← Katoro

Privacy Policy

Effective 23 September 2026 · katoro.in

This Privacy Policy explains how Katoro (“Katoro”, “we”, “us”, “our”), operating out of Vadodara, Gujarat, India, collects, uses, stores, shares and protects personal data when you:

This policy applies across all three surfaces. Where a section applies to only one of them, it says so explicitly. By using any of the above, you agree to the collection and use of information as described here.

1. Information we collect

1.1 Website visitors

1.2 Customer App users

We do not store your card or UPI credentials — prepaid payments are processed by our payment partner and Katoro never sees your card/UPI PIN.

1.3 Partner App users (delivery/onboarding staff)

2. How we use your information

We do not sell your personal data to anyone, and we do not use it for third-party advertising.

3. Who we share data with

We share the minimum data necessary with the following categories of service providers, who are contractually restricted from using it for anything other than providing their service to us:

4. Data retention

We retain personal data for as long as your account is active and as needed to provide the service, resolve disputes, and meet our legal/tax/accounting record-keeping obligations (typically up to 8 years for financial and payout-related records, in line with Indian tax law). KYC documents are retained for as long as required for partner verification and compliance, and are deleted or anonymised on request once no longer legally required. You may request deletion of your account and associated personal data at any time — see Section 8.

5. Data security

We use industry-standard safeguards: encrypted data transmission (HTTPS/TLS), access-controlled cloud storage, authenticated API access, and role-based access to sensitive records such as KYC documents and payout details. No method of transmission or storage is 100% secure, but we work to protect your data using commercially reasonable measures appropriate to its sensitivity.

6. Your rights

Subject to applicable law — including the Digital Personal Data Protection Act, 2023 (India) — you (as a “Data Principal”) have the right to:

To exercise any of these rights, contact us using the details in Section 10.

7. Children's privacy

The Customer App and website are not directed at children under 18, and the Partner App is restricted to individuals who meet the minimum legal age and licensing requirements to operate a delivery vehicle in India. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

8. Account & data deletion

Partner App users can delete their account instantly from Profile → Delete account inside the app. Anyone — with or without the app installed — can also request deletion at katoro.in/delete-account, or by emailing hello@katoro.in with the phone number linked to their account. Web/email requests are actioned within 7 days, except for data we are legally required to retain (e.g. financial/payout records, or an active/disputed order).

9. Cookies

katoro.in uses only essential, functional cookies/local storage needed for the site and waitlist form to work. We do not currently use third-party advertising or cross-site tracking cookies. If this changes, this policy will be updated.

10. Contact us / Grievance Officer

For any privacy questions, data access/deletion requests, or grievances regarding how your personal data is handled, contact our Grievance Officer:

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy on this page with an updated effective date, and for material changes we will provide additional notice in-app or by email where appropriate.

Back to katoro.in