Legal

Data Deletion

How to ask JBS Adventures LLP to delete the personal data we hold about you — and what we are required to keep under India's Goods and Services Tax law.

Last updated: 17 May 2026  ·  Effective date: 17 May 2026

You have the right to ask JBS Adventures LLP (“JBS Adventures”, “we”, “us”, “our”) to delete the personal data we hold about you. This page explains exactly how, what we delete, what we are legally required to keep, and how long the whole process takes. It is published in addition to our Privacy Policy and operates under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

1. How to make the request

Send an email to cs@jbsadventures.com with the subject line “Data deletion request”. Include:

  • The mobile number you used when booking with us (so we can find your records)
  • Your full name as you remember giving it
  • A one-line statement that you want your data deleted

Sample email body:

To: cs@jbsadventures.com
Subject: Data deletion request

My mobile is +91 98XXX XXXXX. My name is <your name>. Please delete my personal data from JBS Adventures records.

2. How long we take

We acknowledge every request within 3 business days and complete the deletion within 7 business days of the original email reaching us. We may ask one verification question first — for example, the date of your last booking or a reply from your WhatsApp number — to make sure the request actually came from you and not a third party impersonating you.

3. What data we hold about you

If you have ever booked a cab with us, used our WhatsApp Business service, or interacted with our drivers, we may hold:

  • Your mobile number and name
  • Pickup and drop addresses you gave us, including saved “home” / “office” locations
  • Past booking records (date, time, vehicle assigned, amount, driver)
  • WhatsApp message history with our service number +91 83605 22645
  • Billing details (company name, GSTIN, billing address, pincode) if you provided them for invoicing
  • Aggregate ride and spend totals across your account
  • Any notes our staff wrote about your preferences, accessibility needs, or VIP status

4. What gets deleted on a verified request

On a verified deletion request, we scrub:

  • Your name, mobile number, alternative phones, and any free-text notes from our customer record
  • Your name and phone from every past booking row (the booking itself stays as a numeric record so our daily reports are not broken; only the identifying fields are scrubbed)
  • WhatsApp message content between you and our service number — the row stays as a delivery log, but the message text is replaced with a redaction tag
  • Any saved billing details, GSTIN, addresses, pincodes, GST state
  • Any internal notes, tags, or VIP flags associated with you

The deletion is logged in our internal audit register so that, if a regulator ever asks, we can prove what was deleted, when, and by which staff member.

5. What we are legally required to keep

Under Rule 56 of the Central Goods and Services Tax Rules, 2017 (read with Section 35 of the CGST Act, 2017), a GST-registered business is required to retain its tax invoices, credit notes, debit notes, and related records for a minimum of six (6) years from the due date of furnishing the annual return for the financial year in which the document was issued. In practice this means:

  • Tax invoices issued to you are not deleted on request. They contain the bill-to name, address, and GSTIN as at the time of issue, and form part of our statutory tax record.
  • The link between you and those invoices is severed — they no longer appear on your active customer profile — but the invoice document itself is preserved.
  • After the 6-year retention period elapses, those tax records are removed in our next scheduled purge cycle.

This retention is strictly limited to what tax law requires and is not used for marketing, profiling, or any other purpose.

6. Third parties we share data with

To operate the WhatsApp booking service we rely on:

  • Meta Platforms (WhatsApp Business Cloud API) — to deliver messages to and from our service number. To request deletion of data from Meta directly, see facebook.com/help/contact/507739850846588.
  • Anthropic (Claude API) — for parsing booking text into structured fields. Anthropic does not train its models on customer messages routed through the JBS service.
  • Google Maps Platform (Geocoding API) — to resolve pickup and drop addresses into map coordinates.
  • Uber and Rapido — only for rides taken via those aggregators. Those companies maintain their own copies of your ride history under their own privacy policies.

When you ask us to delete, we do not delete on these third parties' behalf — they each have their own deletion processes. Links above. If you'd like help finding the right page on any of them, write to cs@jbsadventures.com and we will point you to it.

7. If your request is rejected

We will only reject a deletion request if (a) we cannot verify that the request came from the actual data subject, (b) the data is required to defend an ongoing legal claim or to comply with a regulatory order, or (c) the only data we hold falls entirely within the GST retention window described in Section 5. We will explain the reason in our reply, and you have the right to escalate to the Data Protection Board of India under the DPDP Act, 2023.

8. Questions before deciding

If you would like to see exactly what data we hold about you before deciding whether to delete it, write to the same address with subject line “Data access request” and we will send you a one-page summary within 7 business days. This is your right under Section 11 of the DPDP Act.

9. Contact us

For data deletion, data access, or any privacy question: