Privacy Policy & DPDP Act 2023 Compliance

1. Overview & Data Fiduciary Disclosure

This Privacy Policy explains how Wibit Innovations LLP (“we”, “us”, or “our”), the operator of the TapandTrack platform, collects, stores, processes, and protects operational vehicle telemetry and client account data.

TapandTrack operates in strict compliance with the Digital Personal Data Protection Act (DPDP Act) 2023 of India, the Information Technology Act, 2000, and statutory guidelines issued by the Ministry of Road Transport and Highways (MoRTH) for AIS-140 vehicle location tracking devices.

2. Data We Collect and Process

We collect and process the following categories of telemetry and account information:

• Vehicle Telematics Stream: Real-time latitude/longitude coordinates (via NavIC and GPS), ignition status, engine RPM, true run-hours, speed, geofence trigger timestamps, and battery voltage.
• Fuel & Environmental Telemetry: Fuel tank capacity levels (from calibrated capacitive/ultrasonic rods), temperature probe metrics (cold chain), and mixer drum rotation logs.
• Video Telematics & Driver Safety: Incident-triggered video snippets (harsh braking, forward collision warning, driver distraction/fatigue events) captured by certified AI dashcams.
• Enterprise Client Account Data: Authorized fleet manager names, email addresses, WhatsApp phone numbers, GSTIN registration numbers, and fleet vehicle registration details (Vahan RC numbers).

3. Sovereign Data Localization & Security

In accordance with national security and DPDP 2023 directives, all TapandTrack telemetry servers and databases are physically located in certified Tier-III/IV data centers within the Republic of India. Zero telematics stream or client telemetry is routed through or hosted on uncertified foreign cloud infrastructure.

Data transmission between on-vehicle AIS-140 VLTD gateways and our cloud ingestion pipeline is protected using TLS 1.3 encryption and proprietary cryptographic device signatures to prevent unauthorized spoofing or MITM interception.

4. Government Portal Integration & Third-Party Disclosures

Telemetry data is shared with government statutory portals strictly under client authorization and regulatory mandates:

• MoRTH Vahan Portal & CDAC: For AIS-140 vehicle fitness certificates and National Permit compliance.
• State Mining & Geology Portals: e-Ravanna (Rajasthan), i3MS (Odisha), and Mine Mitra (UP) for transit pass generation.
• State Pollution Control Boards: GPCB, MPCB, and APPCB for hazardous waste transit monitoring.

We do not sell, rent, or lease client fleet data or route information to commercial third-party advertisers under any circumstance.

5. Data Retention & Rights of Data Principals

Clients may request historical route export, account deletion, or access to stored telemetry logs at any time. Operational telemetry is retained for the duration of the active subscription period plus statutory audit windows required by transport regulations.