Privacy policy

Transport Manager is provided by Think Forward Labs, a proprietorship at Unit 101, Oxford Towers, Old Airport Road, Kodihalli, Bengaluru 560008, Karnataka, India (GSTIN 29CZWPC8049J1ZI). For the personal data described here we are the data fiduciary under India's Digital Personal Data Protection Act, 2023. For the business records your company enters (for example, your drivers' and customers' details), your company decides what to record and we process it on your company's behalf to provide the service.

• Sign-in data from Google: your name, email address, profile photo and Google account identifier. We never see your Google password.
• Company and billing details: company name, legal name, GSTIN, PAN, address, phone and email you add, used on your tax invoices.
• Business records you enter: vehicles, drivers, customers, suppliers, trips, LRs, expenses, advances, invoices, payments and uploaded documents (such as POD and RC copies). These may include other people's names, phone numbers and IDs, which you confirm you are allowed to record.
• Subscription payments: Razorpay identifiers, amounts, dates, payment method type (for example “UPI”) and status. Card numbers, UPI IDs/PINs and bank details are collected by Razorpay, not by us.
• Enquiries: name, phone, email, company and message if you use our contact form or message us on WhatsApp.
• Technical data: a one-way hash of your IP address (for rate limiting and security), browser type, sign-in times and an audit log of important changes made in your company.

• To provide the service: sign you in, show your company's records to your team according to their roles, and generate documents and reports.
• To take payments, issue GST tax invoices and keep accounting and tax records.
• To keep accounts secure: rate limiting, preventing abuse and investigating problems.
• To support you and send service messages (for example about payments or important changes).
• To meet legal obligations.

We don't sell personal data, we don't use it for advertising, and we don't use your company's records to train models or for any purpose other than running the service for you. You give consent by signing in and using the service; some processing is also needed to comply with law (such as keeping tax invoices).

Inside Transport Manager, only members of your company can see its records, according to the roles your owner assigns. Outside it, we use these service providers:

• Google — sign-in.
• Razorpay — subscription payments and mandates.
• Supabase — database and private document storage.
• Vercel — application hosting.
• WhatsApp (Meta) — only when you choose to message our support number.

These providers process data only to provide their service to us and under their own security commitments; some may process data outside India. Records you share yourself — for example a customer statement link or a WhatsApp message to a driver — are seen by whoever you send them to. We may disclose data if required by law or a valid order from a government authority.

• A secure, HTTP-only session cookie keeps you signed in, and a short-lived cookie protects the Google sign-in step.
• Your browser's local storage keeps unsaved form drafts on your own device so you don't lose work.
• We don't use advertising or third-party tracking cookies.

• Account and company data: while your account is active, and while you keep read-only access after a subscription ends so you can export it.
• When your company account is closed at your request, we delete its records and documents within 90 days, including from backups.
• Tax invoices we issued to you and our payment records: for as long as Indian tax law requires (for GST, at least 72 months from the due date of the related annual return).
• Security logs: up to 12 months.

Data is encrypted in transit (HTTPS). Each company's data is isolated, documents are stored privately and served only to signed-in members of that company, every financial change is logged, and access is checked on our servers for every request. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

Under the DPDP Act you can ask us to:

• give you a summary of the personal data we hold about you and how it is processed;
• correct, complete or update it (most details can be edited directly in Settings);
• erase it, unless we must keep it by law;
• withdraw consent — this stops the processing that relies on it, which may mean closing your account;
• nominate someone to exercise these rights if you die or become unable to.

To ask, contact our Grievance Officer below. If your company's records contain your data (for example you are a driver), you can also ask that company directly. You may complain to the Data Protection Board of India if you are not satisfied with our response.

Transport Manager is a business service for adults and is not meant for anyone under 18. We don't knowingly collect children's data.

Think Forward Labs, Unit 101, Oxford Towers, Old Airport Road, Kodihalli, Bengaluru 560008, Karnataka, India. Contact: WhatsApp +91 93808 76349. We acknowledge grievances within 48 hours and aim to resolve them within 30 days. See also our Contact page.

We may update this policy. If changes are significant, we will tell you in the app or by email before they take effect.