Brand: GoMyCars • Entity: Corporate Hostel Pvt Ltd • Last Updated: August 31, 2026

Corporate Hostel Private Limited (operating the brand GoMyCars, referred to as "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy details how we collect, use, store, and safeguard your personal information when you access or use our website (https://gomycars.com) and self-drive car rental platform, in full compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.

1. Information We Collect

To facilitate secure self-drive vehicle reservations and statutory compliance under Indian transport regulations, we collect the following categories of information:

• Account & Contact Data: Full name, verified mobile phone number, email address, and account login credentials.
• KYC & Identity Verification Documents: Government-issued Driving License (DL) details, date of birth, and identity documentation (Aadhaar/Passport). All identity documents are stored in secure, private, encrypted file storage not accessible via direct web URLs.
• Booking & Trip Information: Rental dates, pickup/drop locations, selected vehicle model, and transaction history.
• Vehicle Telematics & Safety Data: During active rental durations, vehicle GPS location, distance traveled, and vehicle diagnostic data may be recorded solely for customer safety, anti-theft tracking, and roadside assistance.

2. Payment Information & PCI-DSS Security

We do not collect, process, or store sensitive cardholder details, CVV numbers, or net banking passwords on our servers.

All financial transactions are handled via Reserve Bank of India (RBI) authorized payment aggregators (including Cashfree Payments). Payment processing occurs through direct 256-bit encrypted channels adhering strictly to PCI-DSS Level 1 security standards.

3. Purpose of Data Processing

We process your personal information strictly for the following legitimate purposes:

• Processing car bookings, reservations, and verifying driving eligibility under the Motor Vehicles Act, 1988.
• Generating tax invoices, booking confirmation receipts, and processing security deposit refunds.
• Sending automated transactional notifications (booking confirmation, OTPs, trip reminders, and invoice emails).
• Fraud prevention, customer support resolution, and emergency roadside assistance.

4. Data Protection & Storage Security

We deploy industry-standard technical and organizational security measures, including AES-256 data encryption at rest, HTTPS/TLS 1.3 encryption in transit, strict session isolation, CSRF token validation, and restricted role-based administrative access controls.

5. Cookies & Tracking Technologies

We use strictly necessary session cookies to maintain your authenticated login state, maintain security tokens, and provide a seamless navigation experience. We do not sell, trade, or rent your personal browsing data to third-party data brokers.

6. Your Rights under the DPDP Act, 2023

Under applicable Indian data protection laws, you possess the following rights:

• Right to Access & Correction: You may view or update your profile details and uploaded KYC documents at any time via your account profile.
• Right to Data Erasure: You may request the deletion of your account and personal data, subject to the retention of statutory financial records required under Indian taxation and Motor Vehicle regulations.
• Right to Grievance Redressal: You have the right to register concerns or complaints with our designated Grievance Officer.

7. Grievance Officer & Contact Details

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of our Grievance Officer are provided below: