Legal
Privacy policy
Last updated 18 August 2026 (full hire terms + 100% new replacement) · Adapted from sharestation.in
This Privacy Policy is adapted from sharestation.in and updated for the ShareStation app (phone login, WhatsApp, KYC uploads, Mappls pin, Razorpay / UPI). It applies when you use this app or www.sharestation.in.
Who we are
Chaturanga E Rental LLP (trade name: ShareStation) (“ShareStation”, “we”) operates console rentals in Hyderabad, Ranga Reddy, Telangana, India. Contact: support@sharestation.in · +91 8520944563 (8 AM – 8 PM IST).
What we collect
- Account: mobile number, WhatsApp OTP logs, name, saved addresses, GPS pin and Mappls map coordinates.
- Orders: rental dates, slot, product, StationCover opt-in, coupons, payment method, UPI UTR, Razorpay order/payment ids.
- KYC: PAN, photo ID (front/back), electricity bill (photo or PDF), live selfie, device GPS and accuracy. Stored as files, not public URLs.
- Ops: pack scans, bag-lock PIN history (staff), QA photos, WhatsApp message bodies we send or receive (including UTR replies).
- Device: browser type, crash/error logs, and camera access only when you scan a QR or capture KYC.
Why we use it
- Create and secure your account (phone OTP on WhatsApp).
- Deliver and pick up kits, prevent rider fraud, and release the bag PIN only after payment.
- Verify identity for zero-deposit rentals and auto/staff KYC review (including optional AI document checks).
- Collect rent, issue GST invoices, and detect unpaid or disputed payments.
- Message you about the order, KYC, payment and return window. We do not use email for bookings.
- Improve the product while it is in development — including diagnosing bugs you report.
Where your data is stored
ShareStation is an Indian business serving Hyderabad customers. The live app database, file storage (KYC photos, invoices) and scheduled jobs run on Convex in AWS EU West (Ireland) — not in India. Convex does not currently offer an India region (Mumbai / Hyderabad).
The Digital Personal Data Protection Act, 2023 does not require all personal data to stay in India. Section 16 allows transfer abroad except to countries the Central Government later blacklists. Ireland / the EU are not on any such list as of this policy date. We still treat you as the Data Principal and ourselves as the Data Fiduciary under DPDP for this processing.
WhatsApp (Meta) and Razorpay also process some data on their own infrastructure, which may be outside India, to send OTPs or take payment. Mappls (India) is used for the delivery pin preview.
If Convex launches an Asia / India region, we intend to migrate there. Until then, using this app means you understand and agree that personal data is hosted in the EU as described above.
Who we share with
- Payment processors (Razorpay and UPI apps you open). We never store full card numbers.
- Mappls for the still-map pin preview.
- Third-party delivery riders — only name, phone, address and slot needed to drop or collect a locked bag. They must not take payment or the PIN.
- WhatsApp as the channel for OTPs and order messages.
- Cloud backend (Convex) for database, files and scheduled jobs.
- We do not sell personal data. We may share with law enforcement if required by Indian law.
KYC, camera and location
KYC documents and the live selfie are used only to decide whether we can pack and deliver. Staff (and, if enabled, automated review) can see them. We do not publish them.
Location is captured so we can confirm the drop is in Hyderabad service area and geotag KYC. You can refuse GPS; we may then hold or cancel the order.
Retention
- Order, invoice and tax records: as required under GST and Indian tax law (typically 8 years).
- KYC files: while you have an open rental or unpaid balance, then a limited archive for fraud review.
- WhatsApp OTP and failed-login traces: short-lived.
- You can ask us to delete an unused account; we keep what the law requires.
Your rights
Under the Digital Personal Data Protection Act, 2023 and applicable IT rules, you may request access, correction or erasure of personal data, and withdraw consent for optional processing (for example marketing). Write to support@sharestation.in from your registered WhatsApp number. We may need to verify you first.
High-confidence KYC may be auto-approved by software. That is an automated decision that affects whether we pack. You can ask a human to review it. We may still refuse the rental if identity is not satisfactory.
Cookies, device storage & grievance
- The app stores a cart, checkout draft and date range in your browser (localStorage). We do not run third-party ad pixels for this app.
- Grievance Officer: Amanchi Saikiran (Grievance Officer). support@sharestation.in · +91 8520944563. We aim to acknowledge in 48 hours and close ordinary complaints in 15 days (Consumer Protection / e-commerce practice).
Security & children
We use access-controlled staff roles, hashed tickets for the WhatsApp bridge, and unguessable payment/invoice links. No system is perfectly secure — especially while this app is in development.
The service is for people 18+. Minors may play on a rented kit; the contracting customer must be 18+ (or a parent/guardian renting for them), as on sharestation.in.
Changes
We may update this policy as the app ships new features. The date at the top will change. Continued use after an update means you accept the new policy.