HillHop uses personal data only for accounts, trip planning, controlled ride testing, driver verification, payments, safety and support. We do not sell personal data or use it for third-party advertising.
Who this covers
This notice covers riders, drivers, driver applicants, website visitors and people who contact support. The person responsible for this testing service is Sushen Dhiman, reachable below.
Information and purpose
| Information | Why it is used |
|---|---|
| Name, email, phone and sign-in identifiers | Create and secure an account, send sign-in links and contact you about a request. |
| Pickup, destination, route, passengers, vehicle, fare, tolls, status and feedback | Plan, test and support a journey; calculate and explain the estimated and final bill. |
| Location, when permission is granted | Suggest places, calculate routes and share current position during an active ride. Sharing can be stopped in the app. |
| Driver identity, driving licence, commercial permit, vehicle RC, fitness, insurance, PUC and vehicle records, including document numbers and validity dates | Review legal eligibility, safety, expiry status and vehicle suitability before activation. |
| Payment order, payment ID, invoice and refund status | Verify payment and handle refunds. Razorpay handles card, bank and UPI credentials; HillHop does not store them. |
| Support, safety, lost-item and grievance details | Investigate and resolve the request and retain a necessary audit trail. |
| Assistant questions | Provide optional Google Gemini guidance. Never enter Aadhaar, OTPs or payment credentials. |
Consent and withdrawal
We ask for clear action before collecting optional live location, driver documents or booking data. Withdraw optional consent by stopping sharing, changing device permissions or submitting a privacy request. This does not affect completed processing and may make the related feature unavailable. Records required for an active ride, payment, safety, fraud prevention, legal claim or statutory duty may be retained.
Providers and data movement
We use Supabase for authentication, database and private storage; Razorpay for payments; transactional email providers; Google Gemini for optional Assistant responses; and mapping or routing providers. Data is limited to what each service needs. A provider may process data outside Himachal Pradesh or India under its safeguards and terms.
Driver documents
Documents are accepted only after secure email sign-in and consent. Driving licence, commercial permit, vehicle RC, fitness, insurance and PUC images, document numbers and validity dates are stored in private Supabase storage and restricted to the applicant and authorised HillHop administrators. Riders do not receive identity-document images. Expired or missing required documents block verification.
Retention
- Temporary live-location points expire quickly and are removed when sharing stops or a ride ends.
- Account and booking data remains while an account or active service relationship exists.
- Payment, tax, safety, complaint and fraud records may remain as required for law and disputes.
- Driver documents remain while verification or an active relationship requires them, then are deleted or restricted unless retention is legally necessary.
Your rights
You may request a summary of personal data and processing, correction, erasure of eligible data, withdrawal of optional consent, or grievance review. You may nominate another person to exercise applicable rights in the event of death or incapacity. Use the app Privacy section or email us. Active rides must first be completed or cancelled.
Grievances
- Send the account email or phone and a clear description. Never email passwords, OTPs, card numbers or Aadhaar images.
- We aim to acknowledge a complete request within 48 hours and resolve it within 30 days. We will explain any delay or lawful restriction.
- Reply with “Escalation” if the first response does not resolve the concern.
Security and incidents
HillHop uses encrypted connections, authenticated access, database row-level controls, private storage, server-side payment verification and security logs. No service can promise absolute security. Report suspected misuse promptly; affected users and authorities will be notified where applicable law requires it.
Children
Children must not independently register or submit driver documents. A parent or lawful guardian should arrange a minor’s travel and provide any required consent.
Contact
Primary contact: Sushen Dhiman
Email: support@hillhop.co.in
Himachal Pradesh, India
A formal company name, statutory identifiers, complete postal address and appointed statutory grievance officer will be added before public commercial launch.