Privacy Policy

Your privacy at a glance

• The CAR24X7CARE customer app uses your mobile number for OTP sign-in and your profile, vehicle and booking details to arrange services.
• Customer location is used for nearby services and the pickup/drop point you submit. The customer app does not run the Partner app's on-duty background-location service.
• Customer booking alerts use Firebase Cloud Messaging; service payments use Razorpay where online payment is available.
• Registration and KYC information helps us verify partners and operate service and marketplace accounts.
• A mechanic's uploaded selfie is also their partner profile photo; it is not treated as a private identity-document image.
• When a service partner goes Online, location sharing can continue in the background for nearby jobs and service coordination.
• Seller accounts use business, product, order and payout information. Seller login does not start mechanic live-location sharing.
• You can contact us to request access, correction, account deletion or deletion of associated personal data.

1. Who we are and what this policy covers

CAR24X7CARE is a product of Web Cincture Pvt Ltd. This policy covers the CAR24X7CARE customer app, the CAR24X7CARE Partner app including Service Partner (mechanic/garage) and Seller Partner accounts, and related CAR24X7CARE website, booking, marketplace and support flows.

Information processed depends on your role, the features you use and permissions you grant. Not every account uses every data category below.

CAR24X7CARE customer app

Sign-in and your account

Phone-number sign-in uses Firebase Authentication and SMS one-time passwords. We process your mobile number, Firebase/account identifiers and authentication/session records. Google processes authentication information for verification and abuse prevention. Your profile name, saved addresses where provided and chosen primary vehicle are linked to your account.

Vehicles, bookings and service records

We process vehicle make/model, registration number, fuel/type and other details you provide; selected services/plans, issue descriptions, service address, pickup/drop coordinates, estimates, approvals, assigned mechanic, service status, ratings/reviews and booking history. Relevant customer name, phone, vehicle, issue and service location are shared with service partners for dispatch and fulfilment. Dispatch may show relevant request details to eligible partners before one accepts.

Customer location and maps

With your permission, the app accesses approximate or precise location while you use location features, such as nearby garages and selecting a service point. Selected coordinates or addresses are sent to CAR24X7CARE for location lookup and bookings. You can also enter an address manually. Google Maps displays the map, customer service point and available mechanic tracking information. The Maps SDK processes technical information under Google's policies.

The customer app does not continuously track your device location in the background. The service-partner Online/Offline location service described below belongs to the Partner app. Denying customer location permission can limit nearby/GPS features; it does not remove previously saved booking locations.

Payments and notifications

Where enabled, Razorpay provides online checkout. We process bill amounts, approvals, payment/order references, transaction status and related refund/support records. Payment details entered in checkout are handled by Razorpay and relevant banks/payment services. Our booking APIs do not ask you to send full card details, CVV, UPI PIN or payment OTP to CAR24X7CARE support.

Firebase Cloud Messaging uses a device notification token linked to your signed-in account/session. We store booking notifications, delivery/read state and related technical records to send mechanic acceptance, arrival, service-start, estimate, completion, cancellation and payment updates. Device settings control notification permission. Alerts can arrive while the app is closed or the phone is locked, subject to Android restrictions; this does not start background customer location tracking.

Your choices and deletion

You can manage profile/vehicle information, change device permissions, sign out, and request deletion from Account → Account & Support → Request account deletion or the public customer account deletion page. The app opens a support email draft; you must send it to submit your request. Customer accounts do not require partner KYC or payout-bank documents. Partner-only information below is labelled by role.

2. Information collected and processed

Account and registration

Your name, mobile number, account identifiers and authentication/session information; workshop/store and owner names, contact details, city, area and selected role; and GSTIN, referral and business details where provided. Customer and Partner mobile-number verification uses Firebase Authentication and one-time passwords (OTPs).

KYC documents and selfie

Service partner verification can include a selfie/profile photo, Aadhaar front and back photos and a PAN photo. Seller verification can include the owner's PAN number and photo, GSTIN, business-proof photo/document and bank-verification information. We also process application status, review decisions and reasons needed for verification and activation.

Selfie visibility: the mechanic selfie also becomes the partner profile image. It may appear to customers and other users through partner/service interfaces, and its profile-photo link is publicly accessible. PAN, Aadhaar and business-proof uploads are separate from the public partner photo and product catalogue. Do not include unrelated people or private documents in your profile photo.

Service partner activity

Offered services, service radius, Online/Offline availability, location coordinates and update time, job offers and responses, assigned jobs, service-start verification, job stages, before/after service photos, additional-work requests, completion notes, ratings and reviews. Job records may include customer contact, vehicle and service-location details needed for the booking.

Seller store and marketplace activity

Product categories, names, descriptions, photos, SKUs, vehicle compatibility, prices, GST details, stock and listing/approval status; order items and amounts; fulfilment status, courier names, tracking numbers and notes; notifications, earnings and payout-request history. Store and product information intended for the marketplace can be visible to shoppers.

Bank, payment and payout information

Submitted payout information can include account-holder name, bank account number, IFSC and optional UPI ID. Dashboard records include masked account details such as the last four digits, verification status and payout requests. We process bill amounts, additional-work approvals, transaction references, payment status, refunds and settlement information where applicable. Payments may be processed by Razorpay and the selected bank/payment service. Partner payouts may require finance-team review.

Device, notification and technical information

Authentication and messaging services process identifiers such as Firebase user/application-installation identifiers, notification registration tokens and authentication tokens. Hosting and service providers may process IP addresses, request timestamps, device/app technical information and operational logs needed to provide, secure and troubleshoot services. Local session/preferences include sign-in state and, for partners, the selected partner role.

Customer bookings and support

Customer-facing services process information such as name, phone, email if provided, vehicle details, service requirements, pickup/drop location, delivery address and booking/order details. Support processes messages and attachments you send. Do not send passwords, OTPs or complete bank/card credentials to support.

3. How we use information

• Register/authenticate accounts, review KYC/business applications and manage activation or suspension.
• Match available partners with nearby SOS/service requests and coordinate accepted jobs.
• Publish products, maintain inventory and support marketplace orders and fulfilment.
• Calculate bills/earnings, confirm payment status and manage payouts, refunds and disputes.
• Deliver supported job alerts, account/service updates and support responses.
• Maintain security, prevent misuse/fraud, investigate complaints and meet applicable legal/accounting obligations.

4. Location and background location

On Android, the on-duty location service displays an ongoing notification. Coordinates and last-update time are sent to CAR24X7CARE for nearby matching and service coordination. Relevant location may be used in customer booking/navigation interfaces. This differs from a city or service area you enter manually.

Use Offline to stop ongoing on-duty location updates. Logging out also stops the native location service. You can change/revoke location access in your phone's app-permission settings; doing so can prevent nearby matching or live-location features. Switching Offline, revoking permission or uninstalling does not erase previously submitted location or booking records.

Seller-only login does not start the mechanic live-location service. Store city and customer service/delivery addresses may still be processed for their respective features. External navigation apps operate under their own policies and settings.

5. Photos, permissions and notifications

• Camera/selected photos: used when you capture or choose KYC/selfie, product or service-proof photos. Images upload when you submit the relevant form/job update. The Partner app does not need your entire photo library.
• Location: customer nearby/map/booking features use foreground location as described in the customer section. Service-partner on-duty location can continue in the background, subject to device permissions.
• Notifications, sound and vibration: used for supported alerts/updates. In the Partner app, an Android foreground service may run for an active SOS offer alert. Device settings control notifications, sound and vibration; disabling them can cause missed time-sensitive updates.

Denying permission can limit the related feature. These Partner app features do not request contact-list or microphone access.

6. Sharing and service providers

• Customers and partners: relevant profile, contact, service, location, vehicle or booking information needed to assess, coordinate or fulfil requests. Store/product details intended for publication appear in marketplace interfaces.
• Authorized operations, verification, support and finance personnel: information needed for applications, service/order support, disputes and bank/payout review.
• Service providers: information needed for login, notifications, maps, hosting and payment processing may be shared with providers supporting these services. These include Google/Firebase for authentication, messaging and maps, Render for hosting, and Razorpay where online checkout is enabled. See Firebase privacy information, Google's privacy policy, Render's privacy policy and Razorpay's privacy policy. External navigation and communication services operate under their own privacy policies.
• Legal/safety recipients: where required by applicable law or a valid legal request, or necessary to address fraud, safety or protection of rights.

We do not sell partner KYC documents, bank details or precise location data. Partners receiving customer information must use it only for the relevant service, order or authorized support purpose, not unrelated marketing.

Providers may process information outside your country. This policy does not promise that every service or backup is stored only in India.

7. Local storage and website measurement

The customer app uses Firebase sign-in/session information to restore your account. The Partner app also uses local preferences for role selection. Clearing app storage removes local information, not server-side account data.

CAR24X7CARE web pages may load Google tags for visit and contact-conversion measurement. These browser services may process cookies/similar identifiers, IP address and visit/interaction information under provider settings/policies. Website measurement is separate from native partner location sharing and KYC uploads. Manage cookies through your browser and applicable Google privacy settings.

8. Retention and security

Account/profile information, verification documents, business records, job/order history, photos and financial records may remain while an account is active and for verification, support, disputes, fraud prevention, accounting and applicable legal obligations. Logging out or going Offline does not automatically expire records. We do not currently publish one automatic deletion period for every data category.

For a verified deletion request, we assess what can be deleted or anonymized and what requires retention. Invoices, tax/accounting records, transaction/payout history, unresolved disputes, fraud/security evidence and legal-hold records may need retention for the applicable purpose or legal period. We explain relevant exceptions when responding. Where backups exist, residual copies may remain until rotation/removal under the applicable backup process.

Measures include HTTPS in app/server communication, authentication for protected account functions and operational access controls. Public profile/catalogue information is intentionally accessible as described above. No online system, transmission or storage method can be guaranteed completely secure.

10. Children and partner eligibility

The customer app is a vehicle-service booking platform and is not directed at children. The Partner app is a business/service-work platform intended for adults aged 18 or older, not children. If you believe a child submitted personal information, contact us for review.

11. Changes to this policy

We may update this policy as features, providers, practices or applicable requirements change. The effective/updated date appears above. Where additional notice or consent is required, publishing a policy alone does not replace it.