Privacy Policy

Revised 12 October 2026

This is a draft. The highlighted details are still being confirmed and will be filled in before it takes effect.

1. Introduction

This Privacy Policy explains how [Company Legal Name] ("FixPoint", "we", "us") collects, uses, shares and protects your personal data when you use the FixPoint website, the FixPoint Drive mobile and web apps, the Drishti Intelligence device and related services (together, the "Services").

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its rules, the Information Technology Act, 2000 and other applicable Indian law. For the purposes of the DPDP Act, FixPoint is the Data Fiduciary for the personal data described in this policy.

By creating an account or using the Services, you confirm that you have read this policy. Where we rely on your consent, we will ask for it separately and clearly, and you may withdraw it at any time.

Company details: [Company Legal Name], [Registered Office Address], CIN: [CIN]. Website: [www.fixpoint.in].

2. Information we collect

We collect only the data needed to provide the features you choose to use. Many modules can be switched off, and data for a disabled module is not collected.

Account and identity
Examples
Name, mobile number, email, profile photo, preferred language, login and OTP records
Source
You
Vehicle and registration
Examples
Registration number, RC details, owner name, make and model, fuel type, chassis and engine numbers, registration date, vehicle status (e.g. Active, For Sale, Stolen, Scrapped)
Source
You, number-plate scans, VAHAN / Parivahan
Documents
Examples
RC, insurance policies, PUC, permits, service records, FIRs, scrapping certificates, driving licence and other files you upload or scan
Source
You
Location
Examples
Device location for Nearby Services, Trip Planner and SOS; live GPS location, trip routes and geo-fence events from Drishti
Source
Your device, Drishti
Vehicle telemetry
Examples
OBD-II fault codes, engine and sensor readings, speed, fuel consumption, distance, driving patterns
Source
Drishti
Transactions
Examples
Insurance purchases, service and parts orders, FASTag recharges, challan payments, driver bookings, rentals, invoices
Source
You, payment and partner providers
Emergency profile
Examples
Emergency contacts, blood group, medical information you choose to add; geo-tagged accident photos and videos
Source
You
Fleet and business
Examples
Driver details, driver licences and IDs, employment contracts, client contracts, rental and financial records
Source
Fleet account holders
Learning and rewards
Examples
Course progress, mock-test scores, points earned and redeemed, membership tier
Source
You, the Services
Technical
Examples
IP address, device model, operating system, app version, crash logs, cookies, usage analytics
Source
Your device

Information we collect, with examples and where it comes from
Category	Examples	Source
Account and identity	Name, mobile number, email, profile photo, preferred language, login and OTP records	You
Vehicle and registration	Registration number, RC details, owner name, make and model, fuel type, chassis and engine numbers, registration date, vehicle status (e.g. Active, For Sale, Stolen, Scrapped)	You, number-plate scans, VAHAN / Parivahan
Documents	RC, insurance policies, PUC, permits, service records, FIRs, scrapping certificates, driving licence and other files you upload or scan	You
Location	Device location for Nearby Services, Trip Planner and SOS; live GPS location, trip routes and geo-fence events from Drishti	Your device, Drishti
Vehicle telemetry	OBD-II fault codes, engine and sensor readings, speed, fuel consumption, distance, driving patterns	Drishti
Transactions	Insurance purchases, service and parts orders, FASTag recharges, challan payments, driver bookings, rentals, invoices	You, payment and partner providers
Emergency profile	Emergency contacts, blood group, medical information you choose to add; geo-tagged accident photos and videos	You
Fleet and business	Driver details, driver licences and IDs, employment contracts, client contracts, rental and financial records	Fleet account holders
Learning and rewards	Course progress, mock-test scores, points earned and redeemed, membership tier	You, the Services
Technical	IP address, device model, operating system, app version, crash logs, cookies, usage analytics	Your device

We do not knowingly collect sensitive data that is not needed for a feature. Medical information in your emergency profile is optional and used only to support emergency response.

Data about other people. If you add details of drivers, emergency contacts, co-owners or clients, you confirm that you are entitled to share them with us and have informed those people of this policy.

3. How we use your information

We use personal data only for specified, lawful purposes, including to:

create and secure your account, verify ownership by OTP, and auto-fill vehicle details from government records;
store, categorise and track expiry of your documents, and send renewal, PUC, tax, service and challan reminders;
provide insurance quotes, service bookings, spare-parts orders, FASTag, e-challan, RTO, driver-on-demand and rental services you request;
run Drishti features: diagnostics, predictive maintenance alerts, live tracking, geo-fencing, time-fencing, speed alerts and trip history;
respond to emergencies, including sharing your location and emergency profile with contacts, responders or service providers you choose;
personalise your dashboard, news feed, recommendations, vehicle valuations and total-cost-of-ownership estimates;
run the Parts Verifier, Arena Studio previews, calculators, learning modules and the rewards programme;
process payments, issue invoices, prevent fraud and meet tax, accounting and legal obligations;
provide customer support, including through WhatsApp where you contact us there;
improve, test and secure the Services, using aggregated or de-identified data wherever possible.

AI features. Recommendations, document auto-sorting, maintenance predictions and parts verification are automated estimates. They support your decisions but do not replace a mechanic, insurer or official authority.

Marketing. We send promotional messages only with your consent. You can opt out at any time from settings or the unsubscribe link, without affecting service messages.

We do not sell your personal data.

We share personal data only as needed to deliver what you ask for, and only with recipients bound by confidentiality and data-protection obligations.

Government systems (VAHAN, Parivahan, RTO, e-challan, NHAI / FASTag issuers)
What is shared
Registration number, OTP-verified identity, application details
Why
Fetch records, track RTO applications, check and pay challans, manage FASTag
Insurers and insurance intermediaries
What is shared
Vehicle, owner and claim details
Why
Quotes, policy purchase, renewals and claims
Service centres, parts sellers, dealers, delivery partners
What is shared
Contact, vehicle, address and order details
Why
Bookings, deliveries, test drives
Drivers and driving instructors
What is shared
Name, contact, pickup location, booking details
Why
Driver-on-demand and lesson bookings
Emergency contacts and responders
What is shared
Live location, emergency profile, incident media
Why
SOS response, only when you trigger it
Payment gateways and banks
What is shared
Transaction details (we do not store full card numbers)
Why
Process payments
Technology providers (cloud hosting, SMS, maps, analytics, AI processing, support tools)
What is shared
Data needed for the specific service
Why
Operate the Services on our behalf
Authorities and courts
What is shared
Data required by law
Why
Legal obligations, valid orders, protecting rights and safety
A buyer or successor entity
What is shared
Account and service data
Why
Merger, acquisition or restructuring, with notice to you

Who we share personal data with, what is shared and why
Recipient	What is shared	Why
Government systems (VAHAN, Parivahan, RTO, e-challan, NHAI / FASTag issuers)	Registration number, OTP-verified identity, application details	Fetch records, track RTO applications, check and pay challans, manage FASTag
Insurers and insurance intermediaries	Vehicle, owner and claim details	Quotes, policy purchase, renewals and claims
Service centres, parts sellers, dealers, delivery partners	Contact, vehicle, address and order details	Bookings, deliveries, test drives
Drivers and driving instructors	Name, contact, pickup location, booking details	Driver-on-demand and lesson bookings
Emergency contacts and responders	Live location, emergency profile, incident media	SOS response, only when you trigger it
Payment gateways and banks	Transaction details (we do not store full card numbers)	Process payments
Technology providers (cloud hosting, SMS, maps, analytics, AI processing, support tools)	Data needed for the specific service	Operate the Services on our behalf
Authorities and courts	Data required by law	Legal obligations, valid orders, protecting rights and safety
A buyer or successor entity	Account and service data	Merger, acquisition or restructuring, with notice to you

Partners such as insurers, service centres and dealers may also act as independent Data Fiduciaries. Their own privacy policies govern the data once they receive it.

Fleet account holders can see the location, trips and driving data of vehicles and drivers in their fleet. Fleet operators are responsible for informing their drivers and obtaining any consent required.

6. Drishti device, location and remote control

The Drishti device collects data continuously while connected to your vehicle, so we apply extra safeguards to it.

What it collects: GPS location, trip routes, speed, ignition events, OBD-II fault codes, engine and sensor readings, fuel data and connection logs for its Wi-Fi hotspot.
Who can see it: the account holder, and any family members, drivers or fleet managers the account holder grants access to.
Remote lock, unlock and engine disable: these commands are sent only from an authenticated account, are logged with time and user, and may require an extra confirmation step. Use them only on vehicles you own or are authorised to control.
Hotspot: we do not inspect the content of browsing traffic over the in-vehicle hotspot. We log only connection and data-usage metadata.
Turning it off: you can pause location sharing, disable telemetry modules or unpair the device in the app. Unplugging the device stops all collection.

App location is collected only while you use location features, or in the background if you enable it for SOS or trip logging. You can change this in your phone's settings.

7. Retention, security and international transfers

Retention. We keep personal data only as long as needed for the purpose it was collected for, or as required by law. When you delete your account, we erase or anonymise your data within [90] days, except where we must keep it longer:

transaction, invoice and tax records, for the period required by tax and accounting law (generally up to 8 years);
data linked to an insurance claim, legal dispute, police complaint or regulatory request, until it is resolved;
logs needed for security and fraud prevention, for up to [180] days.

If you stop using the Services, we may treat your account as inactive and erase it after notifying you, as permitted under the DPDP Act and its rules.

Security. We use reasonable security safeguards, including encryption in transit and at rest, access controls, OTP-based verification, audit logs for remote vehicle commands and regular security reviews. No system is fully secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as the law requires.

International transfers. Our primary servers are located in [India]. Some service providers may process data outside India. We transfer data only to countries not restricted by the Government of India, and under contracts that protect it. The International Emergency feature necessarily shares data with responders, embassies or providers in the country where you need help.

8. Your rights, children and cookies

Your rights. Under the DPDP Act you have the right to:

get a summary of the personal data we process about you and who we have shared it with;
correct, complete or update inaccurate data;
erase data that is no longer needed, unless we must keep it by law;
withdraw consent at any time;
have your grievances addressed by us, and then by the Data Protection Board of India;
nominate a person to exercise your rights if you die or become incapacitated.

You can exercise most rights in the app under Settings > Privacy, or by writing to our Grievance Officer. We will respond within [30] days. We may need to verify your identity first.

Children. The Services are meant for users aged 18 and above. Learning Center courses for learner's licence applicants under 18 require verifiable consent from a parent or lawful guardian. We do not track, profile or send targeted advertising to children.

Cookies. Our website uses essential cookies to keep you signed in and secure, and optional analytics and preference cookies only with your consent. You can change cookie choices in the cookie banner or your browser settings.

9. Changes and contact

Changes to this policy. We may update this policy as the Services or the law change. We will post the new version here with a revised date, and notify you in the app or by email before material changes take effect. Where a change needs fresh consent, we will ask for it.

Grievance Officer. In line with the Information Technology Act, 2000, its rules and the DPDP Act, you can contact our Grievance Officer:

Name: [Grievance Officer Name]
Email: [privacy@fixpoint.in]
Address: [Registered Office Address]
Hours: Monday to Friday, 10:00 to 18:00 IST

We will acknowledge your complaint within 24 hours and aim to resolve it within [15] days. If you are not satisfied, you may complain to the Data Protection Board of India.