Effective Date: ______________
Published By: Bycyshare Technologies Private Limited
Bycyshare Technologies Private Limited (“Zypp”, “we”, “us”) values your digital trust. This Privacy Policy outlines our strict protocols regarding the collection, processing, storage, and protection of personal data belonging to individuals registered on the HustleOS App (“Users”). This policy is structured to be fully compliant with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023.
We process and retain only the specific data vectors necessary to validate your identity, prevent cyber fraud, and facilitate seamless access to various features, products, services, and functionalities made available through the HustleOS App (collectively referred to as the "Modules") including but not limited to Investments, Loans, Atal Canteen, Hustle Score, Bazaar, Learning, and Start Riding with Zypp:
1.1 Personal Identity Data: Legal Name, Date of Birth, Gender, Mobile Number, and Personal Email Address.
1.2 Statutory Identification Data (KYC): Aadhaar Card details (processed strictly under voluntary consent for identity validation), Permanent Account Number (PAN) Card details for mandatory central tax cross-matching, collected only where required for a specific Module journey.
1.3 Financial & Payment Processing Coordinates: Bank Account Number, IFSC Code, Cancelled Cheque copies, Bank Statements, and Unified Payments Interface (UPI) IDs.
1.4 Module & Behavioral Data: Platform engagement, attendance, ride consistency, training completion, wallet behaviour, referral participation, vehicle care, payment discipline, and customer ratings (used, among other things, to compute your Hustle Score).
1.5 Transaction & Commercial Data: Investment or loan application details, Atal Canteen order history, Bazaar purchase history, amounts paid or payable, and applicable fees, charges, or commissions recorded against your profile.
1.6 Automated Device and Telemetric Logs: Device identifiers, unique IP addresses, Mobile Operating System configurations, App usage timestamps, geolocational coordinates (where required for a Module), and system crash metrics.
We collect and process your personal data under the explicit legal basis of “Contractual Necessity” and “Consent”. The data is used for:
2.1 Authenticating access via secure OTP frameworks.
2.2 Verifying statutory eligibility and preventing systemic multi-accounting or identity spoofing.
2.3 Enabling and processing your transactions across Modules, and computing applicable fees, charges, or commissions payable to or by you, where applicable.
2.4 Computing your Hustle Score and personalizing recommendations, rewards, and learning content.
2.5 Sharing data with licensed Partners strictly where necessary to fulfil a Module journey you have chosen to initiate.
2.6 Enforcing compliance with federal anti-money laundering and tax guidelines.
2.7 Each Module available on the HustleOS App may require the processing and sharing of different categories of Personal Data. By voluntarily choosing to access or initiate a specific Module, the User expressly consents to the collection, use, and disclosure of such Personal Data as is reasonably necessary to facilitate that Module.
Zypp does not engage in the monetization, sale, or unauthorized trading of User databases. Your information is selectively disclosed only under the following strict conditions:
3.1 Financial Intermediaries: Shared securely with authorized banking corporations, payment gateway infrastructures, and automated node network entities to directly process financial transactions and payouts into your designated accounts.
3.2 Module Partners: Shared with the specific licensed partner corresponding to a Module you elect to use, strictly for the purpose of enabling that service.
3.3 Statutory Mandates: Disclosed to law enforcement agencies, tax inspectors, or judicial tribunals if required by law or to protect our rights against fraud, financial loss, or cyber-attacks.
3.4 Third-Party Privacy Practices: Certain Modules available on the Platform are provided by independent third-party partners. Upon the User choosing to avail such Module, the relevant partner may collect, process, and retain Personal Data in accordance with its own privacy policy and applicable law. Zypp encourages Users to review the privacy policies of such partners before availing their services. Zypp shall not be responsible for the independent privacy practices of such third-party partners.
4.1 We apply rigorous administrative, technical, and physical security measures, including Advanced Encryption Standard (AES) 256-bit protocols for data-at-rest and Transport Layer Security (TLS) for data-in-transit.
4.2 Access to your documents is restricted through strict Role-Based Access Control (RBAC) mechanisms within Zypp's operations team.
4.3 While we enforce industry-leading firewalls and regular security audits, no digital storage environment can claim absolute immunity. Users must maintain strict confidentiality of their OTP codes.
4.4 Zypp and its authorized service providers may deploy cookies, software development kits (SDKs), device identifiers, analytics tools, and other similar technologies to collect and process technical and usage-related information for purposes including user authentication, fraud prevention, security enhancement, service optimization, analytics, personalization of the User experience, and compliance with applicable legal and regulatory requirements. By accessing or using the HustleOS App, the User acknowledges and consents to the use of such technologies in accordance with this Privacy Policy and applicable law.
As a data principal, you have the following rights which can be exercised through the in-app support portal:
5.1 Right to Access and Correction: The right to review, update, or rectify any outdated or inaccurate personal information mapped to your profile.
5.2 Right to Erasure (Withdrawal of Consent): You may formally request the deletion of your account and related data. Please note that choosing to delete your data will result in the immediate termination of platform access, and any accrued but unprocessed rewards, incentives, or transactions may be forfeited or discontinued if verification cannot be completed.
5.3 Statutory Retentions: We will retain essential transaction logs, tax data, and identity records for the minimum durations mandated by the Income Tax Act, 1961, and Indian anti-fraud frameworks, even after account closure.
5.4 Accuracy of Personal Data: Users are responsible for ensuring that the Personal Data provided to Zypp is accurate, complete, and up to date. Users should promptly update any changes to their Personal Data through the HustleOS App or by contacting Zypp. Zypp shall not be responsible for any inability to provide services arising from inaccurate or outdated information provided by the User.
5.5 Protection of Account Credentials: Users are responsible for maintaining the confidentiality of their login credentials, passwords, one-time passwords (OTPs), and other authentication information. Users shall immediately notify Zypp if they become aware of any unauthorized access to or misuse of their account.
5.6 Data Retention: Zypp shall retain Personal Data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, comply with applicable legal or regulatory requirements, resolve disputes, enforce legal rights, and prevent fraud. Upon expiry of the applicable retention period, Personal Data shall be securely deleted, anonymized, or otherwise disposed of in accordance with applicable law and Zypp's internal data retention practices.
Zypp reserves the right to revise this Privacy Policy to align with technological advances, new or modified Modules, or evolving legislative directives under the applicable laws. We will notify you of material updates through prominent in-app alerts, SMS, or WhatsApp notifications before the revised policy takes effect. Your continued use of the platform after updates are posted confirms your acceptance of the revised data management terms.