Privacy policy

Last updated · 28 May 2026 · DPDP Act 2023 compliant

What we collect

Phone number (for OTP login), name + email (optional), Aadhaar last-4 + PAN (for KYC), address (for delivery / pickup), bank details (for payouts), KYC document images (Aadhaar front/back, PAN). For partners we additionally collect business name, GSTIN, business address, owner's KYC.

What we don't collect or store

Full Aadhaar number (only last-4 stored), card numbers (handled by Razorpay), passwords (we use OTP-based auth, no passwords).

How we use it

To fulfil your orders, generate legally-binding agreements, comply with Indian tax and KYC laws, and notify you about your transactions via WhatsApp / SMS / email. We do not sell your data to third parties.

Sharing

We share data only with: (a) payment processor (Razorpay) for payment routing, (b) RTO for RC transfer, (c) inspection partners for scheduling, (d) tax authorities as legally required. Each partner is bound by data-protection contracts.

Storage and retention

Data is stored in India (DigitalOcean Bangalore / Mumbai). KYC documents are retained for 7 years as required for tax compliance. You may request earlier deletion subject to ongoing legal obligations.

Security

TLS 1.2+ for all data in transit; argon2id hashing for OTPs; bcrypt-style hashing for agreement signature codes; signed S3 URLs (1h expiry) for uploaded documents; full activity log retained 7 years; role-based access for our staff with quarterly audits.

Your rights (DPDP Act 2023)

Right to access your data — write to privacy@cars360.in
Right to correct inaccurate data
Right to erasure (subject to legal hold)
Right to grievance redressal — Data Protection Officer at the same address
Right to nominate someone to exercise these rights on your behalf

Cookies & analytics

We use first-party cookies for session management. Optional analytics via Mixpanel / GA4 with IP anonymisation. You may disable in your browser; core functionality continues to work.

Contact

Data Protection Officer
CarBayz Technologies Pvt Ltd, BKC, Mumbai 400051
privacy@cars360.in