1. Our role under the DPDP Act, 2023

For the personal data you give us to run your account (name, email, mobile, address), Bylox is a Data Fiduciary. Where we digitise or scan documents on your instruction, we act as a Data Processor of that content, processing only on your documented instructions.

2. What we collect

• Account data: name, email, verified mobile number
• Pickup/delivery addresses and location (for scheduling)
• Booking, box, inventory, retrieval, and billing records
• Device/usage data needed to operate the service securely

3. How we use it

• To provide pickup, storage, inventory, and retrieval
• To verify your identity (Google sign-in + mobile OTP)
• To send service updates and box-status notifications
• To bill you and issue GST-compliant invoices

4. Consent, security & your rights

We process your data with your consent for the purposes above. We apply reasonable security safeguards — access controls, logging, and encryption for digital records — and require equivalent safeguards from any sub-processor.

You may access, correct, or request erasure of your personal data, nominate a contact, and raise a grievance with our Grievance Officer. On account closure we return or securely delete your data, subject to lawful retention needs.

5. What we don't do

• We do not open sealed Vault items or read your stored documents
• We do not sell your personal data
• We do not disclose your identity or stored items without consent, except as required by law