1. Introduction & Compliances
At PicsiDrop, we are committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights over your data.
This policy complies with India's Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). By using PicsiDrop in any capacity, you agree to this Privacy Policy in full.
2. Data We Collect from Senders
To facilitate peer-to-peer delivery matchmaking, we collect the following information from Senders:
- Name and phone number: Collected for account creation and delivery matching communication.
- Pickup and delivery addresses: Used for matching and routing with nearby Travelers.
- Payment information: Processed directly by our payment gateway partner (Cashfree Payments). PicsiDrop does not store your card or bank details on our servers.
- Device type and approximate location: Collected to optimize route matching and check service availability.
- WhatsApp communication history: Logged when communicating with PicsiDrop customer support.
3. Data We Collect from Travelers
To ensure the security and trust of our network, we collect and verify the following information from Travelers:
- Name, phone number, and date of birth: Required for account profile setup.
- Aadhaar number: Sent directly to secure UIDAI APIs for identity verification. PicsiDrop does not store raw Aadhaar numbers after verification.
- PAN number: Verified through secure NSDL lookups and stored for tax and compliance audits.
- Driving License (DL): DL number and scanned copy (for private vehicle Travelers). Verified against the Aadhaar name and retained for safety compliance.
- Selfie photograph: Used for KYC liveness checks and face-matching with Aadhaar photo to prevent identity fraud.
- Bank account or UPI ID: Collected for Traveler Payout distribution.
- Route history and delivery records: Used for platform operations, route-matching optimization, and dispute resolution.
- Device ID and approximate GPS location: Tracked during active deliveries to coordinate and update delivery status.
4. How We Use & Retain Your Data
The table below describes what personal data is used for, along with its specific retention period:
| Data type | Purpose | Retention period |
|---|---|---|
| Name and phone number | Account creation, delivery communication, support | Until account deletion + 3 years |
| Aadhaar number | KYC verification only — sent to UIDAI, not stored by PicsiDrop | Deleted immediately after verification |
| PAN number | Tax compliance, traveler identity verification | 7 years (Income Tax Act requirement) |
| Selfie photograph | Face match for KYC, fraud prevention | 3 years from last delivery |
| Bank / UPI details | Payment disbursement to Traveler | Until account deletion + 3 years |
| Delivery addresses | Route matching, delivery completion | 1 year from delivery date |
| Location data | Real-time route matching during active delivery only | Not stored after delivery completion |
| Payment records | Financial compliance, dispute resolution, GST | 7 years (legal requirement) |
5. Data Sharing & Disclosure
PicsiDrop does NOT sell your personal data to any third party for marketing purposes. We share data only with trusted partners and law enforcement under strict circumstances:
- Cashfree Payments: Shared for payment processing (governed by Cashfree's own privacy policy).
- Setu / HyperVerge: Shared temporarily to process Aadhaar KYC checks and Driving License validation. (Data is not retained by them).
- Firebase (Google): Used for website hosting and secure cloud database (data stored and processed in India).
- Indian law enforcement or courts: Disclosed only when legally requested by valid court orders, subpoenas, or police directives from Hyderabad.
- Anonymised metrics: We may share anonymised, aggregated data for research or analysis.
6. Your Rights (DPDPA 2023) & Grievances
Under the Digital Personal Data Protection Act (DPDPA) 2023, you hold the following rights:
- Right to access: You may request a copy of all personal data PicsiDrop holds about you.
- Right to correction: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your data, subject to legal tax and financial compliance requirements.
- Right to withdraw consent: You may withdraw consent to data processing at any time (doing so will result in immediate account termination).
If you have queries, complaints, or rights requests, contact our designated privacy team. Responses are completed within 30 days:
| Contact type | Details |
|---|---|
| Legal / privacy concerns | privacy@picsidrop.in |
| Data Protection Officer | dpo@picsidrop.in |
| Grievance Officer (DPDPA) | grievance@picsidrop.in |
