Privacy Policy

This Privacy Policy explains how Tenlly (operated by TENLLY PRIVATE LIMITED, "Tenlly", "we", "us", "our") collects, uses, shares and protects your personal data when you use the Tenlly customer app, the Tenlly delivery partner app, our website, or any related services (together, the "Services"). It applies to customers and to delivery partners. By using the Services you consent to the practices described here.

We handle personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under them.

1. Information we collect

From all users

• Account details: your mobile number (required, verified by one-time password), and the name, email address, date of birth and gender you choose to add to your profile.
• Login data: one-time passwords (OTPs), which expire within 5 minutes and are never used again. We do not use passwords.
• Device and technical data: the push-notification token for your device, basic device and app-version information, and server logs (including IP address) generated when you use the Services.
• Crash reports: if the app or server encounters an error, a technical report is sent to our error-monitoring service (Sentry). We configure it to exclude personal identifiers.

From customers

• Addresses and location: delivery addresses you save, including GPS coordinates, and your device's location when you choose "use current location". The customer app accesses location only while you are using it — never in the background.
• Orders and payments: your order history, items, amounts, payment method, and payment references from our payment gateway. We never see or store your card number, UPI PIN or banking credentials — these go directly to Razorpay.
• Wallet and referrals: your wallet balance and transactions, your referral code, and which accounts you referred.
• Preferences and feedback: wishlist items, ratings you give, coupons you use.
• Support conversations: messages and photo attachments you send to customer support.

From delivery partners

• KYC and payout details: Aadhaar number, driving licence number, bank account number, IFSC and bank name, and a profile photo. These are collected to verify identity and pay earnings, as required for onboarding.
• Live location: GPS location while you are marked available or are on a delivery, used to assign orders and show delivery progress to the customer.
• Work records: deliveries completed, earnings, and customer ratings.

2. How we use your information

• To register and authenticate your account (OTP by SMS).
• To take, prepare and deliver your orders, and to process payments and refunds.
• To send order-status updates by push notification, SMS or WhatsApp.
• To connect calls between you and your delivery partner without revealing either phone number (masked calling).
• To operate the wallet, referral programme, coupons and offers.
• To respond to support requests and resolve complaints.
• To detect and prevent fraud and misuse (for example, referral abuse).
• To maintain, debug and improve the Services.
• To comply with legal obligations, including tax and accounting rules.

3. How we share your information

We share personal data with service providers who process it on our behalf, only to the extent needed for their function:

Provider	Purpose
Razorpay	Payment processing and refunds
MSG91	OTP SMS and order updates by SMS/WhatsApp
Google (Maps Platform, Firebase)	Address search and maps; push notifications
Exotel	Masked calls between customers and delivery partners
Sentry	Crash and error monitoring (configured to exclude personal identifiers)
Cloud hosting and storage providers (e.g. Railway, Cloudflare)	Running our servers, database and image storage

We may also disclose personal data where required by law, court order or a government authority, or to protect the rights, safety or property of Tenlly, our users or the public.

We do not sell or rent your personal data, and we do not share it with third parties for their advertising.

4. Where your data is stored, and security

• Data is stored on reputable cloud infrastructure. Some of our providers may store or process data outside India; where they do, we rely on the transfers being permitted under applicable Indian law.
• All traffic between the apps and our servers is encrypted (HTTPS/TLS).
• OTPs are short-lived and single-use; we do not store passwords.
• Access to personal data is restricted to authorised personnel, and admin access is separately authenticated.
• No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you and the authorities as required by law.

5. How long we keep your data

• Account and profile data: for as long as your account is active.
• Order, payment and invoice records: for the periods required by tax, accounting and consumer-protection law, even after account deletion.
• OTPs: minutes; support conversations: as long as needed to resolve and audit complaints.

6. Your rights

Under Indian law, including the Digital Personal Data Protection Act, 2023, you may:

• Access a summary of the personal data we hold about you.
• Correct your profile details at any time in the app (Account → Edit Profile), and add or delete saved addresses.
• Delete your account — request this from the app's support section or by emailing hello@tenlly.in. We will delete or anonymise your personal data except records we must keep by law.
• Withdraw consent — you may disable push notifications in your device settings; note that core communications (OTP, order status) are needed to provide the service.
• Nominate another person to exercise these rights on your behalf as provided by law.
• Complain — first to our Grievance Officer (below), and if unresolved, to the Data Protection Board of India.

7. Location data, in short

• Customers: location is used only in the foreground, to set or confirm a delivery address and check serviceability. We do not track customers in the background.
• Delivery partners: location is tracked while you are marked available or on a delivery — this is essential to the job. It is not tracked when you are offline.

8. Children

The Services are intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

9. The web app

Our web app stores your login session and preferences locally in your browser. We do not use third-party advertising or cross-site tracking cookies.

10. Third-party policies

Payments are processed by Razorpay under its own privacy policy. Google services used in the app are covered by the Google Privacy Policy.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the current version, and we will notify you of significant changes in the app. Continued use of the Services after a change means you accept the updated policy.

12. Contact & Grievance Officer