Privacy Policy

This Privacy Policy explains how ActivityLedger Technologies Pvt. Ltd. (“ActivityLedger”, “we”, “us”) collects, uses, shares and protects personal data when you visit our website, create an account, or use the ActivityLedger booking, commission and payout platform (the “Service”).

We act as a data controller for the personal data of our website visitors and account users. For customer (guest), driver and agent data that our operator customers record through the Service, we act as a data processor on their behalf — in that case the operator is the controller, and this Policy is supplemented by our Data Processing Addendum.

We collect the following categories of information:

• Account & contact data — name, email, phone number, password, company/operator name, role and billing details you provide when you register or contact us.
• Operational data — companies, owners and share percentages, bookings, pricing, commissions, expenses and reports you manage in the Service.
• Customer, driver & agent data — names and contact details of the guests, drivers and agents attached to a booking, which you, as our customer, record. We process this on your instructions.
• Payment data — subscription payments are processed by our payment providers; we do not store full card numbers on our servers.
• Usage & device data — IP address, device and app version, pages and actions, and diagnostics collected automatically, including through cookies.

• to provide, operate, secure and maintain the Service;
• to compute commissions, expenses, net earnings and per-owner payout splits;
• to process subscription payments, send invoices and manage your plan;
• to provide support and respond to your enquiries and demo requests;
• to improve features, monitor performance, and prevent fraud and abuse;
• to send service, security and (where permitted) marketing messages you can opt out of; and
• to comply with legal obligations and enforce our agreements.

Where the law requires a legal basis (for example under India's Digital Personal Data Protection Act, 2023, or the EU/UK GDPR where applicable), we rely on: performance of our contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating and improving the Service; and compliance with our legal obligations.

We do not sell your personal data. We share it only as described below:

• Service providers — hosting, analytics, communications and support vendors who process data on our behalf under appropriate safeguards.
• Payment processors — to take subscription payment and prevent fraud.
• Legal & safety — where required by law, regulation or valid legal process, or to protect our rights, users and the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter only as required to comply with our legal, tax and accounting obligations, resolve disputes and enforce our agreements. Customer, driver and agent data recorded on behalf of an operator is retained and deleted in line with that operator's instructions and our Data Processing Addendum.

We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, tenant isolationso one operator can never see another's data, audit logging and regular backups. No method of transmission or storage is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security. Please notify us promptly of any suspected security issue.

Subject to applicable law, you may have the right to access, correct, update or delete your personal data, to obtain a copy of it, to withdraw consent, and to object to or restrict certain processing. To exercise these rights, contact us at hello@activityledger.app. We will respond within the timeframes required by law and may need to verify your identity.

If you are a guest, driver or agent of one of our operator customers, please direct your request to that operator as the controller of your data; we will assist them as needed.

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, notify you by email or an in-product notice. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

If you have questions, concerns or complaints about this Policy or how we handle your personal data, please contact our Grievance Officer:

• ActivityLedger Technologies Pvt. Ltd. — Grievance Officer
• Email: hello@activityledger.app
• Address: Riverside Business Park, Tapovan, Rishikesh, Uttarakhand 249192, India

You can also reach us through our contact page.