Privacy Policy

ModsWale | Version 2.0 Effective Date: 1 August 2026 | Last Updated: 20 April 2026

✅ Compliant with the Digital Personal Data Protection Act, 2023 (No. 22 of 2023)

Overview

ModsWale ("we", "our", or "us") is an online platform connecting motorcycle and scooter enthusiasts with fitment-aware modification workshops and parts catalogs across India. Our services are directed exclusively at users in India.

This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you use the ModsWale website (www.modswale.com), mobile applications, and related services (collectively, the "Platform").

DPDP Act Notice: This policy is drafted in accordance with the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023), the IT Act, 2000, and the IT (SPDI) Rules, 2011. By using the Platform, you (the "Data Principal") acknowledge this policy.

1. Key Definitions

Under the DPDP Act, 2023, the following terms apply throughout this policy:

| Term | Meaning | |---|---| | Data Principal | You — the individual to whom the personal data belongs | | Data Fiduciary | ModsWale — determines the purpose and means of processing your data | | Data Processor | Third parties we engage to process data on our behalf | | Personal Data | Any data about an individual that makes them identifiable | | Processing | Collection, storage, use, sharing, or deletion of personal data | | Consent | A free, specific, informed, unconditional, and unambiguous agreement | | Data Protection Board | Regulatory body established under the DPDP Act, 2023 |

2. Scope of This Policy

This policy applies to:

All registered users of the Platform (riders, enthusiasts, and guests)
Partner garages and workshops listed on ModsWale
Any person browsing the Platform without an account
Processing of personal data in digital form as defined under the DPDP Act, 2023

Note: This policy does not apply to third-party websites linked from our Platform. Please review their respective privacy policies.

3. Information We Collect

We collect only the data necessary for stated purposes (data minimisation principle).

3.1 Account & Identity Information

Full name
Email address
Mobile number
Profile photo (optional)
Login credentials (stored in hashed/encrypted form — never in plain text)

3.2 Vehicle Information

Motorcycle or scooter make, model, version, and variant
Modification preferences and wishlist
Fitment history (parts or mods saved to your profile)

3.3 Location Data

Approximate or precise location (collected only with your explicit permission)
City or region (for showing nearby workshops and localised content)

Your Choice: Location access is optional. Denying it limits workshop-discovery features but does not prevent use of the rest of the Platform.

3.4 Partner / Garage Business Information

If you register a workshop on ModsWale, we additionally collect:

Garage or business name and address
Contact number and business email
Workshop photographs and service descriptions
Social media links
GST number or business registration details (if voluntarily provided)

3.5 Usage and Technical Data

Device type, operating system, and browser
IP address and session logs
Pages visited, search queries, and session duration
Referral source and crash/error logs

3.6 Communications

Messages or enquiries sent to workshops through the Platform
Support tickets and feedback submitted to us
Newsletter subscription status

4. How We Use Your Personal Data

We process your personal data only for specific, stated purposes as required by the DPDP Act, 2023:

| Purpose | Legal Basis (DPDP Act) | Data Used | |---|---|---| | Creating and managing your account | Consent (§6) | Name, email, phone, password | | Showing nearby workshops | Consent (§6) | Location data | | Fitment-aware part recommendations | Consent / Legitimate use (§7) | Vehicle info, preferences | | Enabling user–garage communication | Consent (§6) | Name, contact, messages | | Sending service updates & notifications | Consent (§6) | Email, phone | | Processing partner listings | Consent (§6) | Garage & business info | | Platform security & fraud prevention | Legitimate use (§7(f)) | IP, device, usage logs | | Analytics & performance improvement | Legitimate use (§7) | Anonymised usage data | | Legal compliance | Compliance with law (§7(b)) | As required by law |

Important: We do not use your data for automated profiling or decision-making that produces legal or significant effects on you without your explicit consent.

5. Your Rights as a Data Principal

Under Chapter III of the DPDP Act, 2023, you have the following rights:

| Right | What it means | How to exercise | |---|---|---| | Right to Access (§11) | Know what personal data we hold and how it is processed | Email grievance@modswale.com | | Right to Correction (§12) | Correct inaccurate or incomplete data | Profile settings or email us | | Right to Erasure (§12) | Request deletion once purpose is fulfilled | In-app Settings > Danger Zone or visit /delete-account | | Right to Withdraw Consent (§6(4)) | Withdraw consent at any time without affecting prior lawful processing | Account settings or email us | | Right to Grievance Redressal (§13) | File a complaint with our Grievance Officer | See Section 13 | | Right to Nominate (§14) | Nominate someone to exercise rights on your behalf in case of death/incapacity | Written nomination submitted to us | | Right to approach Data Protection Board | Escalate unresolved complaints to the Data Protection Board of India | Via the Board's digital portal (once operational) |

Response Time: We will respond to all rights requests within 30 days of receipt. If an extension is required by law, we will notify you in advance.

6. Consent

In accordance with §5 and §6 of the DPDP Act, 2023:

We present a clear, plain-language notice before collecting your personal data
Consent is sought separately for each distinct purpose
Optional features (e.g., location access, marketing emails) do not gate access to core Platform features
You may withdraw consent at any time with the same ease as it was given
Withdrawal of consent does not affect the legality of processing done prior to withdrawal

Where you provided data before the DPDP Act came into force, we will provide a notice under §5(2) as soon as reasonably practicable.

7. Sharing of Personal Data

🔒 ModsWale does not sell, rent, or trade your personal data.

We may share data only in the following limited circumstances:

7.1 Data Processors (Service Providers)

Third-party service providers who process data strictly on our instructions:

Cloud hosting and server infrastructure providers
Anonymised analytics providers
Email and push notification services
Payment gateway processors (if applicable)
Cloudinary — image hosting for workshop and product photos

DPDP Obligation: All Data Processors are bound by data processing agreements restricting them from processing your data beyond our instructions.

7.2 Publicly Visible Partner Information

Information submitted by garages — including name, address, phone number, photos, and services — is publicly displayed on the Platform. Partners should not include sensitive personal data in their public listings.

7.3 Legal Disclosure

We may disclose personal data to law enforcement, regulatory authorities, or courts when required by law, court order, or to protect the rights and safety of users or the public.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may transfer to the successor entity. Users will be notified before such transfer, and existing rights will be preserved.

8. Data Retention

We retain personal data only as long as necessary to fulfil the stated purpose, and no longer than required by law:

| Data Category | Retention Period | |---|---| | Account & identity data | Until account deletion + 90 days for backup purge | | Vehicle and fitment data | Duration of account + 90 days | | Location data | Session only (not stored persistently unless explicitly saved by user) | | Usage logs and IP address | Up to 180 days for security and fraud prevention | | Partner garage listing data | Until listing removal + 90 days | | Communications / support tickets | 3 years (for dispute resolution) | | Legal compliance records | As required by law (typically 5–7 years) |

After the applicable retention period, data is securely deleted or anonymised so it can no longer identify you.

9. Data Security

We implement reasonable technical and organisational security measures as required under the DPDP Act, 2023:

[x] HTTPS / TLS encryption for all data in transit
[x] Encrypted storage of passwords and sensitive credentials
[x] Role-based access control — only authorised personnel access personal data
[x] Regular security audits and vulnerability assessments
[x] Secure image delivery via Cloudinary with access controls
[x] API authentication via secure token-based mechanisms

Breach Notification: In the event of a personal data breach likely to cause harm, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, 2023.

10. Children's Data

The Platform is not intended for individuals under the age of 18. In accordance with §9 of the DPDP Act, 2023:

We do not knowingly collect personal data from children (persons under 18 years)
We do not use children's data for targeted advertising or behavioural monitoring
If we discover a child has provided data without verifiable parental consent, we delete it promptly

Parents / Guardians: If you believe your child has submitted data to our Platform, contact us immediately at support@modswale.com and we will act within 72 hours.

11. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

| Cookie Type | Purpose | Can be disabled? | |---|---|---| | Essential / Session | Login sessions, security tokens, CSRF protection | ❌ No — required for Platform to function | | Functional | Remembering user preferences (e.g., location, language) | ✅ Yes — via browser settings | | Analytics | Anonymised usage data to improve the Platform | ✅ Yes — via browser settings or consent banner | | Marketing / Remarketing | Not currently used | N/A |

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

12. Cross-Border Data Transfers

Your personal data is primarily stored and processed within India. If any processing occurs outside India (e.g., via third-party cloud services), we ensure:

The transfer is to a country notified by the Central Government under the DPDP Act, 2023, or
Appropriate contractual safeguards are in place with the Data Processor

13. Grievance Officer

In accordance with §13 of the DPDP Act, 2023, we have appointed a Grievance Officer for data-related complaints:

| Detail | Information | |---|---| | Role | Grievance Officer, ModsWale | | Email | grievance@modswale.com | | Acknowledgement | Within 48 hours of receipt | | Resolution Time | Within 30 days of receipt | | Escalation | Data Protection Board of India (once constituted and operational) |

If you are not satisfied with our resolution, you may approach the Data Protection Board of India once its digital portal is operational under the DPDP Act, 2023.

14. Applicable Laws and Compliance

ModsWale operates in compliance with the following:

Digital Personal Data Protection Act, 2023 (No. 22 of 2023)
Information Technology Act, 2000
IT (Reasonable Security Practices and Sensitive Personal Data) Rules, 2011
Consumer Protection (E-Commerce) Rules, 2020
Motor Vehicles Act, 1988 (for regulatory intelligence features on the Platform)

15. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, the Platform, or applicable law. When we make material changes:

The updated policy will be posted on this page with a revised "Last Updated" date
Registered users will be notified by email or in-app notification
Continued use of the Platform after 30 days of notification constitutes acceptance of the updated policy

We recommend reviewing this policy periodically.

16. Contact Us

For any questions, data requests, or concerns:

| Channel | Details | |---|---| | General Support | support@modswale.com | | Data / Grievance Requests | hello@modswale.com | | Website | https://www.modswale.com/privacy-policy | | Response Time | Within 30 days of receipt |

This Privacy Policy was last reviewed and updated on 20 April 2026.

ModsWale is a brand owned and operated by AKSHAY DILEEP JUMBADE.