Privacy Policy

This Privacy Policy governs the collection, processing, storage, and transfer of personal and operational information by ibusx Corporation Pvt Ltd (“ibusx”, “Company”, “we”, “our”, or “us”) in connection with our website (ibusx.in), our Drivexa Fleet Operations Operating System accessible at vehicleops.in, and associated software, services, enquiry forms, and communications.

We are committed to maintaining the privacy and integrity of your data in strict compliance with applicable Indian data protection laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDPA”).

1. Information We Collect

We collect information that you furnish directly to us, as well as operational and technical telemetry generated when you interact with our websites and software platforms:

A. Information Provided Through Enquiry and Demo Forms

When you request a product demonstration, consult our fleet specialists, submit an inquiry, or reach out via WhatsApp or phone, we collect:

• Full Name and Designation: To address you and understand your organizational role.
• Phone & WhatsApp Number: To coordinate demo schedules, share technical walkthrough links, and deliver operational insights.
• Corporate Email Address: To deliver official commercial proposals, platform updates, and documentation.
• Fleet Size & Operational Profile: Fleet composition (e.g., 5–15, 16–40, 41–100, 100+ vehicles), vehicle categories (corporate staff buses, heavy freight, goods carriers, intercity coaches), and operational base.
• Operational Notes & Pain Points: Operational challenges voluntarily shared, such as fuel pilferage tracking, trip compliance workflows, or vehicle P&L visibility.

B. Telematics and Operational Data (Drivexa SaaS Customers)

For commercial transport operators utilizing the Drivexa Fleet OS, we process operational telemetry on behalf of the customer:

• Vehicle Identifiers: Registration plates, VIN, chassis numbers, odometer readings, and vehicle categories.
• Hardware & Telematics Sensor Feeds: GPS coordinates, ignition status, speed logs, fuel sensor levels, fuel drainage events, and geofence entries/exits.
• Driver Rostering & Trip Data: Assigned driver names, license validity status, trip departure/arrival checkpoints, trip advances, and FASTag toll expense logs.

C. Automatically Collected Technical Data

When you browse our website, our web servers automatically log standard network connection metadata, including Internet Protocol (IP) address, browser type and version, device hardware model, operating system, referring URL, pages viewed, and timestamps.

2. How We Use Information

ibusx Corporation Pvt Ltd processes personal and operational data exclusively for legitimate commercial and technical purposes:

• Scheduling and Conducting Demos: To respond to your demo requests, prepare tailored simulations matching your fleet profile, and demonstrate Drivexa features via WhatsApp, phone, or web conferencing.
• Platform Operation and Delivery: To provision customer tenant accounts, synchronize telematics hardware, calculate fuel consumption anomalies, and render per-vehicle P&L reports.
• Customer Support & Incident Resolution: To assist fleet dispatchers, resolve hardware/sensor telemetry inquiries, and provide software updates.
• Fraud Prevention & System Integrity: To prevent unauthorized system access, safeguard telematics endpoints against spoofing, and ensure service availability.
• Statutory and Legal Compliance: To comply with applicable tax, commercial accounting, and regulatory obligations under Indian law.

3. Data Protection & Security Measures

In adherence to Rule 8 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, ibusx maintains comprehensive physical, organizational, and technological security controls:

• Encryption Standards: Data in transit is secured using modern cryptographic protocols (TLS 1.2 / TLS 1.3 with HTTPS). Database records are encrypted at rest using AES-256 standard encryption.
• Access Controls & Segmentation: Access to backend customer databases is restricted on a strict need-to-know basis using Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA).
• Network Security & Firewalls: Our web infrastructure is protected by web application firewalls (WAF), automated DDoS mitigation, and continuous vulnerability monitoring.
• Audit Trails: Privileged administrative actions and platform logins are continuously logged and audited for anomalous activity.

4. Third-Party Sharing and Disclosure

We maintain an uncompromising stance regarding data privacy:

• No Sale of Data: We will never sell, rent, lease, or barter your personal information, corporate fleet details, or contact data to any third party.
• Vetted Infrastructure Vendors: We may share data with vetted third-party service providers who assist us in operating our services (such as secure cloud infrastructure providers, SMS/WhatsApp communication gateways, and database hosts). These partners process data strictly on our instructions and subject to contractual confidentiality obligations.
• Legal & Regulatory Disclosures: We may disclose data if required to do so by an order of a competent Indian court, law enforcement agency, or statutory regulatory authority under the provisions of the IT Act, 2000.

5. Cookies and Web Technologies

Our website utilizes minimal, essential web technologies:

• Essential Functionality: Session cookies required to manage user navigation and prevent form submission replay attacks.
• Google Fonts CDN: We load the typography font family ‘Inter’ via Google Fonts content delivery networks. Google may log basic HTTP request data necessary to serve font files.
• Performance Analytics: Aggregated, non-personally identifiable metrics to gauge page load speeds, screen responsiveness, and error logs.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Note that certain interactive elements may function suboptimally if cookies are disabled.

6. Data Retention

We retain personal data obtained through demo and contact forms only for as long as necessary to fulfill commercial discussions, evaluate operational fit, and maintain customer communication history.

For active Drivexa subscription accounts, telematics logs and fleet trip history are retained in accordance with the customer’s Master Service Agreement and applicable Indian statutory accounting regulations. Upon contract expiration or an authenticated request for deletion, operational telemetry is systematically purged or permanently anonymized.

7. User Rights Under Indian Law

In accordance with the Information Technology Rules, 2011 and the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

• Right to Access: You may request a summary of the personal information we hold about you.
• Right to Correction & Update: You may request the rectification of any inaccurate, misleading, or outdated personal information.
• Right to Erasure: You may request the deletion of your personal data, provided there is no ongoing statutory or contractual obligation requiring its retention.
• Right to Withdraw Consent: You may withdraw your consent for prospective marketing and demo follow-ups at any time by emailing us at [email protected].

8. Grievance Redressal and Contact Details

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the details of the designated Grievance Officer are set forth below:

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications in our software practices, regulatory standards, or legal frameworks. Any changes will become effective upon posting the revised policy with an updated “Last updated” timestamp.