.

1. Inadvertent Collection

If BYT becomes aware that personal data of a minor has been collected without appropriate authorization:

  1. such data shall be deleted or anonymized, as applicable; and
  2. necessary steps shall be taken to restrict further access to the Platform

2. User Responsibility

Users are responsible for ensuring that:

  1. they are of legal age to use the Platform; and
  2. no minor uses their account or provides personal data through their account

XIV. POLICY UPDATES

BYT reserves the right to modify, update, or revise this Privacy Policy from time to time, at its sole discretion.

1. Notification of Changes

2. Acceptance of Updates

3. User Responsibility

XV. GRIEVANCE OFFICER

1. Grievance Officer Details

Name: Chetankumar Bhimani

Designation: Director/Grievance Officer

Company: BYT TRANSIT INDIA PRIVATE LIMITED

Email: chetanbhimani@bookyourtruck.in

Contact Number: +91 8511883448

2. Grievance Redressal Mechanism

Users may submit complaints or grievances relating to:

  1. use of the Platform
  2. content or listings
  3. transactions or conduct of other Users
  4. any other issues related to the Platform

BYT shall acknowledge receipt of the complaint within a reasonable time and endeavour to resolve such grievance in accordance with applicable laws.

3. Timelines

Grievances shall be addressed within the timelines prescribed under applicable law, including the IT Rules, where relevant.

BYT shall: (a) acknowledge receipt of every grievance within 48 (forty-eight) hours of submission; (b) resolve or provide a substantive response to each grievance within 30 (thirty) days of receipt, in accordance with Rule 3(2)(d) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; (c) where a grievance relates to content removal or account action, provide specific reasons for its decision.

Note: BYT does not request confidential information such as OTP, CVV, PIN, or card details via call, email, or any other medium