Picsidrop Privacy Policy
# Privacy Policy — PicSiDrop
**Last updated:** 1 June 2026
## Who this applies to
This policy describes how PicSiDrop (operated by Pavera SAP Private Limited, India) collects and uses information from people who use the PicSiDrop mobile app, our website, or our partner network.
## What we collect
- **Account info** — name, mobile, email, profile photo.
- **KYC documents** (travellers only) — Aadhaar number, PAN, driving licence, selfie. Stored encrypted; verified via licensed partners; never shared with senders.
- **Location** — your device GPS while you are signed in and online or actively delivering. We do not track location when you are offline.
- **Trip + parcel data** — pickup/drop, weight, photos, receiver contact you provide.
- **Payments** — handled by Razorpay; we receive the order status and a masked instrument hint, never your full card.
- **Device + app analytics** — crash reports, basic usage events, IP address.
## Why we collect it
- Match senders with travellers and route parcels.
- Show live tracking to the sender during an active delivery.
- Process payments and pay out earnings to travellers.
- Verify identity (KYC) for safety on both sides.
- Handle support, disputes, and any incident or SOS.
- Comply with applicable laws — DPDPA 2023, IT Rules, KYC, and taxation.
## Who we share it with
- **The other party on your trip** — first name, mobile, masked during chat. Photos and ratings are shared.
- **Payment partners** — Razorpay (pay-in + payouts), banks for settlement.
- **Notification + SMS providers** — for delivery alerts and receiver notifications.
- **KYC partners** — for Aadhaar / DL verification under your consent.
- **Law enforcement** — only when we receive a valid legal request.
We do not sell your personal data.
## How long we keep it
- **Account data:** while your account exists, plus 18 months after deletion for accounting and dispute resolution.
- **KYC records:** 5 years per RBI / FIU norms.
- **Location history:** 24 hours of recent GPS, then permanently deleted.
- **Booking records:** 7 years (statutory).
## Your rights (DPDPA, India)
- Access a copy of your data.
- Correct anything that is wrong.
- Withdraw a previously given consent.
- Ask us to delete your account and associated data.
- Nominate someone to act on your behalf if you can’t.
Write to [paverasapvtltd@gmail.com](mailto:paverasapvtltd@gmail.com). We respond within 30 days.
## Children
PicSiDrop is for users 18 years and older. We do not knowingly collect data from children.
## Security
Data in transit is TLS-encrypted. Sensitive fields (KYC, payment tokens) are encrypted at rest. We follow the principle of least privilege: support staff see masked data unless they have an active ticket on your account.
## Changes
We will post any change to this page with a fresh “Last updated” date. Material changes will be notified inside the app at least 14 days before they take effect.
## Contact
Questions, requests, or concerns: [paverasapvtltd@gmail.com](mailto:paverasapvtltd@gmail.com).
Grievance Officer (India): [paverasapvtltd@gmail.com](mailto:paverasapvtltd@gmail.com), response within 7 days.