Towigo

Legal & security

Privacy Notice: Customers & Service Recipients

Last updated on 8 August 2026

When you use Towigo, you trust us with your personal data. We are committed to keeping that trust. This notice describes the personal data (“data”) we collect, how it is used and shared, and your choices regarding this data when you request or receive towing, recovery, or roadside assistance in India.

Please read this notice together with our Privacy Policy summary, Cookie Policy, and Data Protection Policy.

I. Overview

Scope

This notice applies when you use Towigo's website, apps, WhatsApp, phone, or other channels to request or receive towing and roadside products or services in India.

It specifically applies if you:

  • Request or receive towing, flatbed, lift/hook, two-wheeler, heavy/crane recovery, or roadside help (battery jumpstart, fuel delivery, flat-tyre assistance, and similar) through a Towigoaccount (a “Customer”);
  • Receive a tow or roadside service booked by someone else on your behalf — for example a family member, fleet manager, insurer, or corporate account (a “Guest Recipient”);
  • Use guest checkout or OTP-based booking without creating a full profile, where we still need contact and location details to dispatch help.

This notice does not describe how we collect data from drivers, crane operators, or fleet partners who provide services on the platform. Partner onboarding is covered separately under partner terms and related policies.

India & applicable law

Our privacy practices are governed by Indian law, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDPA), and applicable rules and guidelines. Towigo operates primarily for users in India. If you travel or relocate outside India, processing described here may differ based on local requirements.

Under the DPDPA, you have rights relating to access, correction, erasure, grievance redressal, and withdrawal of consent (where processing is based on consent). Details are in the “Your choices & rights” section below.

II.A. The data we collect

Towigo collects data:

  1. That you provide;
  2. When you use our services;
  3. From other sources.

1. Data you provide

Data categoryData types
Account informationName, mobile number, email, login credentials or OTP identifiers, profile photo, address details, preferred language, accessibility or assistance preferences, and saved payment methods (including verification details from payment gateways such as Razorpay).
Demographic dataAge or date of birth where needed for eligibility, safety, or legal compliance; gender only if you choose to provide it or where required for a feature.
Identity verificationGovernment-issued ID details (for example Aadhaar last-4 / masked references where permitted, driving licence, PAN, or passport extracts) and selfies or facial verification signals used to prevent fraud or confirm account ownership when required.
Vehicle & incident detailsRegistration number, make/model/brand, vehicle type, condition notes, breakdown or accident description, photos/videos of the vehicle or scene, and special instructions for the tow operator.
User contentRatings and feedback for drivers/operators, chat messages, support tickets, uploaded media for claims or customer care, and survey responses.

2. Data collected when you use our services

Data categoryData types
Location dataApproximate and (with permission) precise GPS location for pickup and drop points; live tracking of the assigned tow vehicle during an active job; location inferred from typed addresses or map pins. You can book without precise GPS by entering addresses manually, though matching and ETAs may be less accurate.
Trip / booking informationService type, requested pickup and drop addresses, distance, ETA, fare estimate and final fare, token and full payment amounts, payment status and references, cancellation events, waiting time, and job status timeline.
Usage dataApp/website pages viewed, feature use, search history, crash logs, access dates/times, and interaction with notifications or campaigns.
Device dataDevice model, OS and version, browser type, IP address, mobile network info, advertising or device identifiers, preferred language, and similar technical signals.
Communications dataIn-app chat with drivers/support, call metadata or recordings where disclosed and permitted, WhatsApp or SMS content needed to fulfil or support a booking, and customer-care transcripts.

3. Data from other sources

SourceExamples
Law enforcement, insurers, or government authoritiesName, contact details, and information relating to investigations, accidents, or regulatory requests.
Payment, maps, and fraud vendorsPayment confirmation status, risk scores, address geocoding, and identity/fraud database matches.
Fleet, corporate, or referral partnersEmployee or beneficiary name and contact details when a company, garage, or insurer books on your behalf.
Other users in claims or disputesEvidence relating to accidents, damage claims, or disputes (including photos, dashcam footage, or statements shared by drivers or partners).

II.B. How we use data

We use data to deliver reliable towing and roadside assistance, keep users safe, prevent fraud, support payments, improve our platform, and meet legal obligations in India.

PurposeExamples
Provide servicesCreate and update accounts; match you with nearby drivers/recovery van; calculate ETAs and fares; process token and full payments; send booking updates and receipts; troubleshoot operational issues.
Safety, security & fraudVerify accounts; detect suspicious bookings or payments; enforce community and partner standards; support emergency or incident response; prevent misuse of the platform.
CommunicationsEnable customer–driver chat/calls for pickup confirmation; send OTP, status SMS/WhatsApp, and non-marketing service alerts.
Customer supportInvestigate complaints, lost items, damage claims, refunds, and service quality issues; improve support quality (including assisted tools where disclosed).
Marketing (with choices)Send offers about Towigo services where permitted; measure campaign effectiveness. You may opt out of marketing messages as described below.
Research & product improvementAnalyse wait times, coverage gaps, pricing fairness, and safety outcomes; train models that improve matching and ETA accuracy using appropriate safeguards.
Legal & complianceRespond to lawful requests; maintain tax/GST and accounting records; handle disputes, insurance claims, and regulatory audits.

II.C. Core automated processes

Like comparable mobility platforms, Towigo uses automated processes for functions essential to service delivery and safety — especially matching, pricing, and fraud prevention.

1. Matching

When you request a tow, algorithms evaluate factors such as your pickup location, drop location (where relevant), vehicle/tow type, driver/crane proximity and availability, historical reliability, and traffic conditions to propose suitable operators. Accepted jobs are confirmed to you and the assigned driver.

2. Pricing

Fare estimates and final amounts may consider distance, service type, time of day, waiting time, tolls/surcharges, promotions, and demand. Token amounts and balance due are calculated from the accepted or final fare under our booking and payment rules.

3. Fraud prevention and detection

We monitor patterns that may indicate account takeover, payment abuse, fake locations, or other misuse. If risk is detected, we may require extra verification, delay payouts, or limit access while we investigate.

Questions about an automated decision that significantly affects you can be raised with our Grievance Officer (see Legal information).

II.D. Cookies and related technologies

Towigo and its partners use cookies and similar technologies on our websites, apps, emails, and ads to authenticate users, remember preferences, measure traffic, deliver relevant messaging, and analyse performance.

Details — including categories of cookies and how to manage them — are in our Cookie Policy.

II.E. Data sharing and disclosure

We share data only as needed to provide the service, at your request, with your consent, with service providers under contract, or for legal and safety reasons.

RecipientWhat may be shared
Assigned drivers / operatorsFirst name or display name, contact number (as needed), pickup/drop locations, vehicle details, special instructions, and job status.
Fleet owners & partner companiesJob details required to dispatch their fleet/drivers and settle partner payouts.
Payment processors & banksAmount, currency, order/payment references, and limited account identifiers needed to process Razorpay or other gateway transactions.
Maps, cloud, SMS/WhatsApp, support & analytics vendorsData strictly necessary for mapping, hosting, notifications, customer care, crash analytics, or security tooling under confidentiality obligations.
Insurers, garages, corporate clientsBooking and claim-related details when you or your organisation request insurer/corporate billing or claim handling.
Authorities & legal processData required by applicable law, court order, police request, or to protect the rights, safety, or property of users and Towigo.

We may also share data in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and notice where required by law.

II.F. Data retention and deletion

We retain personal data only as long as needed for the purposes described in this notice, including legal, tax, insurance, safety, and dispute-resolution needs. Typical practices:

Data categoryTypical retention
Account profile & contact detailsFor the life of your account, then deleted or anonymised within a reasonable period after closure unless law requires longer retention.
Booking / trip & payment recordsGenerally up to 7 years (or sooner if your account is deleted and no legal hold applies), aligned with tax, GST, and accounting needs.
Location linked to a completed jobUp to the life of account or about 7 years, whichever is sooner, subject to legal holds.
Identity verification mediaOnly as long as needed for verification, fraud prevention, or statutory requirements; often shorter than booking records.
Marketing preferences & campaign analyticsUntil you opt out or for a limited analytics window (often about 12 months for campaign measurement).

After an account deletion request, we generally delete or anonymise personal data within about 90 days, except where retention is necessary for safety, fraud prevention, outstanding dues, unresolved claims, or legal compliance. See also our Data Retention Policy.

III. Choice and transparency

You can exercise meaningful control over your data, including:

  • Location: manage precise location permission in your device settings; you may still enter pickup/drop addresses manually.
  • Marketing: opt out of promotional SMS/email/WhatsApp via unsubscribe links or by contacting support; service messages about active bookings will continue.
  • Cookies: adjust browser settings and review our Cookie Policy.
  • Account & profile: update personal and vehicle details in your profile where available.
  • DPDPA rights: request access, correction, erasure, or grievance redressal; withdraw consent where processing is consent-based (withdrawal does not affect processing already completed lawfully).

To exercise these rights, email help@towigo.in or use Contact us. We may need to verify your identity before fulfilling a request.