This Privacy Policy explains how Rooney (“Rooney”, “we”, “our”, or “us”) collects, uses, shares, and protects information when you use the Rooney Vendor App (the “App”) and related services available at rooneyhatsun.com (collectively, the “Services”).
The App is a business-to-business platform that allows transport vendors to view trip opportunities, submit bids, manage assigned trips, and track wallet transactions. By creating an account or using the App, you agree to this Privacy Policy.
This policy applies to transport vendors and their authorised representatives who register on the App, as well as visitors to our website. The App is intended for business users and is not directed at children under 18. We do not knowingly collect personal information from anyone under 18.
| Category | Examples |
|---|---|
| Account & identity | Full name, username, mobile number, secondary mobile number, email address, password (stored only in hashed form), one-time passwords (OTPs). |
| Business details | Vendor name, company name, business name, GSTIN, PAN, business address (line 1, line 2, city, state, PIN code). |
| KYC & verification documents | Photographs or scans of Aadhaar, PAN, driving licence, vehicle registration certificate (RC), insurance, pollution certificate, business licence, cancelled cheque, visiting card, and office photographs. Document numbers may be stored alongside the document image. |
| Bank & payment details | Account holder name, account number, bank name, IFSC code, branch, TDS applicability, and Unique Transaction Reference (UTR) numbers for payouts. |
| Operational data | Bids you submit, trips assigned to you, trip status updates, ratings, completed/cancelled trip counts, in-app notifications, terms-and-conditions acceptance. |
| Communications | Messages you send to our support team, feedback, and grievance requests. |
| Category | Examples |
|---|---|
| Device & push data | Expo / Firebase Cloud Messaging (FCM) push notification tokens, device platform (Android / iOS), app version. |
| Usage & log data | Login timestamps, IP address, request logs, error logs, and audit trails for security and abuse prevention. |
We do not collect precise device location in the background. We do not access your contacts, SMS messages, call logs, or photo library except where you explicitly choose to upload a document or image through the App.
We process your personal data on the following bases:
We do not sell your personal data. We share it only as described below:
We retain personal data for as long as your vendor account is active and for a reasonable period thereafter to comply with legal, tax, accounting, and dispute-resolution requirements. KYC documents and financial transaction records are typically retained for at least eight (8) years from the date of the relevant transaction, in line with Indian tax and record-keeping laws. After the retention period, data is securely deleted or anonymised.
No method of transmission or storage is 100% secure. If we become aware of a security incident affecting your data, we will notify you and the relevant authorities as required by law.
Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you have the right to:
You can request deletion of your account and associated personal data at any time. To submit a request:
Account Deletion Request — Rooney Vendor App, and include your registered mobile number.We will verify your identity and process your request within 30 days. Upon deletion, the following data will be removed or anonymised: your profile (name, email, secondary phone), uploaded KYC documents, push tokens, and notification preferences.
What we may retain after deletion: records that we are legally required to keep — including financial transaction history (wallet credits/debits, UTR references), tax records, GST/PAN details associated with invoices, and trip records linked to completed contracts. These are retained for the periods described in Section 6 and are accessed only as required by law.
We primarily store data on servers located in India. If we transfer data outside India (for example, through cloud service providers), we take steps to ensure an appropriate level of protection, consistent with applicable law.
The App is intended for vendors who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it.
In accordance with the Information Technology Act, 2000 and applicable rules, you can contact our Grievance Officer for any concerns regarding the processing of your personal data:
We will acknowledge your complaint within 48 hours and resolve it within 30 days of receipt.
The App may contain links to third-party websites or services that we do not control. This Privacy Policy does not apply to those third parties. We encourage you to read the privacy policies of any third-party services you use.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you through the App or by email. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or our data practices, please contact us: