For Driver Partners and Mechanic Partners

OBCREW PRIVACY POLICY

In Association With Obrive Industries Private Limited

Effective Date: Oct, 1 2026

Last Updated: Oct, 1 2026

This Privacy Policy explains how Obrive Industries Private Limited (“Obrive”, “Company”, “we”, “our”, or “us”) collects, uses, shares, stores, retains, and protects personal information when you register for, access, or use the OBCREW mobile application and related services (collectively, the “Platform”). OBCREW is intended for Driver Partners and Mechanic Partners who use the Platform to onboard, complete verification, receive or manage service opportunities, manage bookings/jobs, communicate with customers or the Company, track work and earnings, and access partner support and related services.

Scope of This Policy

This Policy applies to information collected through the OBCREW mobile application, partner onboarding and verification flows, associated websites or web interfaces, customer/partner support channels, communications, and other services operated by or on behalf of OBCREW. This Policy is specifically designed for Driver Partners and Mechanic Partners. Where a separate policy applies to customers, parking users, merchants, or other users of Obrive/OBPARK services, that policy may apply to those users.

Our Privacy Commitment

We aim to collect and process only information that is reasonably necessary to operate OBCREW, verify and manage partner accounts, facilitate bookings and service jobs, process earnings and payments, protect users and the Platform, provide support, comply with legal obligations, and improve our services. We seek to process personal data lawfully, fairly, transparently, and with appropriate security safeguards.

Applicable Laws

This Policy is prepared with reference to applicable Indian laws and regulations, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, applicable rules relating to information security and personal data, consumer and payment-related requirements where relevant, and other laws applicable to the services. The exact rights, obligations, retention requirements, and processing rules may depend on the law applicable to the relevant processing activity.

Information We Collect

Depending on whether you register as a Driver Partner or Mechanic Partner and which OBCREW features you use, we may collect the following categories of information:

Personal and Contact Information

• Full name
• Date of birth, where required for verification or legal compliance
• Mobile number
• Email address
• Residential or correspondence address
• Profile photograph
• Gender, where voluntarily provided or legally required
• Emergency/contact information where required for safety or operational purposes

Identity and Verification Information

For partner onboarding and verification, we may collect and verify documents and information such as:

• Government-issued identity documents
• Address or identity verification information
• Partner photographs or selfies where used for verification
• Driver-specific licence and eligibility information
• Mechanic-specific trade, qualification, certification, or experience information
• Documents required to establish eligibility to provide services
• Verification status, review results, and related records You should provide only genuine, accurate, current, and lawfully obtained information. Where third-party verification providers are used, their processing may also be subject to their applicable privacy terms.

Driver Partner Information

For Driver Partners, we may collect information relating to:

• Driving licence and licence validity/status
• Vehicle registration number and vehicle details
• Vehicle type, model, make, fuel type, and other service-relevant information
• Vehicle photographs or documents where required
• Insurance or other legally required vehicle documents
• Service area and operating preferences
• Trip, booking, route, pickup and drop-off information
• Partner availability/online status
• Ratings, feedback, complaints, cancellations, and service history
• Earnings, incentives, deductions, commissions, and payout records

Mechanic Partner Information

For Mechanic Partners, we may collect information relating to:

• Trade or professional category
• Skills, specialties, qualifications, certifications, and experience
• Workshop/business information, where applicable
• Service location and operating/service area
• Service categories offered, such as general service, diagnostics, repairs, AC service, tyres, battery assistance, or other automotive services
• Work orders, job history, customer requests, estimates, service records, ratings, and feedback
• Earnings, commissions, incentives, deductions, invoices, and payout records
• Documents submitted for onboarding and verification

Booking, Job and Service Information

We may collect information needed to create, allocate, manage, and complete bookings or service jobs, including:

• Booking/job ID
• Service type
• Date and time
• Pickup, drop-off, service, or workshop location
• Customer or service request details necessary to fulfil the job
• Job status and timestamps
• Trip/service history
• Cancellation and dispute information
• Communications and notes associated with a booking or job
• Proof of completion or service-related records where applicable

Location Information

OBCREW may use location information, subject to device permissions and applicable law, to:

• Match Driver Partners with relevant bookings
• Facilitate pickup, drop-off, route and navigation functions
• Show or manage service areas
• Support job allocation and operational coordination
• Provide location-based assistance and safety features
• Verify or record relevant trip/service events where necessary

Location collection may occur while relevant features are being used and, where the operating system and applicable law permit, may involve background location for essential partner functionality. You can manage location permissions through your device settings, but disabling them may prevent or limit certain OBCREW features.

Device and Technical Information

We may automatically collect:

• Device model and operating system
• App version
• IP address
• Device identifiers or installation identifiers
• Network and connectivity information
• Time zone and language settings
• Crash logs and diagnostic information
• App performance and security information
• Login and access timestamps
• Authentication and session information

Camera, Photos and Files

Where you grant permission, OBCREW may access the camera, photo library, files, or document picker to allow you to:

• Upload identity and verification documents
• Upload vehicle, workshop, equipment, or service-related images
• Capture profile photographs
• Submit proof of work or service
• Scan QR codes or other codes where a feature requires it

Camera or media access is not intended to occur without the relevant device permission. You can manage these permissions through your device settings.

Payment and Financial Information

Where partner earnings or payouts are supported, we may process information such as:

• Bank account or payout details
• Account holder name
• Transaction IDs
• Payment/payout status
• Invoice and settlement information
• Commission, incentive, deduction, refund, or adjustment records

Where payment processing is performed by an authorized payment provider, the provider may process payment information under its own terms and security requirements. OBCREW does not intend to store full card numbers, CVV values, UPI PINs, or internet banking passwords on its own servers.

Communications and Support

When you contact us or use support features, we may collect:

• Support requests
• Complaints and dispute details
• Chat messages
• Emails and other communications
• Call records or recordings where legally permitted and appropriately disclosed
• Feedback, ratings, survey responses, and service reviews
• Documents or evidence submitted in connection with a complaint or dispute

Information We Receive From Third Parties

We may receive relevant information from trusted third parties, where permitted by law, including identity verification providers, payment and banking partners, insurance or vehicle-service partners, customers or business clients, technology/service providers, government-authorized sources, and fraud-prevention or security providers. We use such information only for legitimate purposes connected with operating OBCREW, verification, service delivery, safety, compliance, or protection of the Platform. 6. How We Use Your Information We may use personal information to:

• Create, verify, authenticate, and manage partner accounts
• Assess eligibility and complete onboarding
• Match drivers or mechanics with bookings and service requests
• Manage availability, jobs, trips, and service operations
• Provide navigation and location-based functionality
• Facilitate communication between relevant parties
• Process earnings, incentives, commissions, invoices, and payouts
• Provide customer and partner support
• Maintain service quality, ratings, and feedback systems
• Prevent fraud, abuse, impersonation, and unauthorized activity
• Investigate complaints, disputes, accidents, incidents, and policy violations
• Maintain Platform security and reliability
• Improve application performance and develop new features
• Conduct analytics, reporting, and operational planning
• Send service, account, booking, security, and administrative notifications
• Meet tax, accounting, legal, regulatory, and law-enforcement requirements
• Enforce agreements, policies, and contractual rights
• Protect the rights, property, safety, and security of Obrive, partners, customers, and other users

Legal Bases / Grounds for Processing

Depending on the applicable law and the nature of the processing, we may process personal data because:

• It is necessary to provide or administer the services you request or your partner relationship with us
• You have provided consent where consent is required
• Processing is necessary to comply with a legal or regulatory obligation
• Processing is necessary for legitimate business, security, fraud-prevention, or operational purposes, where permitted by law
• Processing is necessary to protect vital interests or other legally recognized grounds Where processing is based on consent, you may withdraw consent where permitted. Withdrawal does not invalidate processing that was lawfully completed before withdrawal and may affect the availability of features that depend on the relevant permission.

Sharing of Personal Information

We do not sell partner personal information as a standalone commercial product. We may disclose or share information where reasonably necessary and legally permitted with:

Customers and Service Recipients

Information needed to fulfil a booking or service request may be shared with the relevant customer or service recipient. Depending on the service, this may include your name, profile image, partner type, relevant vehicle/workshop information, ratings, service status, and limited contact or location information necessary to coordinate the booking.

Payment and Financial Service Providers

Information may be shared with banks, payment gateways, payout providers, accounting providers, or other financial service providers to process partner earnings, payouts, refunds, settlements, or related transactions.

Identity, Verification and Compliance Providers

We may use specialized providers to verify identity, documents, eligibility, fraud indicators, or other onboarding requirements.

Technology and Infrastructure Providers

We may use cloud hosting, database, analytics, mapping, communications, notification, customer support, cybersecurity, document storage, and other technology providers that process information on our behalf and subject to appropriate contractual or security safeguards.

Government, Regulators and Law Enforcement

We may disclose information when required or permitted by applicable law, regulation, court order, lawful government request, investigation, or enforcement process.

Business Transfers

If Obrive undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal information may be transferred as part of that transaction subject to applicable law and appropriate safeguards.

Location and Background Location

Driver Partner and certain service features may require location access to function correctly. Location data may be used to support matching, navigation, route assistance, job allocation, service-area management, safety, operational records, and dispute investigation. Where background location is technically enabled for a feature, OBCREW will use it only for the purposes described for that feature and subject to the permissions and controls available on your device and under applicable law.

Cookies, SDKs and Similar Technologies

Web interfaces and the application may use cookies, SDKs, pixels, logs, local storage, and similar technologies for authentication, security, analytics, performance monitoring, preferences, communications, and service improvement. Mobile operating systems may also provide technical identifiers and analytics controls. Disabling certain technologies may reduce the functionality, security, or reliability of some services.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain partner and transaction records, process payouts, resolve disputes, prevent fraud, comply with legal or regulatory obligations, enforce agreements, and protect the Platform. Retention periods may vary by data type, service, legal requirement, and operational need. When information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable law and our retention procedures.

Data Security

We use reasonable technical and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, disclosure, or destruction. Depending on the nature of the information and service, safeguards may include:

• Encryption in transit
• Appropriate protection of sensitive data at rest
• Authentication and access controls
• Role-based or business-need access
• Network security and monitoring
• Logging and audit mechanisms
• Vulnerability management and software updates
• Backups and disaster recovery measures
• Employee and contractor confidentiality obligations No electronic transmission or storage system can be guaranteed to be completely secure.

Partner Account Security

You are responsible for protecting your login credentials, device, OTPs, authentication codes, and other account access information. You should:

• Keep credentials confidential
• Never share OTPs or authentication codes with another person
• Use a secure device and screen lock
• Log out or secure the account when appropriate
• Report suspected unauthorized access promptly
• Keep your contact and payout information accurate
• Provide only truthful and authorized documents

OBCREW may suspend or restrict an account where there is a reasonable security, fraud, identity, safety, or compliance concern, subject to applicable law and our partner terms.

Fraud, Safety and Integrity Monitoring

To protect partners, customers, and the Platform, we may monitor relevant account, booking, location, transaction, device, and service activity for suspected fraud, abuse, impersonation, manipulation, safety incidents, or violations of applicable policies. Where appropriate and legally permitted, we may request additional verification, investigate activity, restrict or suspend access, withhold or review a transaction, or share information with relevant service providers or authorities.

Children’s Privacy

OBCREW is intended for adults who are legally eligible to provide the relevant driver or mechanic services. We do not knowingly collect personal information from children for partner onboarding or employment/contracting purposes. If we become aware that information has been collected in violation of applicable law, we will take appropriate steps to address it.

Your Privacy Rights and Choices

Subject to applicable law, you may have rights relating to your personal data, which may include requesting access to information, correction of inaccurate information, deletion/erasure where legally available, withdrawal of consent for consent-based processing, grievance redressal, or other rights provided by law. Some information may need to be retained because of legal, accounting, fraud-prevention, dispute-resolution, contractual, or other lawful requirements. Certain requests may also affect your ability to use features or continue as an OBCREW partner where the information is essential to providing the service or meeting legal requirements.

Permissions and Device Controls

You can generally manage permissions such as location, camera, photos, notifications, microphone, and storage through your device settings. OBCREW may request permissions only when a relevant feature requires them. If you deny or later disable a permission, some functions may not work or may operate with reduced functionality.

Third-Party Services and Links

OBCREW may integrate with third-party services such as maps, payment providers, identity verification services, analytics tools, cloud infrastructure, communication providers, or other automotive and mobility partners. Third-party services may have their own privacy policies and terms. We encourage you to review the applicable third-party policies when you interact with those services.

International Data Processing

Where necessary for service delivery, technology infrastructure, support, security, or other legitimate purposes, personal information may be processed or stored outside India through service providers. Where required by applicable law, we will use appropriate safeguards and comply with applicable requirements for such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the OBCREW Platform, services, technology, legal requirements, or business practices. When material changes are made, we may provide notice through the application, website, email, or other appropriate means. The “Effective Date” and “Last Updated” date at the beginning of this Policy indicate when the current version became effective.

Grievance and Privacy Contact

If you have a privacy question, request, complaint, or grievance concerning OBCREW or the handling of your personal information, please contact: Privacy / Grievance Contact: [Insert Name or Role] Email: [Insert Privacy / Support Email] Phone: [Insert Support Number] Postal Address: [Insert Registered Office Address] We will handle requests in accordance with applicable law and our internal grievance procedures.

Acceptance

By registering for or using OBCREW, you acknowledge that you have had an opportunity to review this Privacy Policy. Where applicable law requires consent for a particular processing activity, consent will be requested through the relevant OBCREW flow or device permission mechanism. This Privacy Policy should be read together with the OBCREW Partner Terms, Partner Agreement, Safety Policies, Community/Service Standards, and other applicable policies or notices. Editorial / Implementation Notes This OBCREW draft has been adapted from the structure and subject areas of the OBPARK Privacy Policy available at https://obpark.in/privacy-policy, while changing the scope to Driver Partners and Mechanic Partners. Before publication, Obrive should confirm the actual OBCREW data flows, SDKs, background-location behavior, verification vendors, payment/payout providers, retention periods, privacy/grievance contact details, and registered office details. Legal counsel should review the final version for the jurisdictions in which OBCREW operates.