Skip to main content

Safety & privacy

Customer data deserves clear controls

Understand document handling, staff access and data requests before you choose software for your rental business.

10 security pillars

Privacy is built into the app

Review how documents, permissions and account controls fit your rental operation. Ask the team to show the relevant workflows in a demo.

Full Aadhaar is never stored

Full Aadhaar images are discarded. Velosta retains masked document copies with the last four Aadhaar digits visible, alongside the customer details needed for the rental workflow.

Government-verified KYC

DigiLocker provides an additional document-verification workflow where enabled. Staff should review the result and resolve mismatched details before approving a handover.

Encrypted file storage

Vehicle photos and retained customer documents use encrypted AWS S3 storage. Access controls and separate storage areas help limit access to the relevant records.

Login security

Access and refresh tokens support account sessions. Keep staff accounts individual, review their access and contact support if you suspect an account has been compromised.

Staff permissions

Admin, Manager and Staff permissions control access to features and branch records. Review the configuration as staff responsibilities change.

Activity log

Activity records help administrators review changes and investigate operational issues. Ask the team to demonstrate the events available for your workflow.

Each store's data is separate

Organisation and branch access controls separate store records. The optional cross-vendor warning workflow has its own limited sharing rules, described in our privacy policy.

30-day deletion grace

Account and organisation deletion requests use OTP verification and a 30-day recovery window. The deletion policy explains the scope and any records retained for legal obligations.

Privacy by default

Full Aadhaar images are discarded; masked copies and selected customer details are retained for the rental workflow. Use the privacy and deletion policies to understand data handling.

Protection from bots and attacks

The website uses security headers. For questions about platform access controls, validation or protection against abuse, ask the team for the current technical details.

FAQ

Common security questions

Do you save the Aadhaar number?+
Velosta does not retain full Aadhaar images or the full Aadhaar number. It stores masked document copies with the last four digits visible and relevant customer details. Deletion follows the scope and retention exceptions described in the deletion policy.
How does Velosta support responsible data handling?+
Masked documents, consent workflows, staff permissions and deletion tools help operators manage customer data. Your business remains responsible for its own collection, access and retention practices. Ask the team to explain the controls relevant to your use.
Where is the data stored?+
The platform uses AWS infrastructure in India, with encrypted file storage. Ask for the current hosting, backup and sub-processor details if you need to assess specific requirements.
Can I export or delete my data?+
Contact support for access and export requests. Account deletion uses OTP verification and a 30-day recovery period, subject to the scope and exceptions in our deletion policy.
Can I ask for security information before subscribing?+
Yes. Send your security questions to the sales team. They can discuss the current controls and what supporting documentation is available.

For bike & car rental owners across India

Need more detail?

Send your security or privacy questions to our team by WhatsApp or email. We will discuss the details relevant to your business.

Or email sales@velosta.com