Raahiराही← Home

Privacy Policy

Last updated: 10 July 2026 (draft)

⚠️ Draft template — not legal advice. Have a qualified Indian lawyer (and your DPDP compliance advisor) review this before you rely on it. Text in [brackets] must be completed.

This Privacy Policy explains how [Company legal name] (“Raahi”, “we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use Raahi, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules. For your personal data, Raahi acts as a Data Fiduciary.

1. Data we collect

  • Identity & verification: your name, a photo of a government ID, and a selfie — reviewed by our team during the pilot (and, as we scale, via a licensed KYC provider using DigiLocker / Aadhaar). We store a verification result and a masked ID (last 4 digits) — not your full Aadhaar number.
  • Contact & profile: email, phone, city, and profile details you provide.
  • Transactions: parcels, trips, bookings, pickup/drop areas, declared contents and value, ratings, and payment status (online payments, where enabled, are processed by a licensed payment gateway; we do not store full card/bank details).
  • Usage & device: log data, device and app information, and approximate location where you enable it.
  • Communications: messages, support requests, and dispute details.

2. How we use your data

  • To verify identity and enable trust between Senders and Carriers.
  • To match parcels with travellers, process bookings, and handle Raahi's commission (and, where online payments are enabled, payments through a licensed gateway).
  • For safety (fraud prevention, prohibited-items enforcement, dispute resolution, SOS).
  • To send service notifications (booking updates, OTPs) and to provide support.
  • To meet legal, tax, and regulatory obligations.

3. Legal basis and consent

  • We process your personal data based on your consent and for the purposes above. Before processing, we provide clear, itemised notice.
  • You may withdraw consent at any time (this may limit your ability to use the service).

4. Your rights (DPDP Act)

You have the right to:

  • Access a summary of the personal data we hold about you and how it is processed.
  • Correct, complete, update, or erase your personal data.
  • Grievance redressal through our Grievance Officer (Section 9).
  • Nominate another person to exercise your rights in the event of death or incapacity.

To exercise these, contact us at hello@umsang.com.

5. When we share data

We share the minimum necessary, and we do not sell your personal data. We share:

  • With the other party to a booking — limited profile info (name, rating, verification status) so you can trust who you are dealing with.
  • With a payment gateway (to process payments, where enabled) and a KYC provider (to verify identity), where used.
  • With an insurer, only if and when parcel cover is offered in future.
  • With service providers (hosting, SMS, analytics) bound by confidentiality.
  • With law enforcement / authorities where required by law.

6. Aadhaar and sensitive identifiers

  • Aadhaar-based verification is performed only through a licensed provider with your consent. We rely on the returned verification result and store only a masked identifier; we do not use your Aadhaar for any purpose other than identity verification.

7. Security

  • We apply reasonable security safeguards appropriate to the risk — including encryption in transit, access controls, and least-privilege data access — to protect your personal data. No system is perfectly secure, but we work to protect it and will notify you and the Data Protection Board of a breach as required.

8. Retention

  • We keep personal data for as long as your account is active and as needed for the purposes above, or as required by law (e.g., tax, dispute, and regulatory records). We delete or anonymise data when it is no longer needed.

9. Grievance Officer

  • In line with the DPDP Act and IT Rules, you can reach our Grievance Officer for privacy concerns:
  • Name: [Grievance Officer name] · Email: hello@umsang.com · Address: [registered address].
  • We aim to acknowledge complaints promptly and resolve them within the timelines prescribed by law.

10. Children

  • Raahi is for users 18 and over. We do not knowingly process the data of children.

11. Changes and contact

  • We may update this Policy; material changes will be notified in-app. Questions: hello@umsang.com.

See also our Terms of Service.