Gaya Seva — Privacy Policy
Last Updated: 23 September 2026 • Compliant with DPDP Act 2023, DPDP Rules 2025 & IT Rules
This Privacy Policy explains how Gaya Seva ("Gaya Seva", "we", "us", "our") collects, uses, stores and protects personal information when you use our website, create an account, register as a service provider, contact a provider, submit a listing, submit a review or otherwise interact with our platform.
We intend to process personal data in accordance with applicable Indian data-protection and information-technology laws. The Digital Personal Data Protection Act, 2023 (DPDP Act) establishes requirements concerning notice, consent and processing of digital personal data, and the Digital Personal Data Protection Rules, 2025 provide additional requirements and an implementation framework.
1. Information We Collect
Depending on how you use Gaya Seva, we may collect:
Account Information
Name, mobile number, email address, password/authentication info, and account type (Yatri / Provider).
Provider Information
Business name, contact/WhatsApp number, address, service category, vehicle/operating info, profile photos, and verification documents.
Visitor & Enquiries
Enquiry details, public reviews, request information, and direct call/WhatsApp initiation data.
Technical Information
IP address, browser type, device information, activity logs, cookies, and approximate technical location.
2. Purpose of Processing & 3. Consent Principles
We use personal data to create and manage accounts, publish provider profiles, facilitate direct pilgrim-to-provider communications, respond to enquiries, verify credentials, improve search recommendations, prevent fraud, maintain cybersecurity, and comply with legal obligations.
Consent & Withdrawal under DPDP Act 2023
Where consent is required as the legal basis for processing, we will seek consent in a clear and understandable manner. You may withdraw consent at any time through your account settings or by contacting our Privacy Cell. Withdrawal of consent may affect our ability to provide certain features where processing is necessary.
4. Public Provider Info | 5. Data Sharing | 6. Direct Provider Contact
Public Provider Information: Information intended for a public business profile (business name, category, service area, public phone, photos, operating hours, reviews) will be publicly displayed. Providers should not submit private or sensitive personal information for public display.
Sharing of Information: We share data only where necessary with hosting infrastructure, analytics, verification services, payment gateways, and legal authorities where required by law. We do not sell personal data for monetary consideration.
Service Provider Direct Communications: When a visitor uses Call, WhatsApp, or enquiry buttons, direct communication occurs with the provider. Information shared directly is subject to the provider's independent practices.
7. Cookies | 8. Location | 9. Security | 10. Data Retention
Cookies & Location: We use cookies for authentication, session security, and preferences. Geolocation permissions are requested strictly for displaying nearby places, ride navigation, and local services.
Data Security: We employ reasonable technical and organizational security measures (encrypted storage, HTTPS, access logs) to prevent unauthorized access, loss, alteration, or disclosure of data.
Data Retention: We retain personal information only for as long as reasonably necessary to fulfill processing purposes, maintain records, resolve disputes, prevent fraud, and comply with statutory laws.
11. User Rights & 12. Children's Privacy
Subject to applicable law, users possess statutory rights under the DPDP Act 2023, including:
- Right to access summary of personal data processed
- Right to correction, completion, and updating of inaccurate data
- Right to erasure / deletion of personal data when no longer required
- Right of grievance redressal provided by Data Fiduciary
- Right to nominate an individual in event of death or incapacity
Gaya Seva is not intentionally designed to collect personal information from children without appropriate parental/guardian consent where required by law.
13. External Links | 14. UGC Disclosures | 15. Fraud | 16. Security Incidents
Sensitive Data Notice for User Submissions (Section 14)
Do NOT upload or publish: Passwords, OTPs, Bank PINs, Credit/Debit Card Security Codes, Aadhaar numbers (unless through explicit, lawful verification forms), or unverified private details of third parties.
Security Incidents (Section 16): If a security incident involving personal data occurs, Gaya Seva will take immediate steps required under applicable law, including containment, investigation, and statutory notifications to affected individuals and authorities.
Gaya Seva respects the constitutional values of privacy, personal liberty, equality and freedom applicable under the Constitution of India and processes personal data in accordance with applicable Indian data-protection and information-technology laws.
The Supreme Court of India has recognized Privacy as a constitutionally protected fundamental right under Article 21 of the Constitution (Justice K.S. Puttaswamy v. Union of India), subject to the applicable legal framework.
Conflict With Applicable Law: If any provision of this Privacy Policy is inconsistent with a mandatory requirement of applicable law (including DPDP Act 2023 or DPDP Rules 2025), the mandatory legal requirement shall prevail to the extent of that inconsistency.
For privacy queries, data access requests, consent withdrawal, or privacy complaints under DPDP Act 2023, reach out to our designated Privacy Cell:
Privacy Cell Email:
thegayaseva@gmail.comGrievance Officer Email:
thegayaseva@gmail.comHelpline Phone:
+91 85444 91413Registered Entity Office:
Manpur, Gaya, Bihar - 823003, India
19. Governing Law: This Privacy Policy shall be governed by the laws of India. 20. By continuing to use Gaya Seva, you acknowledge that you have read this Privacy Policy.