Privacy Policy

VLocus is a multi-tenant fleet management and logistics platform. Independent customer organisations use separate accounts or workspaces.

For operational information submitted by a customer organisation, that organisation may determine why and how the information is processed. AGILTAS processes such information on its lawful documented instructions, subject to applicable law and contractual arrangements.

AGILTAS may separately determine the purposes of processing information for website enquiries, account administration, billing, security and its own legal obligations.

Customer organisations are responsible for providing required notices, obtaining consent or other authorisation where required, and managing their users’ access appropriately.

Information may be collected:

• Directly from you through forms, registration, support requests or application use.
• From customer organisations and their authorised users.
• Through authorised GPS devices, mobile applications and connected systems.
• Through customer-authorised imports, APIs and integrations.
• From authorised verification or other service providers.
• Through cookies, logs and similar technologies, where used.

We process information, as applicable, to:

We will not use personal information for materially unrelated purposes without an appropriate lawful basis and any required notice or permission.

Where enabled and authorised, location information may be collected through the driver application, GPS hardware or integrated services.

Location processing may support trip monitoring, estimated arrival times, route planning, geofencing and delivery confirmation.

Actual tracking behaviour depends on the configured service, device permissions and operational settings.

You may manage device permissions through your device settings. Restricting permissions may prevent certain features from functioning. Revoking an application permission does not necessarily stop tracking through separately installed vehicle hardware.

Route planning may process delivery addresses, stop priorities, time windows, vehicle capacity, driver availability, location and traffic information.

The Platform may use this information to generate route recommendations, assignments, estimates and operational reports.

These outputs support operational decisions and may be reviewed or adjusted by authorised users where the feature permits.

Where enabled, verification workflows may process driving licences, vehicle registration information, permits, insurance, fitness documents and related results.

Checks may use customer-supplied records or authorised third-party services. A verification result does not imply government endorsement or access to a government database unless an authorised verification method was actually used.

Aadhaar information, biometric information or other specially regulated data must not be submitted unless the processing is lawful, necessary and supported by an appropriate workflow and safeguards.

Digital proof-of-delivery records may contain recipient details, shipment references, delivery status, OTP verification results, signatures, photographs, timestamps and location metadata.

These records support delivery administration, reconciliation, audits and dispute handling.

Access to delivery evidence must be restricted to authorised users and relevant parties. OTPs must be protected and retained only as necessary for the authentication process and applicable security requirements.

Information may be disclosed, where necessary and lawful, to:

Service providers should receive only information necessary for their functions and be subject to appropriate contractual restrictions.

The website and applications may use cookies, session identifiers and related technologies for authentication, preferences, security and service operation.

Where analytics or other optional tracking technologies are used, their purposes and available choices will be disclosed. Consent will be obtained where required.

Browser settings may allow you to restrict cookies. Disabling necessary cookies may affect login or other essential functions.

We may send account, security, billing, support and operational communications relevant to the services.

Delivery notifications may be sent through enabled channels such as SMS, email, push notifications or WhatsApp, depending on customer configuration and applicable permissions.

Where promotional communications are sent, applicable consent and opt-out requirements will be followed. Opting out of marketing does not prevent essential service or security messages.

Personal information is retained only for as long as reasonably necessary for its disclosed purpose, applicable customer instructions, contractual commitments and legal obligations.

Different retention periods may apply to location history, identity documents, delivery evidence, account records, billing information and security logs.

When information is no longer required, it will be deleted or anonymised as appropriate, subject to legal retention, preservation requirements and routine backup cycles.

Closing an account does not necessarily delete every record immediately. Customer agreements should specify export windows, deletion periods and treatment of backups.

We maintain safeguards appropriate to the nature of the information and the risks of processing.

Depending on the implemented service, safeguards may include authentication, role-based access, tenant separation, secure transmission, protected storage, audit logging, backups and incident-response procedures.

Personnel access is limited according to authorised support, operational, security and compliance needs.

Customers must protect credentials, configure permissions appropriately and promptly remove unnecessary access.

Personal information may be processed by AGILTAS and its service providers in the locations used to operate and support the Platform.

Where information is transferred or accessed outside India, relevant legal restrictions and contractual requirements will be considered and appropriate safeguards applied.

Depending on applicable law, its commencement and our role in the processing, you may have rights concerning access, correction, erasure, withdrawal of consent, grievance redressal or nomination.

Contact support@vlocus.in to submit a request. We may request proportionate information to verify your identity and authority.

Where a customer organisation determines the purposes of processing, we may direct your request to that organisation or assist it in responding.

Withdrawal of consent, where consent is the applicable basis, does not invalidate earlier lawful processing. Some information may need to be retained to meet legal obligations or establish, exercise or defend legal claims.

VLocus is intended for business logistics operations and is not designed for use by children.

Customer organisations must not submit children’s information unless the processing is lawful and required notices, permissions and safeguards are in place.

If you believe a child’s information has been submitted improperly, please contact us immediately.

We maintain procedures to assess, investigate, contain and respond to suspected personal data incidents.

Affected customer organisations, individuals and authorities will be notified where and as required by applicable law and contractual obligations.

The Platform may contain links to external websites or connect with third-party applications.

Their handling of information may be governed by their own privacy notices. Review those notices before submitting information directly to them.

This does not remove AGILTAS’s responsibilities for service providers processing information on its behalf.

We may update this Policy to reflect changes in the services, processing practices or applicable law.

The revised version will display an updated date. Additional notice or consent will be provided where required.

This Policy is interpreted in accordance with applicable Indian law, including relevant provisions of the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 and associated rules, to the extent in force and applicable to the processing concerned.

Nothing in this Policy excludes rights or obligations that cannot lawfully be excluded.