Privacy Policy

Truelet Technologies Private Limited ("we", "us", or "our") operates skyspray.in and the Sky Spray mobile application — a marketplace that connects farmers and landholders in India with DGCA-authorised drone operators for agricultural spraying. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services.

By creating an account or using Sky Spray, you agree to this policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Information you provide

• Phone number (used for OTP-based sign-in)
• Name and the role you sign up as — customer or drone operator
• Field details you enter when booking: location, acreage, crop, and the service required
• For operators: DGCA UIN and Remote Pilot Certificate, insurance document (optional), drone make, model and capacity, service area, availability and rates, the UPI ID payouts are sent to, and, if you choose to add them for your subscription invoice, your State and GSTIN
• Photographs and notes uploaded as proof of a completed job
• Ratings, reviews, and any reports you submit about another user
• Messages you exchange with our support team

1.2 Information collected automatically

• Location data — the field location you pin for a booking, and an operator's approximate location used to match nearby jobs
• Where you signed up from — once, when you first create your account: the phone's location if you had already allowed it, otherwise the approximate area (town or district) that your internet connection suggests. See section 4.
• GPS coordinates attached to job-completion proof
• Device information: platform, model, and OS version
• Push notification tokens (Firebase Cloud Messaging) for job alerts
• Usage data: bookings created, jobs accepted or declined, and session activity
• IP address, for fraud prevention and abuse detection
• How the website is used — the pages you view on skyspray.in, the link or search that brought you, your approximate location at city level, and your device and browser — measured with Google Analytics. This covers website visits only, not your bookings, and we do not use it to work out who you are.

Cookies. The website sets cookies for those analytics and for nothing else. The app sets none. You can block or delete them in your browser settings, or install Google's Analytics opt-out add-on; the site works the same either way.

1.3 Information from third parties

• Phone number verification via SMS OTP
• Payment, payout and refund status for online payments from our payment gateway, and, where we verify a payout UPI ID, the account holder's name as the bank returns it

We do not receive or store your card, UPI, or netbanking credentials. Those are handled entirely by the payment gateway.

2. How We Use Your Information

• To create and manage your account
• To broadcast a booking request to suitable operators near the field
• To share the details each side needs to complete the job — see section 3
• To verify operator certification and drone registration before allowing them to accept work
• To process payments, operator subscriptions, payouts, and refunds, and to issue tax invoices for subscriptions
• To send notifications about booking requests, acceptances, completion, and payment
• To investigate safety reports, disputes, and suspected misuse of the platform
• To improve matching, pricing guidance, and app features
• To comply with our obligations under Indian law

3. How We Share Your Information

We do not sell your personal data. We share it only in these circumstances:

• Between customer and operator: once a booking is accepted, the operator receives the field location and job details, and the customer sees the operator's name, verification status, rating, and contact number. Both parties need this to meet in a field and do the work.
• Service providers: Cloudflare (hosting and edge infrastructure), Google Firebase (push notifications), Google Analytics (website usage statistics), our payment gateway (online payments, payouts and UPI ID verification), and our SMS provider (OTP delivery). These providers process data on our behalf under confidentiality obligations.
• Regulators and authorities: where required by law, court order, or a lawful request from a government authority, including DGCA in connection with a flight incident.
• Safety: to prevent fraud, abuse, or harm to any person or property.
• Business transfers: in the event of a merger or acquisition, with prior notice to you.

3A. YouTube API Services

We use YouTube API Services, through an internal tool used only by our team, to upload and schedule videos on our own YouTube channel, Sky Spray (@SkySprayOfficial). The tool acts only on our own channel. It does not access, collect, store or share any YouTube data about you or anyone else; the only YouTube data it keeps is the ID, title and status of our own videos.

• When you watch our videos on YouTube, the YouTube Terms of Service and the Google Privacy Policy apply.
• Anyone who has allowed an app to use their Google Account can withdraw that access at any time on the Google security settings page.
• We keep no YouTube data about you, so there is nothing of yours to delete. For any other data we hold, see section 6 and Delete account.

4. Location Data

Location is central to how Sky Spray works: a booking is meaningless without knowing which field it applies to. We use the field location you pin to find operators nearby, to give the operator directions on the day, and to verify from the GPS attached to completion proof that the spray happened at the right place.

Operator location is used to match nearby jobs. You can turn off location permission in your device settings at any time; matching and proof capture will not work correctly without it.

When you create your account we also record, once, roughly where you signed up from: the phone's location if you had already granted it, otherwise the approximate area that your internet connection suggests (an IP-based estimate, typically a town or district, never a street address). We use this only to understand which regions Sky Spray is reaching, so we can bring operators and support to the places people are signing up from. It is not shown to other users, is not used for matching or pricing, and is not updated afterwards.

5. Data Retention

• Account and profile data are retained while your account is active.
• The sign-up location is retained with your account and removed with it.
• Booking records, completion proof, and payment records are retained for eight years after the transaction, as required for tax and accounting purposes under Indian law.
• Operator certification records are retained for the same period, so that we can evidence the verification we performed at the time of a job.
• After account deletion, personal data is removed within 30 days, except records covered by the retention obligations above, which are retained in a restricted form and not used for any other purpose.
• Anonymised and aggregated data may be retained indefinitely.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or outdated information from your profile settings
• Delete your account and associated data — see the account deletion page
• Withdraw consent at any time by deleting your account
• Nominate a person to exercise these rights on your behalf in the event of your death or incapacity
• Grievance redressal through the officer named in section 10

To exercise any right, use the in-app settings or contact us at privacy@truelet.in. We will respond within 30 days.

7. Children

Sky Spray is intended for users aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has created an account, we will delete the account and associated data.

8. Security

We use HTTPS/TLS encryption in transit, signed JWT authentication with short-lived access tokens, and role-based access controls that limit what operators, customers, and staff can each see. Payment credentials never reach our servers. App data stored on your device sits in the application's private storage. No method of transmission or storage is completely secure, so please keep your device locked and your phone number secure — it is how you sign in.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification. Continued use of Sky Spray after changes take effect constitutes acceptance of the updated policy.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address concerns related to the processing of your personal data. If you have a complaint or grievance, please contact:

We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt. If you are not satisfied with our resolution, you may escalate the matter to the Data Protection Board of India once it becomes operational under the DPDP Act, 2023.

11. Contact Us

For general privacy questions or requests, please contact: