Privacy Notice
1. Who we are
TaT Connect is provided by TAT Integrated Facility Management Services Pvt. Ltd. ("TaT Services", "we", "us"). It supports corporate employee transport through an operations console, an Employee app and a Driver app. This notice explains the personal information used to run that service.
Your employer normally decides how its employee transport data is used. We handle that data under our service agreement and its instructions. We also make decisions about our own account administration, security and business records. Responsibilities for driver and vendor information are set out in the relevant arrangements. You may contact us or your employer’s transport desk; we will direct your request to the responsible organisation.
2. Information we use and why
| Information | Purpose |
|---|---|
| Employee details: name, Employee ID, employer, department, designation, cost centre, contact details and gender where used for safety rules | Identify travellers, arrange shifts and transport, contact users, apply escort and night-safety rules, and report transport usage. |
| Boarding point: name, area, map pin and accuracy; trip details, attendance, cancellations, no-shows and timestamps | Plan and operate pickup/drop trips and resolve service questions. We do not ask employees to enter a home address; a boarding pin can nevertheless reveal a home location. |
| Driver name, code, vendor, contact details, address, emergency and reference contacts, identification photo, licence and compliance documents | Verify eligibility, assign trips, support safety and help passengers recognise the assigned driver. |
| Driver identity information: PAN/Voter ID where required; only the last four Aadhaar digits | Approved identity and compliance checks. Do not upload a full Aadhaar number or an unmasked Aadhaar copy. |
| Trip actions, safety checks, SOS records, approval decisions, feedback and survey responses | Operate the service, address incidents and exceptions, improve service and maintain accountability. |
| Console-user and contact details, work mobile, role, activity logs, document acceptance, sign-in and device information | Account access, operational contact, support, security and records of actions. |
We receive information from you, your employer, the transport vendor and authorised staff. Supply only information needed for transport. We do not sell personal information or use it for targeted advertising.
Location, sharing and service providers
3. Location and device information
Employee app: we do not continuously track your location or request background location. When you set a boarding point, a one-time location reading helps create the pin. The selected pin, accuracy and adjustment information are retained for transport. SOS records may include an available incident location; this does not start continuous employee tracking.
Driver app: during an active trip, precise location is collected in the foreground and background, including when the app is not on screen, for cab tracking, arrival estimates, distance and safety. Sharing ends when the trip ends. A location-service notification is shown. Location availability and battery status may be checked to support trip operation.
For a drop trip, tapping “Reached office” takes one location reading before Start to check arrival at the office. Only the result, time and accuracy are kept; that coordinate is not saved to the trip trail or shown to passengers. For pickup trips, in-trip location may identify office arrival and the system may end the trip 10 minutes later if the driver has not ended it.
4. Who receives information
Access is limited by role, client and assigned trip. Authorised operations staff see the information needed for their work. Client users see their own organisation’s permitted trip records and reports. Vendor users see their own permitted drivers, vehicles and trips.
Assigned drivers see boarding areas, pins and limited passenger names, not employee phone numbers or home-address fields. Employees see their own trip, permitted live cab information and the assigned driver’s photo, first name, vehicle number and document-validity information. A driver's address is visible only to Admin and Super Admin users. Drivers' emergency and reference contacts are visible only to Admin, Super Admin and Operator users. Neither is included in the apps, reports or exports. Full identity-document numbers are limited to authorised verification roles.
Named client approvers may receive employee names and Employee IDs, trip and area details, driver and vehicle information and compliance status by email. Approval links are intended only for the named recipient. Phone numbers, home addresses and boarding coordinates are not included in these approval emails.
SOS alerts may share the raiser’s first name and role, trip/vehicle details, time and an incident map link with authorised operations and escalation contacts, including the client’s named contact. Recipients must use this information only to respond to the incident.
5. Providers and processing locations
We use Google Cloud/Firebase for hosting, authentication and push services; Google Maps for maps and routes; Zoho ZeptoMail for transactional email; and RapidSMS for service messages. Relevant information is processed by these providers to deliver their services, subject to applicable contractual and legal safeguards.
Hosting location: Google Cloud asia-south1 (Mumbai, India). Provider support, routing, backup or processing may occur elsewhere, under each provider's terms and safeguards. We do not promise that every service processes information only in India. Information may also be disclosed where legally required or necessary for a lawful emergency response.
Retention, security and your choices
6. How long information is kept
We keep personal information only for a defined service, security, legal or dispute purpose. The schedule below must be completed before this notice is published. Records under a necessary legal hold are restricted, kept only for that purpose and reviewed for deletion when the hold ends.
| Record | Approved retention / deletion trigger |
|---|---|
| Driver trip trail and SOS coordinates | Driver trip trail: 30 days after the trip ends. SOS coordinates: 30 days after the SOS is resolved. Then deletion, except a documented necessary legal hold. |
| Uploaded import spreadsheets | 90 days from upload. Imported records and error/batch records follow their own approved periods. |
| Trip, approval, SOS case and service records | Pilot: kept for the pilot; the period will be set by the legal team and published before the full launch. |
| User profiles, driver documents and business contacts | Pilot: kept for the pilot; the period will be set by the legal team and published before the full launch. |
| Security/audit logs; acceptance records | Pilot: kept for the pilot; the period will be set by the legal team and published before the full launch. |
| Feedback, survey and training-tip records | Pilot: kept for the pilot; the period will be set by the legal team and published before the full launch. |
| Backups, exports and provider-held copies | Pilot: kept for the pilot; the period will be set by the legal team and published before the full launch. |
7. Security
We use access controls, separation between client accounts and security measures appropriate to the service. Authorised access and important actions are recorded. No system is risk-free. We investigate suspected incidents and notify affected organisations, individuals and authorities where required by applicable law.
8. Requests, withdrawal and complaints
Write to support@tatconnect.in to request access to or correction of your information, account deletion, a retention explanation, or withdrawal of consent where processing relies on consent. We may verify your identity using proportionate information. We will coordinate with your employer where it is responsible for the record; you do not have to identify the legal role correctly before contacting us.
If information is needed for a transport feature, withholding it or withdrawing consent may make that feature unavailable. Ask the transport desk about alternatives. Withdrawal does not invalidate earlier lawful processing. We will explain any lawful reason for retaining a record and any available complaint route. Statutory rights apply as and when the relevant provisions are in force.
Grievance Officer: Mahesh PS, Managing Director. Email: support@tatconnect.in. Address: #25, 1st Floor, 100ft Ring Road, Hoskerehalli, Banashankari 3rd Stage, Bengaluru 560085, Karnataka. We will address grievances expeditiously and within one month, or sooner where applicable law requires. This is a company service commitment; legal rights are not limited by it.
9. Children and updates
TaT Connect is intended for authorised adult users aged 18 or above. Do not enrol a person under 18 without a separately approved legal and operational process. We publish changes with a version and effective date, give appropriate notice of material changes and seek fresh consent where required. A notice acknowledgement is not blanket consent to unrelated processing.