Privacy policy

• Your account: name, mobile number, email address and password. The password is stored only as a one-way hash.
• Your vehicles: make, model and registration number, and condition notes the crew records.
• Your addresses: the address, pin code and landmark, the map location you pin, and access notes such as parking type, height limits, gate passes and the name at the security desk.
• Bookings and payments: the service, date and time, amounts, GST invoices, and your GST number if you add one. Razorpay processes payments; we receive a payment reference, never your card or UPI details.
• Visit records: photos of the vehicle before and after the work, and the crew’s notes.
• Crew members: in the Crew app, your name, mobile number, the jobs you worked on and the photos you take on them.

The VahaanSpa app asks for your location only when you pin an address, and only while you are using the app. The Crew app uses the camera for job photos. Neither app tracks where you go.

There are no analytics, advertising or tracking tools in the apps or on this website. To keep you signed in, the apps store your session in the phone’s secure storage, and this website stores it in your browser.

• To take your booking and schedule a crew
• To send the crew to the right place, with the right access details
• To contact you about a visit
• To take payment, issue GST invoices and process refunds
• To email you a code when you reset your password
• To keep accounts secure and meet our legal obligations

We do not sell your data, and we do not share it for advertising. It goes only to:

• The crew assigned to your visit: your name, address, access notes and vehicle
• Razorpay, to process payments and refunds
• Google, for address search and maps, and for the servers and file storage we run on
• MongoDB Atlas, which hosts our database
• Our email provider, to send password-reset codes

These providers store data on servers that may be outside India, for example in Singapore.

• Your account details, vehicles and addresses: until you delete your account
• Bookings, payments, GST invoices and visit records: for as long as GST law requires, currently 72 months from the due date of the annual return for that year
• Password-reset codes: they expire after 10 minutes and are deleted automatically

Under India’s Digital Personal Data Protection Act, 2023, you can ask us for a summary of the data we hold about you, have it corrected, and have it erased. You can correct most of it yourself in the app.

To erase it, delete your account. See deleting your account for what is removed and what the law requires us to keep.

Passwords are stored only as hashes, everything travels over encrypted connections, and changing your password or deleting your account ends every signed-in session. Only staff who need your details for a visit can see them.

VahaanSpa is for adults. We do not knowingly collect data from anyone under 18.

When this policy changes, we update this page and the date at the top.

Email hello@vahaanspa.in or call +91 80 4800 1997. If we cannot resolve a complaint about your data, you can take it to the Data Protection Board of India.