AdOnAuto is committed to handling personal data lawfully, fairly and transparently. This Data Protection & Compliance statement supplements our Privacy Policy, which describes in detail what data we collect and why. In case of any conflict, the Privacy Policy governs what data is collected; this statement describes the legal framework and your rights.
1. Who is responsible for your data
The AdOnAuto Services are operated by BCreations, a company incorporated in India with its registered office at 13-15-1/1, Dibbalapalem, Maharanipeta, Visakhapatnam, Andhra Pradesh 530002, India. BCreations acts as the Data Fiduciary (under India’s Digital Personal Data Protection Act, 2023) and Data Controller (under the GDPR, where applicable) for personal data processed through the Services. Our service providers — including hosting, push-notification, authentication, payment and payout providers — act as Data Processors on our behalf under contractual safeguards.
2. Legal bases for processing
We process personal data only where we have a lawful basis to do so:
- Consent: for example, when you sign in with Google or enable location for driver shifts. Consent can be withdrawn at any time.
- Performance of a contract: to operate your account, run campaigns, track shifts and process payments and payouts.
- Legal obligation: to meet tax, accounting and regulatory requirements.
- Legitimate interests / legitimate use: to keep the Services secure and prevent fraud, balanced against your rights.
3. Principles we follow
- Purpose limitation — data is used only for the purposes described to you.
- Data minimisation — we collect only what is necessary (e.g. only basic Google scopes: openid, email, profile).
- Accuracy — you can review and correct your information.
- Storage limitation — we keep data only as long as needed (see Section 6).
- Integrity & confidentiality — we apply appropriate security safeguards.
- Accountability — we maintain records and processes to demonstrate compliance.
4. Your rights
Subject to applicable law, you have the right to access, correct, update and erase your personal data, to withdraw consent, to nominate (under the DPDP Act) and, where the GDPR applies, to data portability and to object to or restrict certain processing. To exercise these rights, contact our Grievance Officer (Section 9) or email info@bcreations.in. You can delete your account at any time via the Account & Data Deletion page.
5. Security measures
We use reasonable technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), hashing of passwords, scoped access tokens, role-based access controls and audit logging of sensitive actions. We periodically review these safeguards.
6. Data retention
We retain personal data for the periods set out in the Data Retention table in our Privacy Policy (Section 5), and thereafter only as required for legal, tax, accounting, dispute-resolution and fraud-prevention purposes. When data is no longer required, it is deleted or anonymised. You can request deletion at any time — see our Account & Data Deletion page.
7. International data transfers
AdOnAuto operates from India and primarily processes data in India. Where data is processed by service providers located in other countries, we take steps to ensure an adequate level of protection through appropriate contractual and technical safeguards. The DPDP Act permits transfers except to territories restricted by the Government of India.
8. Personal data breach
We maintain procedures to detect, assess and respond to personal data breaches. Where a breach is likely to result in risk to affected individuals, we will notify the relevant Data Protection Board / supervisory authority and affected users as required by applicable law and without undue delay.
9. Grievance Officer & contact
In accordance with India’s Information Technology Act and Rules and the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer for any complaint regarding the processing of your personal data:
- Grievance Officer: Raju Teppala
- Email: info@bcreations.in
- Phone: +91 89776 03054 / +91 79891 54870
- Postal address: BCreations, 13-15-1/1, Dibbalapalem, Maharanipeta, Visakhapatnam, Andhra Pradesh 530002, India
We will acknowledge complaints within 48 hours and aim to resolve them within 30 days, in line with the timelines prescribed by applicable law. You also have the right to lodge a complaint with the Data Protection Board of India, or with your local supervisory authority where the GDPR applies.
10. Children’s data
The Services are intended for users aged 18 and over. We do not knowingly process the personal data of children. If you believe a child has provided us data, contact us and we will delete it.
11. Updates
We may update this statement to reflect changes in law or our practices. The current version is always available on this page with the “Last updated” date shown above.