Legal

Privacy policy

Last updated 4 October 2026 · Adapted from sharestation.in

This application is in active development. Features, prices, slots and KYC/payment flows may change without notice, and you may hit bugs, delays or incomplete screens. If something looks wrong, WhatsApp us before you pay or hand over a kit. A software bug does not waive rent, KYC, return of the kit, or replacement charges. Live bookings we confirm are still honoured under the terms below.

This Privacy Policy is adapted from sharestation.in and updated for the ShareStation app (phone login, WhatsApp, KYC uploads, Mappls pin, Razorpay / UPI). It applies when you use this app or www.sharestation.in.

Who we are

Chaturanga E Rental LLP (trade name: ShareStation) (“ShareStation”, “we”) operates console rentals in Hyderabad, Ranga Reddy, Telangana, India. Contact: support@sharestation.in · +91 8520944563 (8 AM – 8 PM IST).

What we collect

Account: mobile number, WhatsApp OTP logs, name, saved addresses, GPS pin and Mappls map coordinates.
Orders: rental dates, slot, product, coupons, payment method, UPI UTR, Razorpay order/payment ids.
Order and KYC submission metadata: submission time and the IP address reported by the request.
KYC: photo ID (front/back), address proof (electricity bill recommended; LPG, water, hotel/Airbnb receipt, rent agreement, etc.), live selfie, device GPS and accuracy. Stored as files, not public URLs.
Ops: pack scans, bag-lock PIN history (staff), QA photos, WhatsApp message bodies we send or receive (including UTR replies).
Device: browser type, crash/error logs, and camera access only when you scan a QR or capture KYC.
Open cart: the console, dates, add-ons and checkout details you type. Kept for 24 hours if you leave before paying. If you are signed in, we may send up to 3 WhatsApp messages about that cart. The first is a short note. If you reply, we send a personal ₹150 code that expires within 6 hours, plus a link to reopen the cart.

Why we use it

Create and secure your account (phone OTP on WhatsApp).
Deliver and pick up kits, prevent rider fraud, and release the bag PIN only after payment.
Verify identity for zero-deposit rentals and auto/staff KYC review (including optional AI document checks).
Review order and KYC submissions, and help investigate suspected abuse or disputes.
Collect rent, issue GST invoices, and detect unpaid or disputed payments.
Message you about the order, KYC, payment and return window. We do not use email for bookings.
Improve the product while it is in development — including diagnosing bugs you report.
Recover an unfinished cart or checkout within 24 hours. Signed-in customers may get up to 3 WhatsApp messages, including a ₹150 code if they reply. The code expires within 6 hours.

Where your data is stored

ShareStation is an Indian business serving Hyderabad customers. The live app database, file storage (KYC photos, invoices) and scheduled jobs run on Convex in AWS EU West (Ireland) — not in India. Convex does not currently offer an India region (Mumbai / Hyderabad).

The Digital Personal Data Protection Act, 2023 does not require all personal data to stay in India. Section 16 allows transfer abroad except to countries the Central Government later blacklists. Ireland / the EU are not on any such list as of this policy date. We still treat you as the Data Principal and ourselves as the Data Fiduciary under DPDP for this processing.

WhatsApp (Meta) and Razorpay also process some data on their own infrastructure, which may be outside India, to send OTPs or take payment. Mappls (India) is used for the delivery pin preview.

If Convex launches an Asia / India region, we intend to migrate there. Until then, using this app means you understand and agree that personal data is hosted in the EU as described above.

Who we share with

Payment processors (Razorpay and UPI apps you open). We never store full card numbers.
Mappls for the still-map pin preview.
Third-party delivery riders — only name, phone, address and slot needed to drop or collect a locked bag. They must not take payment or the PIN.
WhatsApp as the channel for OTPs and order messages.
Cloud backend (Convex) for database, files and scheduled jobs.
We do not sell personal data. We may share with law enforcement if required by Indian law.

KYC, camera and location

KYC documents and the live selfie are used only to decide whether we can pack and deliver. Staff (and, if enabled, automated review) can see them. We do not publish them.

Location is captured so we can confirm the drop is in Hyderabad service area and geotag KYC. You can refuse GPS; we may then hold or cancel the order.

Retention

Order, invoice and tax records: as required under GST and Indian tax law (typically 8 years).
Order and KYC submission IP metadata: retained with the related order or KYC record.
KYC files: while you have an open rental or unpaid balance, then a limited archive for fraud review.
WhatsApp OTP and failed-login traces: short-lived.
You can ask us to delete an unused account; we keep what the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023 and applicable IT rules, you may request access, correction or erasure of personal data, and withdraw consent for optional processing (for example marketing). Write to support@sharestation.in from your registered WhatsApp number. We may need to verify you first.

High-confidence KYC may be auto-approved by software. That is an automated decision that affects whether we pack. You can ask a human to review it. We may still refuse the rental if identity is not satisfactory.

Cookies, device storage & grievance

The app stores a cart, checkout draft and date range in your browser (localStorage), and keeps a copy of an open cart on our servers for 24 hours. On customer pages we run the Meta Pixel, and our server sends the same events to Meta, to measure ads: page views, product views, search, add to cart, wishlist, dates chosen, delivery pin, checkout, payment choice, account creation, WhatsApp contact, and orders. Phone and email are hashed before Meta receives them. On those same customer pages we also run the ChatGPT ads pixel. Adding a console to the cart is sent as Checkout Started, from the browser and from our server, so ChatGPT can measure that ad. Google Analytics on customer pages records product views, add to cart, checkout start, payment choice, and purchases, in rupees. These shopping events are not sent from the staff dashboard.
Grievance Officer: Amanchi Saikiran (Grievance Officer). support@sharestation.in · +91 8520944563. We aim to acknowledge in 48 hours and close ordinary complaints in 15 days (Consumer Protection / e-commerce practice).

Security & children

We use access-controlled staff roles, hashed tickets for the WhatsApp bridge, and unguessable payment/invoice links. No system is perfectly secure — especially while this app is in development.

The service is for people 18+. Minors may play on a rented kit; the contracting customer must be 18+ (or a parent/guardian renting for them), as on sharestation.in.

Changes

We may update this policy as the app ships new features. The date at the top will change. Continued use after an update means you accept the new policy.