Privacy Policy

1. Introduction

Welcome to Sululu (“we”, “our”, or “us”), accessible at https://www.sululu.in. Sululu is a local travel and taxi bidding platform connecting travelers and tourists with verified local drivers in Shimla and Himachal Pradesh.

We respect your privacy and are committed to safeguarding your personal information. This Privacy Policy explains what information we collect, how it is used, how it is protected, and your rights regarding your data.

2. Information We Collect

We collect only the information necessary to provide our bidding, matching, and transport coordination services:

• Personal Identification Information: Full name, email address, and phone number provided during account registration or OTP verification.
• Driver & Vehicle Information: For driver partners, vehicle type, vehicle registration number, driving license details, and online availability status.
• Ride & Itinerary Data: Pickup location, drop-off destination, scheduled pickup dates/times, intermediate sightseeing stops, and trip notes.
• Bidding & Transaction Records: Price quotes submitted by drivers, tourist acceptances, ride statuses, and trip history.
• Device & Technical Information: IP address, browser type, operating system, and standard session cookies used for authentication and real-time socket communication.

3. How We Use Your Information

Your data is used strictly for platform operations and user safety:

• To facilitate ride requests and enable local drivers to submit competitive price quotes.
• To match tourists with their selected driver and share contact details once an offer is accepted.
• To verify driver credentials and maintain passenger safety standards.
• To authenticate user sessions via secure one-time passwords (OTP) or password login.
• To send real-time ride updates, bid notifications, and trip status alerts.
• To provide customer support and resolve dispute inquiries.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to third parties or advertising brokers. Data is shared only in the following scenarios:

• Between Matched Parties: When a tourist accepts a driver’s bid, the driver receives the tourist’s name, phone number, and pickup details. The tourist receives the driver’s name, phone number, vehicle type, and vehicle number.
• Legal & Safety Compliance: We may disclose information if required by law enforcement, judicial process, or when necessary to protect personal safety.

5. Data Security & Retention

We employ industry-standard encryption, secure HTTP protocols (HTTPS), parameterized database queries, and role-based access control to prevent unauthorized access, IDOR vulnerabilities, and data leaks. Passwords are cryptographically hashed with bcrypt.

Personal data is retained as long as your account remains active or as needed to maintain historical booking records for safety audits.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request corrections to your profile or vehicle information.
• Request deletion of your account and associated ride history.
• Opt out of non-essential communications at any time.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to our privacy team: