Privacy Policy

Ashwa provides GPS vehicle tracking and fleet management for businesses in India. We are based in Raipur, Chhattisgarh, India. You can reach us at hello@ashwa.io or +91 6263441130.

The Services are used by organizations (our customers). When an organization uses Ashwa, it decides what data about its vehicles, drivers and staff goes into the platform, and we process that data on its behalf under our agreement with it.

Account information. Accounts are created by your organization's administrator. We store your username, a hashed password, your role, your organization code and, if provided, your name, email address and phone number.

Fleet data. Vehicle details (such as plate number, make and model), GPS device identifiers, and the location, speed, heading and time reported by tracking devices fitted to vehicles. We use this to show live positions, routes and trip history.

People data entered by your organization. Details your organization adds about its drivers, staff and technicians, such as names, phone numbers, email addresses and photos.

Technical data. When you use the Services our servers and hosting providers receive standard request data such as IP address, device and browser type, and timestamps. We use it to keep the Services secure and working.

• You sign in with your organization code, username and password. These are sent over an encrypted connection to our API. Your password is not stored on your device.
• After sign-in the app keeps an access token and your basic profile (username, role, email, organization code) on your device so you stay signed in. Signing out removes them.
• The app shows your organization's vehicle data. It does not access your phone's location, contacts, camera, microphone or files.
• Maps are provided by the Google Maps SDK, which collects device and diagnostic information (such as device model, crash data, IP address and a pseudonymous SDK identifier) to operate and improve Google services. See Google's Privacy Policy.
• The app has no advertising and no third-party analytics.

The ashwa.io website does not use advertising, tracking cookies or third-party analytics. It is hosted on Cloudflare, which processes request data such as IP addresses to deliver and protect the site. If you email us, we use your message and address only to reply.

• To provide the Services: sign-in, live tracking, history and reports.
• To secure the Services, prevent misuse and fix problems.
• To support customers and respond to requests.
• To meet legal obligations.

We do not sell personal information or use it for advertising.

• Your organization, whose administrators can see data in their account.
• Service providers that host and run the Services for us, such as cloud hosting, maps and email providers, under confidentiality and security obligations.
• Authorities, when required by law or to protect the rights and safety of people and the Services.

We keep account and fleet data while your organization uses Ashwa, or for the period set out in its agreement with us. When an account is deleted we remove its personal data within 30 days, except where we must keep records by law. Backups are overwritten within 90 days.

All traffic to the Services uses HTTPS. Passwords are stored hashed, and access to data is limited to your organization and authorized Ashwa staff who need it to run the Services.

Under India's Digital Personal Data Protection Act, 2023 and other applicable law, you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. Because your organization manages your account, we may pass your request to it. To delete your account, follow the steps on our Delete Account page.

For any privacy question or grievance, email hello@ashwa.io. We respond within 30 days.

The Services are for businesses and are not intended for anyone under 18. We do not knowingly collect personal data from children.

We will post changes on this page and update the date above. If a change is significant, we will notify organization administrators.