O8 Blue Sky Logistics Private Limited ("Company," "O8," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our electric vehicle transportation platform and related services ("Services"). By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your information as described herein.

1. Scope and Applicability

1.1 This Privacy Policy applies to all personal data collected or processed by O8 in connection with:

• Our website (https://o-8.co.in) and mobile applications (iOS, Android)

• Ride booking, fleet management, and charging coordination services

• Customer support interactions

• Marketing, surveys, and promotional campaigns

• Partnerships, vendor integrations, and business client relationships

1.2 It does not apply to third-party websites, applications, or services linked to or integrated with our platform. We encourage you to review their privacy policies.

1.3 We may update this Policy to reflect changes in legal requirements or our practices. Significant revisions will be communicated via prominent notices within the Services and, where appropriate, by email.

2. Key Definitions

Personal Data: Any information relating to an identifiable individual (data principal), including names, contact details, payment data, and location.

Processing: Any operation performed on personal data, including collection, storage, use, transfer, disclosure, or deletion.

Data Principal: An individual whose personal data is processed by O8.

Data Fiduciary: O8, as the entity that determines the purpose and means of processing personal data.

Significant Data Fiduciary: A large or high-risk data fiduciary as defined under the Digital Personal Data Protection Act, 2023.

3. Personal Data We Collect

3.1 Data You Provide Directly

• Account & Profile Information: Name, email, phone, company, role, profile picture

• Identity Documents: Driver’s license, government ID, vehicle registration (where required)

• Payment & Billing: Credit/debit card details, billing address, UPI, invoices

• Ride Details: Pickup/drop-off locations, vehicle type, scheduling preferences

• Customer Support: Chat transcripts, email inquiries, feedback and survey responses

3.2 Data Collected Automatically

• Device & Technical Data: Device model, OS version, IP address, browser type, app version, crash logs

• Usage Data: Service usage metrics, navigation patterns, feature engagement

• Location Data: Real-time GPS during trips (with consent), geofencing, trip history

3.3 Data from Third-Party Sources

• Verification: Driving records, background checks via accredited agencies

• Payment Processing: Transaction confirmations, fraud detection data from Razorpay, banks

• Fleet Integrations: Telematics, charging station usage, telematics APIs

4. How We Use Your Personal Data

4.1 Service Operations & Delivery

• Process ride bookings, payments, route optimization, and trip tracking

• Verify driver and vehicle credentials, conduct background checks

• Monitor safety metrics and address incidents or emergencies

4.2 Communication & Support

• Send service confirmations, notifications, receipts, and updates

• Respond to support inquiries, resolve disputes, collect feedback

• Personalized marketing with prior consent: offers, promotions, newsletters

4.3 Analytics & Product Development

• Analyze usage patterns to improve algorithms, features, and user experience

• Conduct surveys and A/B tests to refine services and interfaces

4.4 Legal Compliance & Risk Management

• Comply with DPDP Act, rules, tax regulations, and lawful requests

• Prevent, detect, and investigate fraud, abuse, or security incidents

• Manage internal audits, dispute resolution, mergers, or transfers

5. Data Sharing and Disclosure

We share personal data strictly to fulfill Service obligations or legal requirements.

5.1 Infrastructure & Cloud Providers

• Google Cloud Platform, AWS (data hosting)

• Firebase, analytics platforms (usage metrics)

• Twilio, SendGrid (SMS, email notifications)

5.2 Legal & Safety Agencies

• Law enforcement and regulatory bodies (DPDP Board)

• Emergency services in case of accidents or medical needs

5.3 M&A and Business Transfers

• Data may be transferred in a merger, acquisition, or restructuring, subject to confidentiality and notice

6. Data Retention

6.1 Retention Principles:

• Only retain personal data as long as necessary for the purposes collected

• Anonymize or securely delete data once retention periods lapse

6.2 Retention Periods:

6.3 Secure Deletion:

• Data securely erased or irreversibly anonymized at end of retention

7. Your Privacy Rights

Under the DPDP Act and applicable law, you may:

• Access your personal data held by O8

• Correct inaccuracies or update your information

• Request deletion of data (subject to legal obligations)

• Object to processing for marketing or profiling

• Withdraw consent where processing is consent-based

• Receive data portability in a structured, machine-readable format

To exercise these rights, email: privacy@o-8.co.in or legal@o-8.co.in. We respond within 7 business days.

8. Children and Minors

Services are intended for users aged 18+. If we detect personal data of individuals under 18, we will:

• Promptly delete the data

• Suspend access until appropriate consents are verified

9. Data Security Measures

We implement technical and organizational safeguards, including:

• Encryption: TLS 1.3 

• Access Controls: Role-based access, MFA for staff

• Firewalls, intrusion detection, and vulnerability scans

• Regular security audits and employee training

9.1 Breach Response:

• Containment within 24 hours

• User notification within 72 hours if high risk

• Reporting to DPDP Board and authorities as required

10. Cookies and Tracking

We use cookies and similar technologies for:

• Essential functionality: session management, security

• Performance analytics: usage statistics, crash reports

• Marketing (with consent): targeted ads, personalization

You can manage cookie preferences via our cookie banner or browser settings.

11. International Data Transfers

Your personal data may be processed or stored in India, Singapore, USA, EU, and Australia under appropriate safeguards, such as Standard Contractual Clauses and Binding Corporate Rules.

12. Legal Basis for Processing

We process personal data based on:

• Contractual necessity (Service delivery)

• Legitimate interests (fraud prevention, analytics)

• Legal obligations (tax, record-keeping)

• Consent (marketing, profiling)

13. Grievance Redressal

Grievance Officer: Sandip Basu, Chief Legal & Grievance Officer
Contact: legal@o-8.co.in 
Address: A-45, Bangur Avenue, Kolkata, WB 700055
Process: Acknowledgment within 48h, resolution in 30 days, escalate to DPDP Board if unresolved

14. Business Continuity

In a merger, acquisition, or closure, personal data may transfer to a successor. We will notify you and provide deletion options.

15. Contact Us

For privacy inquiries:

• General: privacy@o-8.co.in (48–72h response)

• Legal/Grievance: legal@o-8.co.in (24–48h response)

• Info: info@o-8.co.in

O8 Blue Sky Logistics Private Limited, A-45, Bangur Avenue, Kolkata, West Bengal – 700055, India

Acknowledgment
By using our Services, you agree to this Privacy Policy. Continued use after updates constitutes acceptance of changes.