Privacy Policy

Vehix is a smart vehicle identity and vehicle communication platform designed to help vehicle owners connect their vehicles with useful digital services.

Throughout this policy, "Vehix", "we", "us" or "our" refers to the operator of the Vehix service.

Depending on which Vehix features you use, we may process different categories of information.

We aim to collect only information that is reasonably necessary for the relevant service or specified purpose.

We may process personal data for specific and lawful purposes, including:

• Creating and managing your Vehix account.
• Registering and managing vehicles associated with your account.
• Generating, maintaining and operating Vehix vehicle QR codes.
• Enabling vehicle owners and other authorised users to use vehicle-related communication features.
• Sending vehicle alerts or notifications requested through the service.
• Providing customer support and responding to enquiries.
• Processing orders, subscriptions and payments.
• Preventing fraud, abuse, unauthorised access and misuse of the service.
• Maintaining, securing and improving the Vehix platform.
• Troubleshooting technical problems and monitoring service performance.
• Complying with applicable legal obligations and responding to lawful requests.
• Protecting the rights, property and safety of Vehix, our users and others.

Vehix QR codes are designed to provide a convenient way to interact with vehicle-related services.

Depending on how a vehicle owner configures their QR code, certain vehicle-related information or actions may be made available to a person who scans the QR code.

Vehicle owners are responsible for ensuring that information they choose to make available through their vehicle profile is appropriate and does not unnecessarily expose another person's personal information.

Certain Vehix features may allow a person who interacts with a vehicle QR code to request communication with the vehicle owner.

Where technically and commercially available, Vehix may use third-party communication providers to facilitate calls, messaging or notifications.

Such providers may process limited information necessary to establish or deliver the communication. Their processing may also be governed by their own privacy policies and applicable contractual obligations.

We do not intend to sell personal data as a product.

We may share or provide access to personal data where reasonably necessary for the purposes described in this policy, including with:

• Technology and infrastructure providers that help operate Vehix.
• Payment and transaction service providers where required to process payments.
• Communication providers where required to provide calls, SMS or other communication services.
• Cloud hosting, database, security and analytics providers where required to operate and secure the service.
• Professional advisers, auditors or service providers where reasonably necessary.
• Government authorities, law enforcement agencies or other persons where required or authorised by applicable law.

We seek to ensure that service providers receiving personal data process it only for appropriate purposes and with reasonable safeguards.

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

• Access controls and authentication mechanisms.
• Server-side handling of sensitive credentials and secrets.
• Reasonable database security controls.
• Monitoring and logging of relevant system activity.
• Restricted access to personal data based on operational requirements.
• Security updates and maintenance of the Vehix platform.

No internet-based service can guarantee absolute security. We therefore continuously work to improve the security and resilience of our systems.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, continued operation of the relevant service, compliance with legal obligations, dispute resolution, security and legitimate business requirements.

When personal data is no longer required, we may delete, anonymise or otherwise securely dispose of it, subject to applicable legal or operational requirements.

Subject to applicable law and any conditions or exceptions that may apply, you may have rights relating to your personal data, including rights concerning:

• Access to information about the processing of your personal data.
• Correction of inaccurate or incomplete personal data.
• Erasure of personal data where applicable.
• Withdrawal of consent where consent is the basis for processing.
• Grievance redressal.
• Making a complaint to the appropriate authority or Data Protection Board where applicable.

Where processing is based on consent, applicable law provides for withdrawal of consent, and the withdrawal process should be reasonably accessible.

Vehix is not intended to knowingly collect personal data from children in circumstances where applicable law requires additional safeguards or verifiable parental consent.

If you believe a child has provided personal data to Vehix in circumstances where this was not appropriate, please contact us so that we can review the situation.

Vehix may use cookies, local storage and similar technologies where reasonably necessary to operate, secure and improve the website.

Where additional technologies are used for analytics, preferences or other purposes, we will provide appropriate information and choices where required by applicable law.

Vehix may contain links to or integrations with third-party websites and services.

Third-party services operate independently and may have their own privacy policies. We encourage you to review the privacy practices of any third-party service before providing personal information to it.

Some technology or service providers used by Vehix may process information from locations outside India.

Where personal data is processed outside India, Vehix will take into account applicable Indian legal requirements, contractual safeguards and other appropriate protections.

If a personal data breach occurs, Vehix will assess the incident and take steps required under applicable law, including appropriate containment, investigation, remediation and notifications where legally required.

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or privacy practices.

When we make material changes, we may provide an appropriate notice through the website, application, email or another suitable communication channel.

The latest version will always be made available through the Vehix website.

This Privacy Policy is intended to be interpreted consistently with applicable laws and regulations of India, including applicable provisions of the Digital Personal Data Protection Act, 2023 and rules made under it.

Nothing in this policy is intended to remove or restrict a right or protection that cannot lawfully be excluded.