HARDOO

PRIVACY POLICY

Effective Date: 08/10/2026

Version: 1.0

1. INTRODUCTION

Hardoo, a sole proprietorship owned by Vijay (“Hardoo”, “Company”, “we”, “us” or “our”) operates the Hardoo mobile application, website and related digital services (“Platform”).

Hardoo is a technology platform that facilitates connections between customers requiring pickup/delivery services and independent drivers/service providers.

This Privacy Policy explains how Hardoo collects, uses, stores, shares, protects and otherwise processes personal information relating to customers, drivers/service providers, visitors and other users of the Platform.

By using the Platform, you acknowledge that you have read this Privacy Policy. Where Applicable Law requires consent or another lawful basis for processing, Hardoo will obtain or rely upon the applicable lawful basis.

2. IMPORTANT INFORMATION

Hardoo may collect information necessary to create and manage user accounts; facilitate pickup and delivery bookings; connect customers with drivers/service providers; calculate and communicate applicable fares; verify users, drivers and vehicles; provide location-based services; process or record payments; provide customer support; prevent fraud and misuse; maintain safety and security; comply with applicable laws and regulations; meet government, transport, tax, legal and regulatory requirements; and improve the Platform and its services.

Hardoo does not intend to collect personal information that is unnecessary for the stated purpose.

3. DATA CONTROLLER / BUSINESS DETAILS

Business Name: Hardoo (a sole proprietorship)

Proprietor: Vijay

Address: A-37, Jodla, Jaipur, Rajasthan

Website: https://hardoo.in

Privacy Email: support@hardoo.in

Customer Support: support@hardoo.in / 9672807776

Grievance Officer:

Name: Vijay

Designation: Proprietor and Grievance Officer

Email: support@hardoo.in

Phone: 9672807776

4. INFORMATION WE COLLECT

A. Customer Information: Name, mobile number, email address, account details, pickup and delivery addresses, location information, booking history, delivery instructions, communication records, ratings and feedback.

B. Driver / Service Provider Information: Name, mobile number, email address, address, government-issued identification information where required, KYC information, driving licence information, vehicle registration information, vehicle insurance information, permit/fitness/PUC or other required vehicle documents, bank/payment information where applicable, verification records, emergency contact information where required, training/onboarding information, ratings and service records.

C. Booking Information: pickup location, delivery location, number of pickup points, number of delivery points, parcel count, parcel description where required, parcel weight and dimensions, special handling requirements, applicable fare, waiting/loading/unloading information, cancellation information, booking status and delivery confirmation.

D. Receiver Information: Customers may provide the name, mobile number (optional), delivery address, map location and delivery notes of the person who will receive a parcel. The customer is responsible for being allowed to share this information for the delivery.

E. Delivery Proof and Receipts: Hardoo may collect photographs uploaded by drivers as delivery proof or as transport-company receipts (Bilty), together with the related booking, stop, time and status information and delivery OTP confirmation records.

5. VEHICLE INFORMATION

Where a driver/service provider uses a motor vehicle through the Platform, Hardoo may collect and process vehicle-related information including registration number, vehicle make/model, vehicle category, registration certificate, insurance, permit, fitness certificate, pollution certificate, vehicle photographs, documents required for verification and other information required under Applicable Law.

6. KYC AND VERIFICATION

Where required for safety, onboarding, fraud prevention or regulatory compliance, Hardoo may collect and verify KYC and related information. Verification may be conducted directly or through authorised third-party verification providers.

7. LOCATION INFORMATION

Hardoo may process location information to identify pickup and delivery locations, match customers with available drivers, provide route assistance, delivery tracking, estimated arrival information, calculate distance-based or route-based fares, prevent fraud, improve safety, resolve disputes and maintain service records.

For drivers, the app may collect precise location while the driver is online or has an active booking, including when the app is running in the background or the device screen is off, and sends it to Hardoo at frequent intervals. Location is not collected when the driver is offline. During an active booking the customer can see the driver's live location, and Hardoo's authorised administrators can see the driver's current location to manage the booking. The app explains this and asks for permission before requesting background location access.

For customers, location and map pins are used to choose pickup and delivery points.

8. PARCEL INFORMATION

Customers may provide information about parcels to enable safe and appropriate delivery. Users should not provide unnecessary personal information about third parties through parcel descriptions. Hardoo may restrict or refuse prohibited, illegal, dangerous or otherwise unacceptable parcels in accordance with its Terms & Conditions and Applicable Law.

Delivery OTPs: To confirm pickup and delivery, Hardoo generates one-time passwords (OTPs). Hardoo does not currently send SMS messages to receivers. The delivery OTP is shown to the customer in the app, and the customer passes it to the receiver, who gives it to the driver after receiving the parcel. The customer may use the “Send OTP on WhatsApp” button, which opens WhatsApp on the customer's own phone; the message is then sent by the customer, and WhatsApp's own terms and privacy policy apply to it. If Hardoo starts sending SMS messages to receivers in the future, this Privacy Policy will be updated first.

9. PAYMENT INFORMATION

Depending on the payment method, Hardoo may process payment amount, payment status, transaction reference, invoice information, refund information and other transaction-related information. Third-party payment providers may process card, bank or other financial credentials directly.

10. INITIAL PILOT / DIRECT PAYMENT

During any initial pilot period in which customers are permitted to pay drivers/service providers directly, Hardoo may record agreed/applicable fare, payment status, booking information, driver confirmation, customer confirmation and related transaction records.

11. COMMUNICATION INFORMATION

Hardoo may collect or retain customer support conversations, booking-related communications, complaints, feedback, emails, messages, call-related records where legally permitted and other service communications.

12. DEVICE AND TECHNICAL INFORMATION

Hardoo may automatically collect device type, operating system, app version, IP address, device identifiers where permitted, crash reports, log information, network information, approximate technical location, browser information and security-related information.

Hardoo may also collect a device notification token and device platform so that it can send booking notifications to the app.

13. COOKIES AND SIMILAR TECHNOLOGIES

The Hardoo website may use cookies, SDKs, analytics technologies and similar technologies for login/session management, security, preferences, analytics, performance and service improvement.

The Hardoo administrator dashboard uses a strictly necessary session cookie to keep authorised administrators securely logged in. The Hardoo app does not show advertising and Hardoo does not sell personal information.

14. PURPOSES OF PROCESSING

Hardoo may process personal information for account management, booking fulfilment, customer-driver matching, pickup/delivery coordination, location and route services, fare calculation, payment management, KYC, safety, fraud prevention, customer support, complaints, ratings, Platform maintenance, analytics, legal/regulatory compliance, tax/accounting, government requests, enforcement of Terms & Conditions and protection of rights.

15. LEGAL BASIS / AUTHORISATION

Hardoo will process personal information on an appropriate legal basis as required by Applicable Law, including consent, performance of a requested service, legal obligations, lawful business purposes where permitted, safety/security, fraud prevention, regulatory requirements or another lawful basis.

16. SHARING OF INFORMATION

Hardoo may share relevant information, where necessary and lawful, with customers, drivers/service providers, payment providers, mapping/navigation providers, KYC/verification providers, technology/cloud providers, support providers, analytics providers, insurers, professional advisers, auditors, legal advisers, government authorities, transport authorities, law enforcement, courts and other permitted parties.

Service providers that receive information for Hardoo include: Google Firebase Authentication, which verifies your mobile number by sending a login code by SMS; Ola Maps (Krutrim), which processes addresses, map points and routes for address search, distance and route calculation and the map display; our cloud hosting provider for the server and database; and push-notification services. When a driver taps Navigate, the app opens Google Maps on the driver's phone with the destination point so that the driver can navigate; Google's own terms and privacy policy apply to that use. Each provider receives information only for the services it provides to Hardoo.

17. INFORMATION VISIBLE TO CUSTOMERS AND DRIVERS

Certain information may be displayed to the relevant customer or driver/service provider to facilitate a booking.

Hardoo will seek to avoid displaying unnecessary personal information.

For example, a driver may see the customer's name and mobile number, the pickup and delivery addresses, the receivers' names and mobile numbers, parcel counts and weights, the fare, the payment method and status, and delivery notes. A customer may see the assigned driver's name and mobile number, the driver's live location while the booking is in progress, the booking status and fare, and delivery-proof photographs.

18. REGULATORY AND GIG-WORKER INFORMATION

Where Applicable Law requires Hardoo to collect, maintain, submit or disclose information relating to drivers/service providers, gig workers, vehicles, bookings, safety or regulatory compliance, Hardoo may process and retain such information for the required purpose and period.

19. DATA RETENTION

Hardoo may retain personal information for as long as reasonably necessary for providing services, maintaining records, resolving disputes, preventing fraud, complying with tax/accounting requirements, complying with legal/regulatory requirements, enforcing agreements and protecting legal rights.

Booking and delivery records (including delivery-proof photographs and status history) are kept for up to 8 years, or longer where the law requires. Driver location records are kept only as long as needed for the booking, safety, fraud prevention and dispute resolution, and not longer than the booking records. Login codes are generated and checked by our phone-verification provider (Google Firebase); Hardoo does not store them.

20. GOVERNMENT AND REGULATORY RECORDS

If a law, notification, licence condition, transport rule, court order or regulatory requirement requires Hardoo to retain or disclose particular information, Hardoo may do so. If the Rajasthan Motor Vehicles Aggregator Scheme Rules, 2025 or any successor/amended framework applies to Hardoo, Hardoo will implement the applicable data, security, record-keeping and regulatory requirements.

21. DATA SECURITY

Hardoo will take reasonable technical and organisational measures appropriate to the nature of the information and risks involved, including access controls, authentication, encryption where appropriate, secure storage, logging/monitoring, backups, access restrictions, security testing and incident response.

Measures used by Hardoo include encrypted connections (HTTPS), storage of the login token in the device's secure storage, limits on repeated login and OTP attempts, a two-step login for administrators, access limited to authorised staff, audit records of administrator actions, and regular backups.

22. CYBERSECURITY AND DATA BREACHES

If Hardoo becomes aware of a data security incident affecting personal information, Hardoo may investigate, restrict access, secure systems, preserve evidence, notify authorities or affected persons where legally required, and take corrective measures.

23. CHILDREN'S INFORMATION

The Hardoo Platform is not intended to knowingly collect personal information from children except where legally permitted and with any required parental/guardian involvement or consent.

The Platform is intended for persons who are 18 years of age or older.

24. SENSITIVE OR HIGH-RISK INFORMATION

Users should not provide sensitive personal information unless specifically requested or legally required. Where required, Hardoo will process it only for the relevant purpose and in accordance with Applicable Law.

25. ACCOUNT SECURITY

Users are responsible for maintaining login credentials and notifying Hardoo of suspected unauthorised access.

Hardoo may suspend or secure accounts where it reasonably suspects fraud, misuse, unauthorised access or security risk.

26. LOCATION PRIVACY

Location information may be essential to certain Hardoo services. Disabling location access may prevent or reduce functionality. Hardoo will process location information for disclosed service, safety, security, operational and legal purposes.

27. THIRD-PARTY SERVICES AND LINKS

The Platform may use or link to third-party services. Third parties may have their own privacy policies, terms, security practices and data-processing practices.

28. INTERNATIONAL DATA TRANSFERS

Where Hardoo or its service providers process information outside India, such processing or transfer will be undertaken only as permitted by Applicable Law.

29. BUSINESS TRANSFERS

If Hardoo undergoes a merger, acquisition, restructuring, sale of assets, financing, investment, insolvency or similar transaction, personal information may be transferred as part of the transaction, subject to Applicable Law.

30. GOVERNMENT AND LAW-ENFORCEMENT REQUESTS

Hardoo may disclose information where required or permitted by law, court order, government direction, transport authority, law-enforcement agency, tax authority, regulator or other legally authorised body.

31. USER DATA RIGHTS

Subject to Applicable Law, users may have rights relating to their personal information including access, correction, deletion/erasure where legally available, withdrawal of consent where applicable, grievance submission, nomination and other rights prescribed by law.

32. CORRECTION OR DELETION REQUEST

Users may request correction or deletion by contacting support@hardoo.in. Hardoo may require reasonable verification. Deletion may not be possible where retention is required by law, regulation, court order, fraud-prevention requirements, accounting requirements, dispute resolution or another lawful purpose.

Account deletion in the app: a customer or driver can delete the account in the app under Profile by choosing Delete account and typing DELETE, or can use the Delete account page on the Hardoo website. Deletion is not possible while a booking is in progress, and a driver must first hand over any cash that Hardoo has not yet confirmed. When an account is deleted, the name, mobile number, notification token and last known location are removed or replaced, and the person is logged out. Completed booking records (addresses, parcel details, fares, delivery-proof photographs and status history) may be kept without the person's name and mobile number where they are needed for accounting, safety, fraud prevention, legal reasons or dispute resolution.

33. WITHDRAWAL OF CONSENT

Where processing is based on consent, a user may withdraw consent through the mechanism provided by Hardoo or by contacting Hardoo. Withdrawal will not affect processing lawfully completed before withdrawal or processing required/permitted for another lawful purpose.

34. MARKETING COMMUNICATIONS

Hardoo may send service-related communications such as booking updates, delivery updates, account alerts, security alerts, transaction information and important legal/policy notices. Marketing communications will follow Applicable Law and applicable opt-out requirements.

35. ANALYTICS AND SERVICE IMPROVEMENT

Hardoo may use aggregated, statistical or appropriately protected information to understand service usage, improve the app, routing and customer experience, identify technical problems, improve safety and develop new features.

36. FRAUD PREVENTION

Hardoo may process information to detect and prevent fake accounts, fraudulent bookings, payment fraud, misuse, document fraud, identity misuse, suspicious activity, rating manipulation and delivery fraud.

37. DRIVER / VEHICLE MONITORING

Where required for service delivery, safety, compliance or dispute resolution, Hardoo may process relevant driver or vehicle activity information including booking status, route/location, service timing, vehicle information, delivery confirmation, complaints, ratings and compliance records.

38. AUTOMATED SYSTEMS

Hardoo may use automated systems or algorithms for driver matching, route estimation, fare calculation, fraud detection, service optimisation, availability and safety monitoring. Where Applicable Law provides rights or safeguards relating to automated processing, Hardoo will comply.

39. DRIVERS WORKING WITH OTHER PLATFORMS

Where permitted by Applicable Law and the Driver/Service Provider Agreement, drivers/service providers may work with other platforms. Hardoo may process information necessary to prevent conflicts, fraud, duplicate bookings, safety risks or misuse.

40. PILOT PHASE AND REGULATORY CHANGES

Hardoo may initially operate a limited pilot/service phase with a limited number of associated vehicles. Any internal vehicle limit or pilot period is an operational/business decision and should not be treated as a blanket exemption from privacy, data protection, motor vehicle, tax, consumer, labour/gig-worker or other applicable laws. If applicable laws, regulations, notifications or regulatory requirements change, Hardoo may update its data-processing practices and this Privacy Policy accordingly.

41. CHANGES TO THIS PRIVACY POLICY

Hardoo may update this Privacy Policy to reflect changes in the Platform, services, technology, business practices, Applicable Law, government notifications, regulatory requirements or security needs. Where Applicable Law requires prior notice, consent or another procedure, Hardoo will follow it. Changes will generally apply prospectively unless otherwise permitted or required by Applicable Law.

42. NO UNLAWFUL RETROACTIVE USE

Hardoo will not use or disclose personal information for a materially different purpose in a manner prohibited by Applicable Law. Where a new purpose requires notice, consent or another legal requirement, Hardoo will take the required steps.

43. RECORDS AND AUDIT

Hardoo may maintain appropriate records relating to consent, bookings, payments, complaints, verification, security, regulatory compliance, data requests and other legally required records.

44. PRIVACY GRIEVANCE

Users may raise privacy-related complaints or concerns at support@hardoo.in. Hardoo will review and respond in accordance with Applicable Law and its grievance procedure.

45. GRIEVANCE OFFICER

Name: Vijay

Designation: Proprietor, Grievance Officer / Privacy Officer

Email: support@hardoo.in

Phone: 9672807776

Address: A-37, Jodla, Jaipur, Rajasthan

46. COMPLIANCE WITH APPLICABLE LAW

Hardoo intends to comply with Applicable Law relating to privacy, personal data protection, cybersecurity, consumer protection, taxation, motor vehicles, transportation, gig/platform work and other relevant areas.

Applicable requirements may change over time.

This includes, as applicable, the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 and the rules made under them.

47. SEVERABILITY

If any provision is held invalid or unenforceable, the remaining provisions will continue to the extent permitted by law.

48. GOVERNING LAW

This Privacy Policy shall be governed by the laws applicable in India. Subject to Applicable Law, the courts at Jaipur, Rajasthan shall have jurisdiction over disputes relating to this Privacy Policy.

49. CONTACT US

Hardoo (a sole proprietorship owned by Vijay)

Address: A-37, Jodla, Jaipur, Rajasthan

Website: https://hardoo.in

Privacy Email: support@hardoo.in

Customer Support: support@hardoo.in / 9672807776

50. USER ACKNOWLEDGEMENT

By using the Hardoo Platform, you acknowledge that you have been provided access to this Privacy Policy.

Where Applicable Law requires specific consent, Hardoo will provide an appropriate notice and consent mechanism.

Last Updated: 08/10/2026

Version: 1.0