Privacy Policy

1. Our role

For the operational data you enter into the Service (consignments, manifests, invoices, vouchers, parties, employees, and related documents), YOUR organisation is the Data Fiduciary and we act as a Data Processor on your instructions — we process it only to provide the Service to you.

For your account and website data (the details you give us to open and run your subscription), we act as the Data Fiduciary.

2. Information we collect

Account information — name, email, mobile number, company details, branch and role assignments, and billing details.

Operational data you enter — the transport, accounting, HR and fleet records described above, which may include personal data of your employees, drivers and counterparties.

Technical data — IP address, device/browser information, and log data generated when you use the Service.

Public-website visit data — if you browse digitransito.com, standard measurement data about the visit (IP address, device and browser, pages viewed, and how you reached us). Browsing requires no account, and we do not link this data to any tenant, user account or operational record. See section 13.

3. How we use information

To provide, operate, secure and maintain the Service for your organisation.

To authenticate users, enforce access control, and keep your data isolated to your tenant.

To send transactional notifications (e.g. one-time passwords, compliance reminders) via email, SMS or WhatsApp where you have enabled them.

To prevent abuse, debug issues, take backups, and comply with our legal obligations.

4. Legal basis

We process personal data on the basis of your consent and for the legitimate uses permitted by the DPDP Act, including providing the Service you have requested and meeting legal obligations. Where you upload the personal data of others, you confirm you have the lawful basis to do so.

5. Multi-tenant isolation & no sale

DigiTransito is multi-tenant. Your data is logically isolated to your company’s tenant (enforced by database row-level security) and is not accessible to other customers. We do NOT sell your data or use it for advertising.

6. Sharing & sub-processors

We share data only with sub-processors necessary to run the Service — e.g. cloud hosting, and, where you enable them, SMS / WhatsApp / email gateways. Sub-processors are bound to protect the data and use it only to provide their service to us.

For our public website only, visit-measurement data is shared with Google (Tag Manager and Analytics) as described in section 13. This concerns website visitors alone — no operational data from inside your tenant is ever shared with an analytics provider.

We may disclose information where required by law, or to establish, exercise or defend legal claims, or to protect the rights and safety of users and the public.

7. Cross-border processing

The Service is hosted on cloud infrastructure that may process or store data outside your state or country. The public-website analytics described in section 13 are likewise operated by a provider that processes data outside India. We take reasonable steps to ensure such processing has appropriate safeguards and complies with applicable law.

8. Data security

We apply row-level tenant isolation, least-privilege database roles, encrypted transport (TLS), CSRF protections, and column-level encryption for sensitive personal data.

No system is perfectly secure. We work continuously to protect your data and will notify you and the Data Protection Board of India of a personal-data breach as and where required by law.

9. Data retention

We retain your operational data while your account is active and as needed to provide the Service and meet statutory record-keeping requirements (e.g. tax and transport records). On termination, we make your data available for export for a reasonable period, after which it may be deleted or anonymised.

10. Your rights

Subject to the DPDP Act, you may request access to, correction or completion of, updating of, or erasure of your personal data, withdraw consent, nominate another person to exercise your rights, and raise a grievance. Tenant administrators can manage most user data directly within the platform.

For operational data held on behalf of your organisation, please route requests through your organisation (the Data Fiduciary); we will assist it as its Processor.

11. Grievance Officer

If you have any concern about how your personal data is handled, you may contact our Grievance Officer: The Grievance Officer, DigiTransito Private Limited, Ahmedabad, Gujarat, India — grievance@digitransito.com. We will acknowledge and respond within the timelines required by law.

12. Children

The Service is intended for businesses and is not directed to children. We do not knowingly process the personal data of a child except as permitted by law.

13. Cookies & website analytics

Inside the Service — the application at your tenant address, once you sign in — we use strictly necessary cookies only: httpOnly authentication and CSRF cookies. We do not run analytics or advertising trackers inside the application, and your operational data is never sent to a third-party analytics provider.

On our public website (digitransito.com) we use Google Tag Manager to load measurement tags that tell us how visitors discover and move through our marketing pages. These may set first- and third-party analytics cookies and share standard technical data (such as IP address, device, browser and pages viewed) with Google. They run only on the public website, never inside your tenant.

The public website requires no sign-in, so these measurements concern anonymous visitors — we do not connect them to a tenant, a user account, or any record you hold in the Service. Signing in to your tenant takes you off the public website and away from all analytics.

We do not use advertising or cross-site remarketing cookies, and we do not sell your data. You can block website analytics at any time using your browser’s cookie controls, a tracker blocker, or Google Analytics’ opt-out — none of which affects your use of the Service.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified in-product or by email, and the "last updated" date above will change. Continued use after the effective date constitutes acceptance.

15. Contact

For any privacy question or request, contact privacy@digitransito.com. Postal: DigiTransito Private Limited, Ahmedabad, Gujarat, India.