Car Auto Xpert – Privacy Policy

1. Introduction

This Privacy Policy outlines how Car Auto Xpert collects, uses, discloses, and safeguards your data when you use our services via mobile app or website. By using the platform, you agree to the collection and usage practices described below.

2. Definitions

Definitions such as "You", "Company", "Service", "Personal Data", "Device", "Usage Data", etc., remain as outlined in your submitted document.

3. Information We Collect

We collect the following:

• Name, email, mobile, alternate number
• Address details (State, City, Area, Pincode)
• Profile picture
• Car details (Company, Model, Number)
• SOS location data
• Booking and transaction history
• KYC details (for workshops and sales teams)
• Feedback, ratings, and support requests

4. Permissions & Mobile Device Access

We request access (with permission) to:

• Location services (for SOS and service tracking)
• Camera and photo library (profile pictures, KYC)
• SMS (for sending OTPs directly without third-party integrations)

Users can enable or disable access via device settings.

5. Cookies & Tracking

We use essential and functional cookies for:

• Authentication and fraud prevention
• Saving user preferences (e.g, login)
• Session and visit tracking

You may accept or refuse cookies via browser settings.

6. Use of Personal Data

Your data is used to:

• Create/manage accounts
• Facilitate bookings and service redemptions
• Send OTPs and transaction confirmations
• Assign service partners/workshops
• Process Razorpay payments securely
• Respond to SOS requests via Google Maps
• Communicate offers, updates, and important service alerts

We do not sell your data and only share what is required to deliver the service.

7. Sharing of Data

We share data only with:

• workshops (to serve your bookings)
• Sales Team (for onboarding or account updates)
• Razorpay (for secure payment handling)
• Google Maps API (for location tracking during SOS)

No data is shared for advertising or third-party marketing.

8. Retention and Deletion Policy

• We retain your data for 30 days after service completion or account deactivation.
• After that, it is deleted or anonymized unless needed for legal compliance.
• You can request deletion via account settings or by contacting support.

9. Data Security

We implement:

• Encrypted API and storage
• Admin panel access control (role-based)
• Secure OTP and session protocols
• Two-factor authentication for internal systems

10. Legal Compliance & Disclosure

We may disclose your data to legal authorities:

• To comply with law enforcement or court orders
• To protect the safety of users or the public
• To prevent fraud or cybercrime

11. Children’s Privacy

We do not knowingly allow usage by individuals under the age of 13. If we discover such activity, we delete the associated information.

12. Links to Third-Party Sites

Our service may link to external platforms (e.g., payment or map services). We are not responsible for their privacy practices and recommend you review their privacy policies separately.

13. Your Rights

You can:

• Access and update your personal data
• Request account/data deletion
• View transaction and service history
• Contact us for a full data report

14. Changes to This Policy

We may revise this policy periodically. When updated, we will:

• Post the new policy on our website and app
• Update the "Last updated" date
• Optionally notify you via email or in-app message

15. Contact Us

If you have any questions about this Privacy Policy, contact us:

• 📧 Email: support@carautoxpert.com
• 🌐 Website: www.carautoxpert.com/contact
• 📞 Phone: +91-7984964258 / 8238415587 / 9898301451

This policy is compliant with Indian IT Act, data privacy regulations, and applicable local rules.