Privacy Policy

SomenTm exists to get help to you when your car stops. Doing that well means handling some sensitive information — above all, where you are. This Policy explains what we collect, why, who sees it, how long we keep it, and the choices you have. We have tried to write it plainly; if anything is unclear, write to privacy@somentm.com.

This Policy applies to the SomenTm app for car owners, the SomenTm Driver app, the Fleet Shield console, the SumaTraa device and service, our website, and our Control Room. It should be read together with our Terms of Service.

Data fiduciary. SomenTm Private Limited, Bengaluru, Karnataka, India (“SomenTm”, “we”) decides how and why your personal data is processed and is the data fiduciary under the Digital Personal Data Protection Act, 2023.

Personal data means any information that identifies you or could reasonably be linked to you — your name, phone number, vehicle registration, location, photos, payment references and the like.

Fleet data. Where a business uses Fleet Shield, that business is responsible for its own use of Driver data inside its console. We process Driver data on the business's instructions to run the console and on our own account to provide rescue Services. Section 8 explains this in more detail.

Not covered. This Policy does not cover the practices of independent Partners once they are working on your vehicle, or of third-party websites we link to.

Account and identity. Name, mobile number, email, profile photo (optional), and for Drivers a driving-licence reference and the Fleet you are linked to. Sign-in is handled by our authentication provider; we do not see your password.

Vehicle. Registration number, make and model, odometer readings, service history and any details you or a Partner add during a job.

Location. Precise location from your device: when you raise an SOS or booking, throughout that request, and — for Drivers — continuously while on duty so your Fleet can see the vehicle. We do not collect Driver location while off duty. We also derive coarse location from your IP address for service-area checks.

Requests and content. SOS and booking details, descriptions, photos you attach to damage reports, ratings, and messages with the Control Room. Calls with the Control Room may be recorded; you will hear a notice when they are.

Payments. Plan, amount, billing status and a payment-provider reference. Card and UPI details are collected directly by Razorpay under its own privacy policy; we never store your full card number.

SumaTraa telemetry. If you install a SumaTraa device: battery voltage, coolant temperature, tyre pressure, fault codes, ignition state and trip distance, tied to your vehicle.

Device and usage. Device model, operating system, app version, push token, crash reports, and how you use the app (screens opened, features used), collected through our analytics and error-reporting tools.

From others. Partners report job status, work performed and parts used. Fleet Managers add Drivers, vehicles and assignments. Public authorities may share information in connection with an incident.

We use personal data for the following purposes, and no others without telling you first:

• Providing the Services: verifying a request, finding the nearest suitable Partner, dispatching them, showing live tracking and keeping you updated.
• Safety and verification: confirming who is asking for help, where the vehicle is, and that a Partner is who they say they are.
• Fleet operations: showing Fleet Managers on-duty Driver locations, trips, fuel and reports inside their console.
• Billing: charging for Plans and out-of-plan work, sending invoices and GST documents, preventing payment fraud.
• Communication: SMS, push notifications, email and calls about your requests, account and Plan. Marketing messages only with your consent, which you can withdraw at any time.
• Improving the Platform: analytics, testing, fixing errors, and — using aggregated or de-identified data — understanding demand and response performance.
• Legal compliance and protection: keeping records the law requires, resolving disputes, responding to lawful requests, and enforcing our Terms.

We process your personal data on the basis of your consent, given when you create an account and when you grant location, camera or notification permissions on your device, and for the legitimate uses the law allows without separate consent — such as performing the Service you have asked for, complying with a legal obligation, or responding to an emergency that threatens life or health.

You can withdraw consent at any time (Section 10). Withdrawing location permission will prevent us from dispatching help to you; withdrawing it while on duty as a Driver will end your duty session.

We do not sell personal data. We share it only as follows:

• Partners: for an active request, the assigned Partner receives your name, phone number, vehicle details, location and the description and photos of the problem. Partners may contact you only about that request.
• Fleets: a Fleet Manager sees the data described in Section 8 for Drivers linked to their Fleet.
• Service providers who process data on our behalf under contract: cloud hosting and databases, authentication, payments (Razorpay), maps and routing, SMS, email and push delivery, analytics and crash reporting. They may use the data only to provide their service to us.
• Public authorities and emergency services, where required by law or where we believe in good faith that disclosure is necessary to protect someone's life or safety.
• A successor, if SomenTm is merged, acquired or sells substantially all of its assets — you will be told before your data is transferred and becomes subject to a different policy.

Some service providers store data outside India. Where they do, we require contractual protections at least as strong as this Policy and comply with applicable transfer rules.

Car owners. Precise location is read when you open the app to check coverage, when you raise a request, and in the background for the duration of an active request so the Control Room and Partner can find you even if you switch apps or your screen locks. Location collection stops when the request closes.

Drivers. While you set yourself as available or on trip, your location is sent to SomenTm roughly every few seconds and shown to your Fleet Manager. It stops the moment you go off duty. Your Fleet decides how long it keeps trip history inside its console; SomenTm keeps the underlying records as described in Section 9.

Partners. Partner locations are shared with the customer and the Control Room only during an assigned job.

You can see and change location permissions at any time in your device settings.

If you are a Driver linked to a Fleet, the Fleet Manager can see: your name, phone and profile photo; your duty status and assigned vehicle; your live location while on duty; trips, fuel logs and damage reports you submit; and requests raised for you. Your Fleet cannot see your location when you are off duty, your payment details, or your activity with any other Fleet.

Your Fleet is responsible for telling you about this monitoring and for using it only to run its fleet. If you believe a Fleet is misusing your data, you can contact us at privacy@somentm.com and we will investigate. When a Fleet offboards you, it loses live access to your data; historical records remain in its console for its own record-keeping.

• Account data: for as long as your account is open, and for 90 days after closure to allow reactivation, unless a longer period is required by law.
• Request records (SOS, bookings, dispatch logs, call recordings): 3 years from the request, to handle complaints, insurance claims and disputes.
• Raw location traces: 90 days, after which only trip summaries (start, end, distance) are retained.
• Damage-report photos: 3 years, or until you or your Fleet delete the report if earlier.
• Payment and invoice records: 8 years, as required by Indian tax and company law.
• SumaTraa telemetry: 24 months of detail, then aggregated.
• Analytics and crash data: up to 24 months.

When a retention period ends we delete the data or de-identify it so it can no longer be linked to you.

Subject to applicable law, you have the right to:

• access a summary of the personal data we hold about you and how it has been shared;
• correct inaccurate or incomplete data, and update your profile and vehicle details in the app;
• erase your data by deleting your account, subject to records we must keep by law;
• withdraw consent for marketing, location or other permissions at any time;
• nominate a person to exercise these rights on your behalf if you are unable to;
• raise a grievance with our Grievance Officer and, if unsatisfied, with the Data Protection Board of India.

To exercise a right, use the options in the app or write to privacy@somentm.com from the email on your account. We respond within 30 days. We may ask for information to verify your identity before acting.

We protect personal data with encryption in transit and at rest, role-based access limited to staff who need it, audit logging of Control Room actions, regular security reviews of the Platform and our providers, and contractual obligations on Partners and vendors. Payment data is handled by a PCI-DSS-certified provider. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.

The Platform is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, contact privacy@somentm.com and we will delete it.

Our website and web consoles use cookies and similar technologies to keep you signed in, remember preferences such as light or dark mode, and measure how the site is used. Our apps use device identifiers and SDKs for push notifications, analytics and crash reporting. You can manage cookies in your browser and permissions in your device settings; blocking essential cookies may stop the consoles from working. Our Cookie Policy lists the cookies we set.

We may update this Policy as the Services and the law change. The current version and its effective date are always published at somentm.com/privacy. For material changes we will notify you in the app or by email before they take effect. Continued use after the effective date means you accept the updated Policy.

Privacy questions and requests: privacy@somentm.com

Grievance Officer: Grievance Officer, SomenTm Private Limited, Bengaluru, Karnataka, India · grievance@somentm.com. We acknowledge grievances within 48 hours and resolve them within 30 days.