Privacy Policy
Last updated: 23 September 2026
This policy explains how MANGO CABS AND RENT A CAR PRIVATE LIMITED ("Mango Cabs", "we", "us") collects, uses, shares, keeps and deletes personal data. It covers:
- our website mangocabs.in, including the booking widget;
- phone calls and WhatsApp conversations with us;
- our internal booking, CRM and dispatch systems;
- our driver systems.
We are the Data Fiduciary for this data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
Contact: MANGO CABS AND RENT A CAR PRIVATE LIMITED, Thiruvananthapuram, Kerala 695010, India. Email info@mangocabs.in.
1. Who this policy covers
- Customers and enquirers: anyone who searches for fares, sends an enquiry or booking request, calls us, messages us on WhatsApp, or travels with us. This covers taxi and cab bookings (one-way, round trip, city use, outstation, airport and railway transfers), Tempo Traveller and other group vehicles, and event, wedding, corporate and institutional travel.
- Website visitors: anyone who browses mangocabs.in.
- Drivers, driver applicants and partners: drivers who drive for us, people who apply to drive or partner with us, and vehicle operators (vendors) we work with.
- Services we may offer in future: tour packages and self-drive rental (§12).
2. What we collect
2.1 When you enquire or book
- Your name and mobile number, and your email if you give it.
- Trip details:
- pickup, drop and stop addresses, and their map coordinates;
- dates and times;
- trip type, service and vehicle;
- number of passengers (a count only; we do not collect passenger names);
- estimated or agreed fare;
- any special requests you type.
- The fare searches you make on our website (route, dates, vehicle and price shown), which we keep as a pricing record.
- If you arrived by clicking a Google ad, the ad click identifier (gclid, gbraid or wbraid).
2.2 When you message us on WhatsApp
- Your WhatsApp phone number and profile name.
- The messages, photos, documents and other media, location pins and contact cards you send us.
- Our replies.
- If you reached us by tapping a Facebook or Instagram "click-to-WhatsApp" ad, the ad reference Meta passes to us.
2.3 When you call us or we call you
- Our phone system is provided by MyOperator. It records:
- your phone number;
- the call direction, time, duration and outcome;
- which of our staff handled the call;
- a recording of the call.
- We link each call to your enquiry or booking.
2.4 When you use our contact form
Your name, email, phone number, subject and message.
2.5 When you book and travel
- Your booking record: name, phone, route, pickup time, vehicle and agreed fare.
- Payments you make to us: the amount, the mode (for example cash, UPI, bank transfer or cheque), and a reference such as a UPI transaction ID.
- Refunds.
- Invoices, including your GSTIN if you give it.
2.6 When you visit our website
- Our website uses analytics and advertising tools that collect information about your device and how you use the site. Section 7 lists them.
- If you allow it, the booking widget can use your device location to fill in your pickup address.
2.7 Drivers, applicants and partners
See section 11.
2.8 What we do not collect
- We do not take online payments today. We collect no card numbers, bank passwords or UPI PINs.
- We do not offer customer accounts or logins on our website.
3. Why we use it
| Purpose | Data used |
|---|---|
| Answering your enquiry, giving you a quote, and taking and managing your booking | Contact details, trip details |
| Assigning a vehicle and driver and running the trip (dispatch) | Contact details, trip details, driver location |
| Talking to you by phone and WhatsApp about your enquiry or booking | Phone number, messages, call records |
| Invoicing, accounting and tax | Booking, payment and invoice records |
| Quality, training and resolving disputes | Call recordings, WhatsApp history, trip records |
| Measuring and improving our advertising | Ad click identifiers, website analytics (§7) |
| Improving our website | Website analytics, session recordings (§7) |
| Safety, security and fraud prevention | Logs, trip records, driver location |
| Recruiting and managing drivers and partners | Section 11 |
| Meeting legal obligations | As required by law |
We use your data for these purposes only. We do not sell your personal data.
4. Consent and your choices
- By sending an enquiry, messaging us or calling us, you consent to the processing described in this policy for those purposes. You can withdraw consent at any time by contacting us (§10). Withdrawing does not affect processing that already happened. It also does not stop us keeping records that the law requires (§8).
- WhatsApp: reply STOP (or UNSUBSCRIBE, OPTOUT, QUIT, END, CANCEL or STOPALL) and our system marks you as opted out. It then blocks all proactive and template messages to you. We may still reply if you message us again.
- Marketing: you can ask us to stop marketing messages at any time. On WhatsApp, reply STOP.
- Phone calls: calls to and from our business numbers are recorded. If you do not want a call recorded, message us on WhatsApp or email us instead.
- Website tracking: see section 7.
5. WhatsApp
We use the WhatsApp Business Platform (Cloud API) provided by Meta Platforms. When you message us, or we message you:
- your messages pass through Meta's servers and are handled under WhatsApp's own terms and privacy policy;
- we store a copy of the conversation in our own customer system (CRM), with any media you send. Our staff use it to answer you, prepare quotes and manage your booking;
- we may send you messages about your enquiry or booking (for example a quote, a booking confirmation or trip details), and a follow-up message if we missed your call;
- you can opt out at any time by replying STOP. You can also ask for your conversation history to be deleted (see our Data Deletion page).
Some of our replies may be drafted with the help of an AI assistant (Anthropic's Claude) when it is switched on for a conversation. In that case the assistant receives:
- the recent messages in the conversation;
- your name;
- the trip details (stage, pickup, drop, date and vehicle).
It does not receive your phone number.
6. Who we share data with
We share personal data only with the service providers we need to run our business, and with authorities where the law requires it.
| Recipient | What they receive | Why |
|---|---|---|
| Amazon Web Services (Mumbai region, India) | All data held in our systems (database and file storage) | Hosting |
| Meta Platforms: WhatsApp Business Platform | Your phone number, messages and media | WhatsApp messaging |
| Meta Platforms: advertising (Meta Pixel; Conversions API where switched on) | Website usage via the Pixel (§7). Where our conversion reporting is switched on and you are opted in to marketing, a scrambled (hashed) form of your phone and email with the ad reference | Measuring our Facebook and Instagram ads |
| MyOperator | Your phone number, call records and call recordings | Business phone system |
| Google: Maps, Places, Geocoding and Routes | Pickup, drop and stop addresses, typed location searches, and your device location if you allow it | Address search, distances and fares |
| Google: Analytics and Ads | Website usage (§7). Search details such as pickup and drop place names and the vehicle chosen. Ad click identifiers. Where our conversion reporting is switched on, booking milestones and, if you are opted in, a hashed phone and email | Analytics and measuring our Google ads |
| Microsoft Clarity | Recordings of how visitors use our website (§7) | Website improvement |
| Vercel | Website traffic and server logs, which can include the details of an enquiry you submit | Website hosting |
| Anthropic | Conversation text and trip details, when AI-assisted replies are switched on (§5) | Drafting WhatsApp replies |
| SMS service provider | Driver phone numbers | Sending driver login codes |
| Drivers and vehicle operators | Your name, phone number and trip details | Carrying out your trip |
| Government and law enforcement | As required | When the law requires it |
Some of these providers (Meta, Google, Microsoft, Vercel and Anthropic) may process data outside India, as the DPDP Act permits.
7. Cookies and website tracking
Our website uses the following tools. They load when you visit the site. We do not yet have a cookie-choice banner.
| Tool | What it does | Cookies / storage |
|---|---|---|
| Google Analytics 4 | Measures visits, pages, device and browser, and events such as searches and enquiries | _ga, _ga_* |
| Google Ads tag | Measures which ads lead to enquiries | _gcl_* |
| Meta Pixel | Measures Facebook and Instagram ad performance; records page views, searches and contact-form submissions | _fbp, _fbc |
| Microsoft Clarity | Session replay: records clicks, scrolls, mouse movement and page content so we can see how the site is used. Clarity masks text typed into form fields by default | _clck, _clsk |
| Mango Cabs click-ID cookies | Remember a Google ad click so an enquiry can be linked to it | mc_gclid, mc_gbraid, mc_wbraid (90 days), plus session storage |
To limit this tracking you can:
- block or delete cookies in your browser;
- use a private window;
- install the Google Analytics opt-out add-on;
- adjust your ad settings with Google and Meta.
The website works without these cookies.
8. How long we keep data
| Data | How long |
|---|---|
| Call recordings and call records | 3 years from your last interaction with us, and never less than 1 year from the call |
| WhatsApp conversation history | 3 years from your last interaction with us, and never less than 1 year from each message |
| Enquiries, contact-form messages, and leads that did not become bookings | 3 years from your last interaction with us |
| Booking, trip, payment and invoice records | 8 financial years after the year of the transaction, as company and tax law requires. Your name and phone can be removed from these records on request; the amounts, dates and route stay |
| Driver and partner records | Section 11 |
| System and security logs | At least 1 year |
"Last interaction" means the last time you booked, travelled, called, messaged or enquired with us. The DPDP Rules require us to keep personal data and processing logs for at least one year from processing, even after a deletion request.
Please note: we are still putting in place automatic deletion at the end of these periods. Until that is finished, some records may be kept longer than stated. You can ask us to delete your data at any time (§10).
9. How we protect data
- Our systems and files are hosted on Amazon Web Services in Mumbai, India.
- Access is limited to staff who need it, with role-based permissions and audit logs of staff actions.
- Stored WhatsApp media is encrypted, and files are shared internally only through short-lived links.
- Staff passwords are stored in hashed form.
- If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
10. Your rights
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
- Correction: have inaccurate or incomplete data corrected, completed or updated.
- Erasure: have your data erased, except what we must keep by law or for the purpose you gave it for. See our Data Deletion page.
- Withdraw consent at any time.
- Grievance redressal: complain to our Grievance Officer.
- Nominate another person to exercise these rights for you if you die or become unable to act.
How to make a request.
- Email info@mangocabs.in, or call or WhatsApp our Grievance Officer on +91 98953 62526.
- Tell us the mobile number you used with us, since this is how we find your records.
- We will verify that the request comes from you before acting on it.
- Requests are handled by our staff. There is no self-service tool yet.
- We reply within 90 days at the latest, and aim to be much faster.
Grievance Officer
Ajay Krishna
MANGO CABS AND RENT A CAR PRIVATE LIMITED, Thiruvananthapuram, Kerala 695010
Phone: +91 98953 62526 · Email: info@mangocabs.in
If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.
11. Drivers, driver applicants and partners
This section applies if you drive for Mango Cabs, apply to drive or partner with us, or are a vehicle operator we work with.
What we collect
- Applications:
- from our website: name, phone, email, city, application type, details you write, and any document you upload;
- from WhatsApp, if you answered one of our hiring ads: your WhatsApp number, profile name and messages.
- Driver profile: name, mobile number, driving licence number, licence class and expiry, duty status, and notes made by our operations team.
- Identity and compliance documents:
- driving licence, PSV badge, police verification certificate and medical certificate;
- Aadhaar and PAN;
- driver agreement;
- vehicle registration, insurance, permit, fitness and pollution certificates;
- their numbers and expiry dates.
- Location: our driver app is being introduced. Once you use it, while you are on duty it collects your device's GPS location (position, speed, direction and accuracy) at regular intervals. We use it for live dispatch and to record trip routes. We show your last known position to our dispatch team.
- App login and device: your phone number, a device identifier, and one-time login codes. The codes are sent by SMS and stored only in scrambled form; they expire after 5 minutes. When push notifications are introduced, we will also store a push token.
- Money: payouts, advances, deductions and payment references.
- Vendors (operators): contact name, phone, email, GSTIN, PAN and a bank payout reference.
Why: to assess applications; to verify identity, licences and eligibility; to meet transport, insurance and safety requirements; to dispatch trips; to resolve disputes and incidents; and to pay you.
Who sees it:
- our operations team;
- Amazon Web Services (hosting);
- Meta, if you applied through WhatsApp;
- the SMS provider that delivers your login code;
- authorities and insurers where required.
For the trips you drive, the customer may be given your name, your vehicle details and a contact number.
How long we keep it
| Data | How long |
|---|---|
| Identity and compliance documents | While you drive with us, plus 3 years after you stop |
| Payout and ledger records | 8 financial years |
| Location linked to a trip | 3 years from the trip |
| Other on-duty location | 1 year |
| Applications that did not lead to engagement | 1 year from the application or last contact |
Automatic deletion at the end of these periods is still being built.
Stopping location sharing: location is sent only while you are on duty in the app. Going off duty stops new location updates.
Deletion: see our Data Deletion page. It explains what we can remove for drivers and applicants today.
12. Services we may add
We plan to offer tour packages and self-drive car rental. When we do, we will update this policy before collecting any new data. For self-drive this is likely to include licence and identity checks, a security deposit, and vehicle tracking (telematics). We also plan to accept online payments through a payment provider (Razorpay). Until this policy says otherwise, we do not take online payments.
13. Children
Our services are meant for adults. We do not knowingly collect personal data from children under 18 except as passengers travelling with an adult who books. If you believe a child has given us data, contact us and we will delete it.
14. Changes to this policy
We will update this page when our practices change and revise the date at the top. For significant changes we will give notice on our website.
15. Contact
MANGO CABS AND RENT A CAR PRIVATE LIMITED, Thiruvananthapuram, Kerala 695010, India
Email: info@mangocabs.in · Grievance Officer: Ajay Krishna, +91 98953 62526