Last Updated: February 28, 2025
Your privacy is important to us. This Privacy Policy outlines how we collect, use, share, and protect your personal information when you access our ride-hailing mobile application, website, and related services (collectively, the “Platform”). By using the Platform, you acknowledge and agree to the practices described in this policy. If you do not agree, please refrain from using our services.
This policy applies to all users of our Platform, including those requesting transportation services (“Riders”) and those providing them (“Drivers”). We comply with applicable data protection laws in all regions where our services are available. If local regulations differ from this policy, we will follow the applicable legal requirements in those regions.
We collect different types of information to provide and enhance our services. This includes:
We collect the following information directly from users during registration, account setup, and service use:
When you use our Platform, we automatically collect the following data to improve functionality and security:
We may also receive information from third-party sources, including:
We use the collected information to:
We use automated processes to enhance efficiency, accuracy, and fairness in our services. These automated processes include:
If you disagree with an automated decision, you may contact customer support to request a manual review.
We do not sell or rent your personal data. However, we may share your information with:
We retain user data, including trip details, contact information, and other relevant records, for a minimum period of three (3) years from the date of each completed trip. This retention period helps us comply with legal obligations, resolve disputes, enforce our agreements, and maintain accurate records for operational purposes. After this period, data may be securely deleted or anonymized unless a longer retention period is required by law.
We prioritize the security of your personal data and implement rigorous measures to safeguard it from unauthorized access, misuse, and breaches:
We may update this Privacy Policy from time to time. Users will be notified via email or in-app notifications about significant changes. Continued use of our services after changes are published indicates your acceptance of the updated policy.
If you have any questions or concerns regarding this Privacy Policy, you can contact us at:
Email: support@sasainnovations.com
Phone: +1 (204) 698-0047
By using the SASA app, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
Last Updated: 6 October 2026
SASA EXPRESS INDIA PRIVATE LIMITED (“SASA”, “we”, “us” or “our”) respects the privacy of passengers, drivers and other users of the SASA mobile application, website and related services (collectively, the “Platform”).
This Privacy Policy explains what personal information we may collect, why we collect it, how we use and share it, how long it may be retained, and the choices and rights available to you.
SASA handles personal information in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, applicable Chandigarh transport and aggregator requirements, and the Digital Personal Data Protection Act, 2023 and rules made under it to the extent the relevant provisions are applicable and in force from time to time.
This Policy applies to personal information collected through:
the SASA passenger App;
the SASA Driver App;
SASA websites;
ride bookings and completed trips;
customer support and grievance channels;
payment and refund processes;
driver onboarding and verification;
safety and emergency features; and
other SASA services that refer to this Policy.
This Policy should be read together with SASA's Terms and Conditions, Location Information Policy, Cancellation & Refund Policy, Data and Third-Party Service Providers Policy and other applicable notices.
The information collected depends on whether you are a passenger, driver, website visitor or other user and on the features you use.
We may collect:
name;
mobile number;
email address;
profile information;
preferred language;
account credentials and verification information; and
other information you provide when creating or managing an account.
Age, date of birth or gender may be collected only where reasonably necessary for eligibility, safety, ride-pooling, verification or another lawful purpose.
Where reasonably required and legally permitted, SASA may collect or verify:
government-issued identification information;
photograph or selfie;
proof of address;
age or identity verification information; and
other documents required for regulatory, safety, fraud-prevention or legal purposes.
SASA will not request Aadhaar, PAN or another government identifier merely because it is convenient. Such information should be collected only where it is reasonably necessary and legally permitted or required.
SASA may collect:
pickup and drop-off locations;
GPS coordinates;
real-time device location where permission is granted;
driver and vehicle location;
trip route;
route deviations;
trip date and time;
estimated and actual distance;
trip status; and
other information required to provide, monitor or record a ride.
More information is provided in SASA's Location Information Policy.
Depending on the payment method, SASA may receive or process:
payment method;
UPI-related transaction information;
transaction reference number;
amount paid;
fare and applicable charges;
refund status;
wallet or payment-provider information; and
billing or invoice information.
Complete card or bank credentials may be processed directly by authorized payment service providers rather than SASA.
SASA may collect:
IP address;
device type and model;
operating system;
App version;
device identifiers where permitted;
language and regional settings;
login and security information;
App activity;
feature usage;
crash reports;
error logs; and
information reasonably required for cybersecurity, troubleshooting and service improvement.
Where you contact SASA, we may collect:
support requests;
complaints;
grievance correspondence;
emails and messages;
ride-related communications;
feedback and reviews; and
call information or recordings where recording is used and legally permitted.
For drivers, SASA may additionally collect or verify information including:
driving licence;
driver photograph;
address and identity documents;
police or background verification information where required;
vehicle registration;
vehicle permit;
fitness certificate;
insurance;
pollution certificate;
vehicle details;
bank or payout information;
driver ratings;
training records;
trip and earnings information;
driver location while providing SASA services; and
medical fitness information or certificates where required by applicable rules.
SASA may obtain information:
directly from you;
automatically through the App or your device;
from the driver or passenger involved in a ride;
from payment providers;
from mapping and location service providers;
from authorized verification providers;
from fleet or vehicle owners, where applicable;
from government or regulatory sources where legally permitted; and
from other service providers assisting SASA.
We will not intentionally collect personal information that is unrelated to a legitimate, disclosed or legally permitted purpose.
SASA may use personal information to:
create and manage accounts;
connect passengers with available drivers;
identify pickup and drop-off locations;
provide navigation and estimated arrival information;
process rides and payments;
generate trip summaries, receipts and invoices;
provide customer support;
process cancellations and refunds;
verify passengers, drivers and vehicles where required;
monitor ride safety;
detect unusual route deviations;
provide emergency assistance;
investigate complaints, accidents, misconduct or disputes;
prevent fraud, account misuse and unauthorized activity;
protect passengers, drivers and SASA personnel;
maintain cybersecurity and Platform integrity;
improve Platform reliability and functionality;
maintain legally required records;
comply with transport, tax, accounting, law-enforcement and regulatory requirements; and
establish, exercise or defend legal rights.
SASA may also use aggregated or de-identified information for analysis, planning, safety improvement and service development where such use is permitted by law.
Where consent is required, SASA will seek consent in a manner appropriate to the information and purpose involved.
You may be asked to provide permission for features such as:
device location;
camera access;
notifications; or
another device feature needed for a service you request.
You may change device permissions through your device settings.
Where applicable law permits processing on another lawful basis without consent, SASA may process information to the extent reasonably necessary for that permitted purpose.
Withdrawal of consent does not affect processing that was lawful before withdrawal and does not require SASA to delete information that it is legally required or permitted to retain.
Accurate location information is important to SASA's transportation services.
SASA may use location information for driver matching, pickup, navigation, trip monitoring, safety, customer support, fraud prevention and regulatory compliance.
Driver and vehicle GPS information may be recorded during SASA operations even where a passenger chooses not to permit access to the passenger's device location.
SASA does not provide a driver with unrestricted access to a passenger's device or location history.
Certain information must be exchanged to complete a ride.
A driver may receive information such as the passenger's:
name or limited account identification;
pickup and drop-off location;
ride instructions; and
limited contact functionality.
A passenger may receive information such as the driver's:
name;
photograph;
vehicle details;
registration information;
rating; and
location in connection with the booked ride.
Only information reasonably necessary for the ride and safety should be made available.
SASA may use third-party service providers for:
hosting and data storage;
maps and navigation;
payment processing;
communications;
identity verification;
cybersecurity;
customer support;
analytics and technical monitoring;
insurance-related services;
accounting or auditing; and
legal or regulatory support.
Service providers should receive only information reasonably necessary for the service they perform and are expected to handle such information subject to applicable contractual, security, confidentiality and legal requirements.
For additional information, see SASA's Data and Third-Party Service Providers Policy.
SASA may provide information to the Chandigarh Administration, State Transport Authority, police, courts, emergency services or another competent authority where disclosure:
is required or permitted by applicable law;
follows a lawful order, notice or direction;
is required under applicable transport or aggregator rules;
is reasonably necessary during an emergency;
relates to investigation of suspected crime, fraud or a serious safety incident; or
is otherwise permitted through lawful process.
Where applicable law requires consent before a particular disclosure, SASA will obtain that consent.
Where the law permits or requires disclosure without consent, SASA may provide the information through applicable legal process.
SASA will not describe information as anonymous where identifiable information is lawfully required.
App-generated information subject to Chandigarh aggregator requirements will be stored on servers located in India as required by the applicable Chandigarh rules.
For regulated App-generated transport data, SASA will follow the retention period required by the Chandigarh Administration. Where the applicable requirement is a minimum of 3 months and a maximum of 24 months from the date the data is generated, SASA will retain such data within that period, unless another law or lawful requirement requires a different period.
Trip information required to remain available to passengers or drivers through the App will remain accessible for the period required by applicable Chandigarh rules.
Other personal information may be retained for as long as reasonably necessary for:
maintaining an active account;
providing SASA services;
processing transactions;
handling complaints and disputes;
safety investigations;
fraud prevention;
tax and accounting;
legal and regulatory compliance; and
establishing or defending legal rights.
When information is no longer required, SASA may securely delete, anonymize or otherwise dispose of it in accordance with applicable law.
Where Chandigarh rules require particular App-generated data to be stored in India, SASA will comply with that localization requirement.
Some service providers may have personnel or systems outside India. Any access, processing or transfer outside India will occur only where permitted by applicable law and must not override a mandatory India-storage requirement applicable to the relevant data.
SASA will take reasonable technical and organizational measures appropriate to the nature of the information under its control.
Measures may include, where appropriate:
secure authentication;
access controls;
encryption or secure transmission;
system and security monitoring;
logging;
vulnerability management;
backups;
restricted employee access; and
reasonable safeguards required under applicable law.
No internet-connected or electronic system can be guaranteed to be completely secure.
If SASA becomes aware of a personal-data or cybersecurity incident, SASA will investigate and take appropriate corrective action and will notify affected persons, CERT-In, the Data Protection Board or another authority where notification is required under applicable law then in force.
SASA's website may use cookies and similar technologies.
The App may use device storage, software development kits, identifiers or similar technologies to:
maintain login sessions;
remember preferences;
support security;
measure performance;
identify crashes and errors; and
understand how features are used.
Essential technologies may be necessary for the Platform to function.
Where consent is legally required for non-essential technologies, SASA will request it as applicable.
Disabling certain technologies may limit Platform functionality.
Where permitted by law, SASA may send information about its services, offers or important Platform updates.
Promotional communications will be subject to applicable consent and communication requirements.
Users may opt out of non-essential promotional communications through available settings or unsubscribe methods.
Transactional, safety, legal or account-related messages may still be sent where necessary.
SASA accounts are intended to be created by persons who meet the eligibility requirements stated in SASA's Terms and Conditions.
SASA does not knowingly create ordinary user accounts for children who are not legally eligible to hold such accounts.
A minor may travel with or under the responsibility of a parent, guardian or other authorized adult in accordance with applicable law and SASA policies.
Where SASA processes personal data of a child and applicable law requires verifiable parental or guardian consent or other safeguards, SASA will comply with those requirements when they are applicable and in force.
Depending on the law applicable and in force at the relevant time, you may be entitled to:
review personal information held about you;
correct inaccurate or incomplete information;
update your account information;
withdraw consent where processing is based on consent;
request erasure where legally applicable;
raise a grievance concerning personal-data processing; and
exercise other rights made available by applicable law.
Some information cannot be deleted immediately where SASA has a legal, regulatory, safety, fraud-prevention or dispute-resolution obligation to retain it.
Requests should be submitted using the contact details below. SASA may take reasonable steps to verify the identity of the person making the request before acting on it.
You may request closure of your SASA account through an available App process or by contacting SASA.
Closing an account does not necessarily result in immediate deletion of all information.
SASA may retain information required for trip records, payments, disputes, safety, fraud prevention, regulatory reporting or another lawful obligation for the applicable retention period.
Where SASA identifies unauthorized access, disclosure, loss, alteration or misuse of personal information, SASA may:
investigate the incident;
take steps to contain and remedy it;
preserve information required for investigation;
cooperate with cybersecurity or law-enforcement authorities; and
provide legally required notifications.
Notification obligations will be determined by the law applicable and in force at the time of the incident.
The Platform may contain links to or integrations with third-party websites or services.
Those third parties may have their own privacy practices and policies.
SASA is not responsible for independent third-party privacy practices that are outside SASA's control. Users should review the relevant third-party privacy information before providing personal information directly to them.
SASA does not sell passengers' or drivers' personal information as a separate business activity merely in exchange for monetary consideration.
Information may nevertheless be shared with drivers, service providers, payment providers or competent authorities where reasonably necessary for SASA services or otherwise permitted or required by law.
SASA may update this Policy to reflect changes in:
law or regulation;
Chandigarh Administration requirements;
SASA services or technologies;
privacy or security practices; or
operational requirements.
Where a change materially affects the way personal information is collected or used, SASA may provide appropriate notice through the App, website, email or another reasonable method.
The revised Policy will apply from the date stated in the updated version, subject to applicable legal requirements concerning notice or consent.
For privacy questions, data requests or general assistance:
Support Email:
support@sasainnovations.com
Customer Support Phone:
+91-9041587389
For unresolved privacy or personal-data concerns:
Grievance Officer:
Gursewak Singh Brar
Grievance Email:
grievance@sasainnovations.com
SASA EXPRESS INDIA PRIVATE LIMITED
2nd Floor, Cabin No. 1, E276, Phase 8A
Industrial Focal Point
SAS Nagar (Mohali), Punjab – 160071
India
SASA will address privacy grievances within the period required by applicable law.
Nothing in this Policy prevents a person from approaching a competent statutory, regulatory, judicial or consumer forum where legally entitled to do so.
This Policy will be interpreted in accordance with applicable laws of India and applicable requirements governing SASA's operations in Chandigarh.
This includes the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 to the extent the relevant provisions are applicable and in force from time to time.
Where applicable law imposes a higher or different privacy requirement than this Policy, the applicable law will prevail.
This Privacy Policy may be provided in Hindi, Punjabi or other languages for convenience and accessibility.
The English version is the original and controlling version.
If there is any inconsistency, ambiguity or difference in interpretation between the English version and a translated version, the English version will prevail to the extent permitted by applicable law.
SASA EXPRESS INDIA PRIVATE LIMITED
Your Safety. Your Ride. Your Innovation.