This policy explains what personal data the HD Agent app collects, why, who we share it with, and the choices you have. It applies to the HD Agent Android app (package com.highwaydelite.agent) and the services it connects to.
HD Agent is operated by Param People Infotech Solutions Private Limited, doing business as Highway Delite ("Highway Delite", "we", "us"), Nasscom Startup Warehouse, 29/A, 27th Main Rd, Sector 5, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102, India. The app is for registered Highway Delite agents who issue and service FASTags, recharge FASTags and NCMC cards, and pay bills through BBPS on behalf of customers.
This policy supplements the Highway Delite privacy policy, which covers our customer app and website. Where the two differ for the HD Agent app, this policy applies.
This policy covers two groups of people: agents who sign in to the app, and customers whose details an agent enters to get a service. By using the app, agents agree to this policy and confirm they have the customer's consent to collect their details.
We collect only what we need to register agents and deliver the services customers ask for.
Category
Whose
Examples
Source
Account and identity
Agent
Name, mobile number, email, agent ID, referral code, Aadhaar and PAN details, photos of ID documents
Entered by the agent at registration
Customer KYC
Customer
Name, mobile number, date of birth, Aadhaar, PAN or other officially valid document, document photos
Entered or photographed by the agent
Vehicle and FASTag
Customer
Vehicle registration number, chassis and engine number, RC photos, vehicle class, FASTag barcode, tag status
Entered or photographed by the agent, or fetched from vehicle registries
Payments and transactions
Agent and customer
Recharge and bill amounts, BBPS biller details, transaction IDs, payment status, wallet and sales records
Created when a service is used
Location
Agent
Approximate or precise location at the time of a FASTag issuance, activation or payment
The device, with permission
Device and usage
Agent
Device model, OS version, app version, screens and features used, crash logs
Collected automatically
We do not collect contacts, SMS messages, call logs or microphone audio. We do not sell personal data or use it for third-party advertising.
The app asks for each permission only when a feature needs it. You can turn any of them off in your device settings; the feature that needs it will then stop working.
Permission
Why we ask
Camera
Photograph ID documents, vehicle RCs, vehicles and FASTag barcodes during KYC and tag issuance
Photos and media
Pick an existing document photo, and save statements or receipts to your gallery
Location
Record where a FASTag is issued or activated, and where a payment is made, as required by our partner banks
Internet
Connect to Highway Delite and partner services
The app also checks which UPI payment apps are installed on the device, so it can offer them when you pay. It does not read data from those apps.
We use personal data to:
Register agents, verify their identity and sign them in with a one-time password (OTP)
Complete customer KYC and vehicle verification required by the issuing bank and NPCI
Issue, activate, replace, transfer and close FASTags, and update KYC or vehicle details
Process FASTag and NCMC recharges and BBPS bill payments, and show transaction history and statements
Calculate agent sales, commissions and wallet balances
Prevent fraud, meet legal and regulatory obligations, and respond to lawful requests
Fix crashes and improve the app, using analytics tied to the agent ID
Send service messages, such as OTPs and transaction updates
We process data on the basis of consent, and where needed to provide a service you asked for or to meet a legal obligation.
We share personal data only with the parties needed to deliver a service, and only what each one needs.
Recipient
What they receive
Why
FASTag issuers: Axis Bank, Bajaj Finance, ICICI Bank, IDBI Bank, IDFC FIRST Bank, IndusInd Bank, Kotak Mahindra Bank
Customer KYC, vehicle details, location at issuance, tag and payment details
To issue and service the FASTag the customer chose
NPCI and BBPS billers and operating units
Biller, account and payment details
To process recharges and bill payments
Payment gateways: Razorpay, CCAvenue, and UPI apps
Payment amount, reference and payment instrument details
To collect payments. Card and bank details are handled by the gateway; we do not store them
Parivahan (VAHAN) vehicle services
Vehicle registration number and RC images
To verify vehicle details and read RC documents
Google Firebase (Analytics, Crashlytics, Remote Config)
Agent ID, device and usage data, crash logs
To run, monitor and improve the app (Google Privacy & Terms)
WhatsApp (for ICICI transaction statements)
Only what the agent chooses to send
Opens WhatsApp when the agent requests a statement
A buyer or successor business
The data we hold
If Highway Delite is merged, acquired or sells assets
Authorities and courts
As legally required
To comply with law, regulation or a lawful order
These parties handle data under their own privacy policies and our agreements with them.
We keep personal data for as long as the agent account is active, and after that only as long as the law requires. KYC and transaction records are kept for 5 years after the relationship or transaction ends, as required by the Prevention of Money Laundering Act and RBI rules. When we no longer need data, we delete or anonymise it. Data in backups that cannot be deleted right away is isolated from further use until it can be.
Data is sent over encrypted HTTPS connections. Sign-in tokens are stored in the device's secure storage (Android Keystore). Access to personal data inside Highway Delite is limited to staff who need it. No system is completely secure; if a breach affects your data, we will notify you and the Data Protection Board of India as the law requires.
Under India's Digital Personal Data Protection Act, 2023, you can:
Ask what personal data we hold about you and who we have shared it with
Ask us to correct, complete or update your data
Withdraw consent, and ask us to delete your data where we are not required by law to keep it
Nominate someone to exercise these rights if you die or become unable to
Raise a complaint with our Grievance Officer, and then with the Data Protection Board of India
Reviewing, updating or deleting your data: visit support.highwaydelite.com or email compliance@highwaydelite.com with your registered mobile number. When an agent asks us to delete their account, we deactivate it and delete their data from our active systems within 30 days. We keep only the records the law requires, or that we need to prevent fraud or resolve disputes.
Grievance Officer: Rajesh G, Param People Infotech Solutions Private Limited, compliance@highwaydelite.com. We acknowledge complaints within 48 hours and resolve them within 30 days.
The app is for adult agents only and is not meant for anyone under 18.
We may update this policy. We will post the new version here with a new date, and tell agents in the app about significant changes.
Questions about this policy: email compliance@highwaydelite.com, or write to Param People Infotech Solutions Private Limited, Nasscom Startup Warehouse, 29/A, 27th Main Rd, Sector 5, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102, India.