Privacy Policy
Yatnavat Technologies Private Ltd.
Last Updated: April 2026
Yatnavat Technologies Private Ltd. (referred to as "Company", "we", "us", or "our") is the owner of:
Website domain: https://www.oorjaa.tech/
Website domain: http://www.piekart.in/
Webiste Domain : https://datashastra.io
Mobile application: PiEKART Customer App (available on Google Play Store / Apple App Store)
Mobile application: Vendor App (available on Google Play Store / Apple App Store)
Mobile application: Oorjaa Delivery Partner App (available on Google Play Store / Apple App Store)
All of the above are collectively referred to as the "Platform". Any service availed by Users (referred to as "you", "your", or "User") through the Platform is conditioned upon your acceptance of the Terms of Service and this Privacy Policy.
THIS PRIVACY POLICY IS AN ELECTRONIC RECORD IN THE FORM OF AN ELECTRONIC CONTRACT FORMED UNDER THE INFORMATION TECHNOLOGY ACT, 2000, THE DIGITAL PERSONAL DATA PROTECTION ACT, 2023 (DPDP ACT), AND THE RULES MADE THEREUNDER. THIS PRIVACY POLICY DOES NOT REQUIRE ANY PHYSICAL, ELECTRONIC OR DIGITAL SIGNATURE.
The purpose of this Privacy Policy is to ensure that there is an intact charter to collect, use and protect any personal and/or sensitive data collected by us through the Platform. Capitalized terms not defined herein shall have the same meaning as in our Terms of Service.
1.1 Consent Notice (DPDP Act, 2023)
Before collecting your personal data, we provide you this notice as required under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). By using our Platform or Services, you acknowledge that you have read and understood this notice.
The following personal data is collected from you:
Name, contact number, email address, and delivery address
Identity documents where required for verification (Vendor and Delivery Partner Apps)
Location data (GPS), particularly for the Oorjaa Delivery Partner App during active delivery
Payment-related information processed via Razorpay
Device identifiers, IP address, and usage data
This data is collected for the following purposes:
To provide, operate, and improve our delivery and marketplace services
To process orders, payments, and delivery assignments
To communicate order status, promotional offers, and platform updates
To ensure safety, security, and legal compliance
You have the right to withdraw your consent at any time by writing to admin@oorjaa.tech. Withdrawal of consent may result in our inability to provide certain Services to you.
1.2 Acceptance
THIS PRIVACY POLICY IS A LEGALLY BINDING DOCUMENT BETWEEN YOU AND THE COMPANY. BY USING THIS PLATFORM AND AVAILING OUR SERVICES, YOU INDICATE THAT YOU UNDERSTAND, AGREE AND CONSENT TO THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE THIS PLATFORM.
Please be advised that any Information procured by us shall be:
Processed fairly and lawfully for rendering the Services
Obtained only for specified and lawful purposes
Adequate, relevant and not excessive in relation to the purpose for which it is required
Able to be reviewed by the User from time to time, and updated if the need arises
Not kept longer than required for the purpose or as required by applicable law
If you do not agree with this Privacy Policy, you may refuse or withdraw your consent at any time by writing to admin@oorjaa.tech. Under such circumstances, we may be unable to render some or all Services.
WE SHALL NOT BE LIABLE FOR ANY LOSS OR DAMAGE SUSTAINED BY REASON OF ANY DISCLOSURE (INADVERTENT OR OTHERWISE) OF ANY DATA IF THE SAME IS (A) REQUIRED FOR SHARING YOUR INFORMATION FOR LEGITIMATE PURPOSES; OR (B) WAS CAUSED THROUGH NO FAULT, ACT, OR OMISSION OF THE COMPANY.
We collect the following categories of information across our Platform:
"Personal Data" means any information relating to a natural person through which an individual is identified or identifiable, including:
Name, gender, age, date of birth
Contact details: mobile number, email address
Address, pin code, and delivery location
Organisation name and organisation email (for Vendor App users)
Government-issued ID details (for Vendor App and Delivery Partner onboarding, where applicable)
Photographs and profile images
"Sensitive Personal Data or Information (SPDI)" as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, includes data that we may collect in the following categories:
Financial information such as payment instrument details — handled via Razorpay (our third-party payment gateway); we do not store card or bank account numbers directly
Biometric data — currently not collected by us
Health data — not collected unless voluntarily disclosed for delivery-related special instructions
"Technical Information" means information gathered automatically through your use of the Platform, including:
Internet Protocol (IP) address
Device type, browser type, operating system and version
Unique device identifiers and mobile network information
Clickstream data, referring/exit pages, usage statistics
"Locational Information" means real-time geographical location data obtained via GPS or similar technologies. This is particularly applicable to the Oorjaa Delivery Partner App — see Section 10 for full details.
"Social Media Data": If you access the Platform through a third-party platform such as Google or Facebook, we may collect your user name, profile picture, email address, and any information you have made public on that platform, in accordance with this Privacy Policy.
"Non-Personal Information" includes aggregated or anonymised data that does not identify you individually, such as browser statistics, general usage trends, and aggregate order data.
Information may be collected in various ways including during the course of you registering as a User on the Platform or availing Services.
We may receive Information about you from third-party platforms, such as social media platforms, marketing and advertising firms, and business partners to whom you have consented to disclose such Information.
Each category of Information may be treated differently as per this Privacy Policy.
For the Oorjaa Delivery Partner App, location data collection begins when you start an active delivery shift and stops upon completion or manual deactivation. See Section 10 for full details.
The Company collects, uses, stores and processes your Information for purposes permissible under applicable laws, including:
To render Services and facilitate your use of the Platform
To respond to inquiries or fulfil requests for information about Services
To provide billing details and invoices to Users
To prepare delivery routes and assign orders to Delivery Partners
To process and complete orders placed with participating Merchants
To ensure orders are successfully delivered on time and to keep you informed of order status
To send important information regarding the Platform, changes in terms, and administrative communications
To send surveys and marketing communications (with your consent)
To improve user experience and personalise the Platform
To help address problems including any technical issues on the Platform
To protect the integrity and proper administration of the Platform
To conduct research, surveys, and analytical studies on user behaviour and preferences
To respond to legal or judicial processes and provide information to law enforcement as permitted by law
To implement information security practices and determine any security breaches or computer virus
To investigate, prevent, or take action regarding illegal activities and suspected fraud
To enable a potential buyer or investor to evaluate the business of the Company
For aggregated, anonymised business and research purposes (excluding Sensitive Personal Data)
(Individually and collectively referred to as "Legitimate Purposes")
5.1 We do not rent, sell, or share any Information that we collect from you with third parties, except as set out in this Privacy Policy. Any such disclosure shall be in accordance with applicable law.
5.2 We may share your Information with the following categories of recipients:
Delivery partners and merchants — to process and fulfil your orders
Razorpay — our payment gateway partner, for processing financial transactions. Your financial information is stored and processed by Razorpay in accordance with their own privacy policy, which we encourage you to review at https://razorpay.com/privacy/
Cloud infrastructure and hosting providers
Analytics and data processing vendors
Customer support service providers
Marketing and communication platforms
5.3 We may disclose Information as required:
Under applicable law, including laws outside your country of residence
To comply with legal process or court orders
To respond to requests from government or public authorities
To protect our rights, privacy, safety, or property, or that of our users
To investigate suspected fraud or wrongdoing
To protect personal safety of Users of the Platform
5.4 Merger or Acquisition: We may share Information in connection with a merger, acquisition, or sale of assets. In such an event, we will notify you before your Information is transferred and becomes subject to a different privacy policy.
5.5 Employees / Agents of Company: We follow a strict confidentiality policy. Disclosure to employees and personnel is on a strict need-to-know basis only. Any breach of confidential information within the Company is dealt with stringently.
5.6 Except for the above, we share Information only if you authorize us to do so.
6.1 Our Platform may provide links to other sites provided for convenience only. These sites have their own terms of use and privacy policies. We do not guarantee the content or security of those sites.
6.2 Features hosted by third parties on our Platform are governed by those third parties' privacy policies.
6.3 We shall not be responsible for any loss, damage, claim or expense caused as a result of accessing these third-party sites.
6.4 We use Razorpay to direct you to payment gateways when you opt to pay for our Services. Your financial information is collected, stored and retained by Razorpay. We and Razorpay undertake measures designed to provide security appropriate to the risks of processing your personal information. You are requested to review Razorpay's Privacy Policy before proceeding with any payment.
7.1 Our Services are not directed to children below the age of 18 years. Under the Digital Personal Data Protection Act, 2023, a "child" means a person who has not completed eighteen years of age.
7.2 We do not knowingly collect, process, or store personal data of children without verifiable parental or guardian consent. If we become aware that we have inadvertently collected personal data of a child without such consent, we will take immediate steps to delete such data.
7.3 If a child wishes to use our Platform, a parent or guardian must:
Register on the Platform on the child's behalf
Provide express, verifiable consent for the child's use
Accept full responsibility for monitoring the child's use of the Platform
7.4 If you believe that your child has provided personal data to us without appropriate consent, please contact us immediately at admin@oorjaa.tech and we will take reasonable steps to promptly remove such information.
Subject to applicable law, you have the following rights with respect to your personal data:
8.1 Right to Access and Correction: You may access, review, and correct your Personal Information by logging into your account or by contacting us. We will respond to such requests within a reasonable timeframe.
8.2 Right to Erasure: You may request deletion of your Personal Information, subject to our obligations to retain data for legal, contractual, or regulatory purposes. We will inform you if we are unable to delete data and the reason for such retention.
8.3 Right to Object / Restrict Processing: You have the right to object to or request restriction of the processing of your Personal Information.
8.4 Right to Data Portability: You may request us to transfer your Personal Information to another controller or directly to you in a structured, machine-readable format.
8.5 Right to Withdraw Consent: You may withdraw your consent to processing at any time. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
8.6 Right to Nominate (DPDP Act, 2023): You have the right to nominate another individual who shall, in the event of your death or incapacity, exercise your rights in respect of your Personal Information. To register a nominee, please write to admin@oorjaa.tech with the nominee's name and contact details.
To exercise any of the above rights, please contact us at admin@oorjaa.tech.
9.1 In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will:
Notify the Data Protection Board of India (DPBI) as soon as reasonably practicable
Notify each affected User whose personal data has been compromised, in the manner prescribed by applicable law
9.2 The notification to you will include:
The nature of the breach
The categories and approximate number of Users affected
The categories and approximate number of personal data records affected
The likely consequences of the breach
The measures taken or proposed to address the breach and mitigate its effects
9.3 Notifications will be sent to the email address registered with your account. You are responsible for keeping your registered contact information up to date.
9.4 If you discover or suspect a data breach involving our Platform, please report it immediately to admin@oorjaa.tech.
9.1 In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will:
Notify the Data Protection Board of India (DPBI) as soon as reasonably practicable
Notify each affected User whose personal data has been compromised, in the manner prescribed by applicable law
9.2 The notification to you will include:
The nature of the breach
The categories and approximate number of Users affected
The categories and approximate number of personal data records affected
The likely consequences of the breach
The measures taken or proposed to address the breach and mitigate its effects
9.3 Notifications will be sent to the email address registered with your account. You are responsible for keeping your registered contact information up to date.
9.4 If you discover or suspect a data breach involving our Platform, please report it immediately to admin@oorjaa.tech.
Your Information will primarily be stored in electronic form, though certain data may also be stored in physical form. We may store, collect, process and use your data in countries other than the Republic of India, subject to compliance with applicable laws including the DPDP Act, 2023.
We may enter into agreements with third parties (in or outside India) to store or process your information. These third parties may have their own security standards. We will, on a commercially reasonable basis, require such third parties to adopt security standards appropriate to the data they handle.
Where we transfer personal data outside India, we will do so only to countries notified as permissible by the Central Government under the DPDP Act, 2023, or where adequate safeguards are in place.
12.1 Our Platform may utilise "Cookies" — small text files consisting of alphanumeric characters used to collect information about Platform activity. Cookies help us analyse web traffic and customise the Platform to your preferences. Cookies do not give us access to your device.
12.2 We use the following categories of cookies:
Essential cookies: Required for the Platform to function. These cannot be disabled.
Analytics cookies: Help us understand how users interact with the Platform (e.g. pages visited, time spent). These may be disabled.
Marketing cookies: Used to deliver relevant promotional content. These may be disabled.
12.3 You may deny or disable cookies by modifying your browser settings. Please note that doing so may prevent you from taking full advantage of the Platform.
We retain your Information for as long as your account is active or as needed to provide our Services, and thereafter as follows:
Upon account deletion or deactivation, we are not obligated to retain your Information but may retain it for the maximum period permitted under applicable law from the date of deactivation.
You agree and accept that your Information may be stored in third-party cloud service infrastructure. While all reasonable attempts have been taken to ensure safe and secure storage, we shall not be liable for any data breach on the part of a third-party cloud provider that was beyond our control.
We use physical, managerial, technical and operational safeguards as per industry standards and established best practices to protect the Information we collect. We use reasonable security practices and secure servers as mandated under applicable laws.
We review our Information collection, storage, and processing practices regularly, including physical security measures to guard against unauthorised access. However, no security system is impenetrable, and we cannot guarantee absolute security. Please note that emails and other unencrypted communications are not secure and we strongly advise against communicating confidential information by such means.
We may change the data privacy practices and update this Privacy Policy as and when the need arises. Any updates will be made available on the Platform. We will notify you of material changes via email or a prominent notice on the Platform before the change becomes effective.
Your continued use of the Platform and Services after such notification will constitute your acceptance of the updated Privacy Policy. We retain the right to deny or suspend access to the Platform to anyone who we reasonably believe has violated any provision of this Privacy Policy.
We suggest that you regularly check this Privacy Policy to apprise yourself of any updates.
If any provision of this Privacy Policy is held to be invalid or unenforceable by a court, the remaining provisions of this Privacy Policy will remain in effect. THIS PRIVACY POLICY DOES NOT APPLY TO ANY INFORMATION OTHER THAN INFORMATION COLLECTED BY US THROUGH THE PLATFORM.
All unsolicited information you provide shall be deemed non-confidential and we shall be free to use and disclose such unsolicited information without limitation. The rights and remedies available under this Policy may be exercised as often as necessary and are cumulative and not exclusive of rights provided by law.
In furtherance of the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the following Grievance Officer is appointed to ensure compliance:
Grievance Officer Contact
Name: Umesh Singh
Email: umesh.singh@oorjaa.tech
Phone: 9869405500
Address: Yatnavat Technologies Private Ltd., Mumbai
General queries: admin@oorjaa.tech
The Grievance Officer shall acknowledge every complaint within 24 hours of receipt, and shall take best possible efforts to redress the complaint within 15 days of receipt. Any suggestions by the Company regarding use of the Services shall not be construed as a warranty.
If you are unsatisfied with the resolution provided by the Grievance Officer, you may escalate your complaint to the Data Protection Board of India, once it becomes operational under the DPDP Act, 2023.
