Privacy Policy

1. Who handles your data and how to contact us

Exohive Digital Private Limited operates this website from Suite No. B11, H-160, H Block, Sector 63, Noida, Uttar Pradesh 201301, India. Our privacy and grievance contact is Neha, Manager - Administration, at support@exohivedigital.com. Use the Privacy centre linked on this page and in the footer to send and track a request without signing in. We do not claim to be a registered Consent Manager or a designated Significant Data Fiduciary.

For services operated on behalf of an employer, fleet operator or another organisation, that organisation may determine the purposes of tracking. Contact them as well; we will help route your request to the responsible organisation.

2. Information and purpose, by service

Enquiries and callbacks: name, contact details, company, city, vehicle details and the message you choose to provide are used to answer your enquiry, prepare a quote and provide the requested assistance. Insurance enquiries also use vehicle type, policy status, insurance purpose and preferred contact channel.

Challan lookup: the registration number you submit is sent to the configured challan provider to retrieve challan information. A settlement request also records your name, mobile, selected challans and quoted charges so the team can assist. You must have lawful authority to use the vehicle details. This website cannot change official government records.

Online orders: name, mobile, email, delivery and billing address, cart items, payment references and optional business GSTIN are used for checkout, fulfilment, support, refunds and tax invoices. Payment details entered in the gateway are handled by Razorpay; we use payment identifiers and status, not your full card number or CVV.

Accounts and GPS services: login identifiers, password hashes or verification codes, registered vehicles and linked device telemetry such as location, time, speed and ignition are used to authenticate access and deliver the contracted tracking service. Tracking other people requires appropriate authority, notices and any required consent; buying a tracker does not grant that authority.

Privacy requests: name, registered contact, request text, verification outcome, actions and correspondence are used to verify and fulfil your request and maintain an accountability record. Do not submit passwords, card details, Aadhaar numbers or full identity documents in our forms.

3. Consent, service messages and withdrawal

Where we rely on consent, we ask for a specific affirmative choice before collecting or sharing the information for that purpose. Required service processing is separated from promotional marketing. Our enquiry consent does not subscribe you to unrelated advertising.

You can withdraw consent or object to optional contact through the Privacy centre or support email. Withdrawal is as accessible as making an enquiry; you do not need to pay or create an account. It does not invalidate earlier lawful processing, cancel paid orders automatically, or remove records that law requires us to retain. We explain if withdrawal prevents us from providing a requested service.

4. Who receives information

Authorised staff receive the information needed for their work. Relevant service providers may include hosting and storage providers, email and SMS providers, the configured challan provider, insurance partners when needed for your requested assistance, Razorpay for payments and Shiprocket and delivery couriers for shipping. We share the relevant details for those purposes and do not authorise unrelated use.

We may disclose information to competent authorities when legally required, and retain information needed to investigate fraud, handle disputes or enforce legal rights. Ask for a summary of your data and relevant sharing through an access request. Storage and processing locations depend on the hosting and service providers used. Contact our privacy team for information about relevant recipients and locations.

5. Cookies and browser storage

Secure session cookies support staff and customer sign-in. Browser storage remembers the cart, private order links, theme and a previously verified mobile number. Keep private order and privacy-request links confidential, especially on shared devices.

We do not use advertising or behavioural analytics cookies on this website. The contact-page Google Map loads only after you choose to load it, and Google may then use its own cookies. External fonts, map tiles in tracking services, payment checkout and links such as WhatsApp or courier tracking may contact their respective providers when loaded or opened. Adding optional trackers later requires an appropriate consent choice before they load. You can clear saved browser details from the Privacy centre; use sign out to end authenticated sessions.

6. Retention, correction and deletion

We review information against its service purpose, consent, legal obligations and any active dispute or preservation requirement. We erase or anonymise data when it is no longer needed and retention is not required. We do not promise immediate deletion of every record.

Invoices, accounting records, payment and shipping records, security logs and request evidence can require different retention periods. Applicable DPDP retention rules and other laws must be applied when they take effect. A deletion request covers linked operational records and relevant processors, with retained categories and reasons explained in the response.

Backup copies and messages already delivered to business email systems require controlled expiry or separate action. Deletion must be reapplied if a backup is restored. Government challan records and insurer-controlled records remain subject to their own procedures.

7. Your requests and grievances

Use the Privacy centre for a summary of personal data and sharing, correction or completion, erasure or account deletion, consent withdrawal, a grievance, or nomination of a person to exercise rights in the event of death or incapacity. Representatives and nominees must establish authority; requesting another person’s records does not grant access.

We acknowledge the request with a reference and private tracking link. We verify identity using the registered contact before disclosure or changes, request only proportionate additional information, and respond through the verified channel within 90 days. We explain any partial fulfilment, lawful retention or refusal. If unresolved, raise a grievance with us first; you may approach the Data Protection Board as applicable law and its procedures take effect.

8. Children and authorised tracking

Self-service enquiries, checkout and account registration are intended for adults aged 18 or above. An adult declaration is not verifiable parental consent. Do not use these forms to register a child or upload child location data. A parent or guardian should contact support if a child’s data has been provided.

Any deployment involving children or persons represented by a lawful guardian requires a separately verified authority and consent process, and review of restrictions and applicable exemptions before activation. This website does not provide that verification merely by selling a tracker.

9. Security and incidents

We use access restrictions and authentication controls in the application. We maintain security according to the systems and service providers used. No website can promise absolute security. Keep your credentials and private links secure.

If a personal data breach occurs, we investigate, contain it and provide the required notices to affected individuals and the competent authority under applicable law. Keep your contact information current and tell support promptly about suspected misuse.

10. Updates and legal commencement

The DPDP Act and Rules have phased commencement. You can use the Privacy centre to manage the choices described in this notice. We update this notice when purposes or practices change and seek fresh consent where required.