Privacy Policy

1. Who we are

TrukLoad is operated by TrukLoad Logistics Pvt. Ltd., a subsidiary of NxtMotion Holdings LLP, registered in Mumbai, Maharashtra, India ("TrukLoad", "we", "us"). We run a freight and truck-booking marketplace at www.trukload.com and through the TrukLoad mobile applications.

We are the data fiduciary for the personal data described below, under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data we collect, and why

Account and identity data

• Mobile number — required. It is your login identifier; we send a one-time password (OTP) to verify it. Without it you cannot use the service.
• Name — optional, used to address you and to print on freight documents.
• Account role (shipper, fleet owner, driver) — used to decide which features you see.
• Profile photo — optional.

Business and compliance data

• GSTIN and company name — optional for individuals, necessary for GST-compliant invoicing and e-Way Bill generation for business shippers.
• Vehicle registration number, RC document, FASTag ID — collected from fleet owners to verify that vehicles are road-legal and genuinely owned by the person listing them.
• Driving licence — collected where a driver is assigned to a booking, for safety verification.

Location data

• Precise device location — collected in the mobile app only when a fleet owner or driver actively taps to share their vehicle's position during a trip. It is used to give the shipper live shipment tracking.
• We do not collect location in the background, we do not track you when the app is closed, and we do not build location history or advertising profiles. The app asks for permission and explains why before any location is read, and you can decline and still use every other feature.

Camera and photos

• Camera / photo library access — used only when you choose to photograph or upload a vehicle image, an RC document, or a Proof of Delivery. We access nothing else in your photo library and we never scan it.

Device and technical data

• Push notification token — if you enable notifications, so we can alert you about load matches and booking status changes. Delivered via Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS).
• Session and security data — your login session token and, if you set one, a hashed 4-digit app PIN. PINs are stored as bcrypt hashes; we cannot read your PIN.
• Basic technical logs — IP address, timestamps and error diagnostics, kept to detect abuse and debug faults.

Transaction data

• Load postings, bookings, freight prices, payment status, digital Bilty (LR) and Proof of Delivery records — the core records of the service you asked us to provide.

3. What we do not do

• We do not sell your personal data.
• We do not use your data for third-party advertising, and we do not operate advertising or cross-app tracking SDKs.
• We do not collect your contacts, SMS messages, call logs, microphone audio, or health data.
• We do not knowingly collect data from children under 18.

4. Who we share data with

We share only what is necessary, only with processors bound by contract:

• Counterparties to your booking — a shipper sees the assigned vehicle number and driver contact; a fleet owner sees the pickup/drop details of the load they accepted. Nothing more.
• Supabase — database, authentication and file storage hosting.
• SMS / WhatsApp providers (such as Fast2SMS, Gupshup or Twilio) — your mobile number, solely to deliver OTPs and transactional alerts.
• Push providers — Firebase Cloud Messaging and Apple Push Notification service.
• Government authorities — where required by Indian law, such as GST filings, e-Way Bill records, or a lawful order.

Some processors may store data outside India. Where that happens we rely on contractual safeguards permitted under the DPDP Act.

5. How long we keep it

• Account and profile data — until you delete your account, then erased immediately.
• OTP records — minutes; purged automatically after expiry.
• Location pings — retained only for the duration of the trip and a short period afterwards for dispute resolution.
• Freight transaction records — retained up to 8 years in anonymised form. Indian GST law and e-Way Bill rules require us to keep these; after account deletion they no longer carry your name or mobile number and cannot be linked back to you.

6. Your rights

Under the DPDP Act you can:

• Access and export your data — one tap in the app (Profile → Export my data) or on your account page, which returns a machine-readable JSON file.
• Correct your name, GSTIN or company details at any time in the same screen.
• Deactivate temporarily — hides your listings, keeps your data, reversible by logging back in.
• Delete permanently — erases your personal data. See our deletion page for the in-app steps and the email route.
• Withdraw consent for location or notifications at any time in your device settings, without losing access to the rest of the service.
• Complain to our Grievance Officer, and escalate to the Data Protection Board of India.

7. How we protect your data

• All traffic is encrypted in transit over HTTPS/TLS.
• Database access is enforced row-by-row, so one user can never read another user's bookings, loads or documents.
• Uploaded documents (RC, licences, POD) sit in private storage reachable only by their owner and authorised staff.
• OTPs and app PINs are stored only as cryptographic hashes.
• Administrative actions on accounts are logged and auditable.

No system is perfectly secure. If a breach affects your data we will notify you and the Data Protection Board as the DPDP Act requires.

8. Changes to this policy

If we materially change what we collect or why, we will update the date above and notify you in the app before the change takes effect.

9. Contact us

Grievance Officer
Email: [email protected]
Privacy queries: [email protected]
TrukLoad Logistics Pvt. Ltd., Mumbai, Maharashtra, India

We acknowledge complaints within 48 hours and resolve them within 30 days, per the Consumer Protection (E-Commerce) Rules, 2020.

This policy describes our current practices. It is not legal advice; please have it reviewed by qualified counsel before relying on it for regulatory filings or store submissions.