Privacy Policy

This Privacy Policy explains how CarBayz Automotive handles personal information across all of its customer-facing services, not only this website. It applies to:

• the CarBayz website and its public pages
• the CarBayz Customer Account
• CarBayz mobile applications, where made available
• customer-facing mobile APIs used by those applications
• vehicle buying and selling services operated by CarBayz
• customer support, enquiries and service communications
• WhatsApp-based mobile verification and transaction notifications

Where a specific transaction is governed by a signed agreement, that agreement and the applicable transaction records continue to apply alongside this Policy.

We collect only the categories of information needed to operate a vehicle transaction and the related account, support and compliance activity.

A. Account and contact information

• full name
• mobile number
• email address, where provided
• account identifiers created by CarBayz
• communication preferences

B. Identity and KYC information

Where a transaction requires it, and only to the extent lawfully collected, this may include identity information, PAN information, Aadhaar information, address details, ownership and identity verification information, and KYC review status. Sensitive values are never displayed on public pages and are shown in masked form on internal screens.

C. Vehicle information

• registration number
• make, model and variant
• VIN / chassis number and engine details
• registration certificate (RC) information
• ownership details
• insurance information
• inspection findings and condition reports
• photographs and service history shared with us

D. Transaction information

• enquiries and requests
• Cases and their stage history
• offers and negotiation records
• bookings
• agreements and transaction documents
• payments, refunds and settlement records
• delivery and handover records
• ownership-transfer status

E. Payment and banking information

Where needed to process a legitimate transaction, we may process payment status, transaction references, beneficiary or bank account details used for settlement or refund, and refund records. Bank details are stored in masked form on operational screens. CarBayz does not require or retain full payment card credentials for its vehicle transactions.

F. Appointment information

Details of inspection, test drive, handover and delivery appointments, including date, time and location.

G. Communications

• support conversations
• email notifications sent for your transaction
• WhatsApp messages sent using approved message templates
• authentication (one-time code) messages
• delivery and status metadata for those messages

H. Technical information

• IP address
• browser and device information
• session and security data
• access logs and timestamps
• error and security logs

I. Cookies and similar technologies

CarBayz uses cookies and similar browser storage that are necessary to operate the site and keep you signed in securely, together with basic operational and security data. We do not operate advertising or cross-site tracking cookies on this website.

CarBayz uses Meta's WhatsApp Business Platform (WhatsApp Cloud API) for a limited set of service communications. Current use may include:

• mobile number verification (one-time codes)
• account authentication
• appointment reminders
• refund updates
• notification that a vehicle transaction has been completed

To send these messages, the following may be processed:

• your mobile number in international format
• the limited data placed into an approved message template
• the purpose of the message (for example verification or appointment)
• message identifiers issued by the messaging platform
• sent, delivered, read or failed status metadata and timestamps

Meta and WhatsApp are independent service providers and are not part of CarBayz. When a message is sent, Meta may process the related information in accordance with its own applicable terms and privacy practices. CarBayz does not publish its messaging account identifiers, credentials or security tokens.

CarBayz may send a one-time verification code over WhatsApp to confirm that a mobile number belongs to you. These codes are temporary, are used only for authentication and security, and are subject to expiry, resend cooldown and attempt limits.

Verification codes are not stored in readable form by CarBayz. A CarBayz team member will never ask you to share a verification code, password, Aadhaar OTP or bank PIN.

We use personal information for the following service purposes:

• provide and operate CarBayz services
• create and manage customer accounts
• authenticate users and secure access
• process vehicle purchase and sale transactions
• inspect and evaluate vehicles
• prepare transaction documents and agreements
• process bookings, payments and refunds
• facilitate delivery and handover
• support ownership-transfer processes
• provide customer support
• prevent fraud, abuse and misuse
• maintain transaction and audit records
• send operational updates about your transaction
• comply with applicable legal, tax and regulatory obligations
• improve service reliability and performance

Depending on the activity and applicable law, our processing may be necessary to:

• provide a service you have requested
• enter into or perform a transaction with you
• comply with a legal, tax or regulatory obligation
• prevent fraud and protect the security of accounts and systems
• pursue legitimate operational purposes where permitted by law
• act on your consent, where consent is the applicable basis

Not every activity relies on consent. Where consent is required, you may withdraw it in the manner described in this Policy, subject to obligations we are legally required to meet.

Using WhatsApp for verification or for a transaction notification is not marketing consent, and CarBayz does not treat it as such. Receiving a one-time code or a transaction update does not enrol you in any promotional programme.

If promotional or marketing communications are introduced in future, they will be handled separately and subject to applicable consent and preference settings. You will be able to opt out of promotional messages without losing the authentication and security communications needed to use your account, where permitted by law.

We disclose personal information only where it is necessary for the service or required by law. Depending on your transaction, recipients may include:

• technology and cloud hosting providers that run our platform
• Meta / WhatsApp, for WhatsApp message delivery
• payment and payment-processing providers
• inspection or vehicle service partners, where applicable
• transport and logistics providers, where applicable
• financing or insurance partners, only where relevant and authorised
• parties supporting ownership transfer and RTO processes, where applicable
• professional advisers such as auditors or legal advisers
• government, law-enforcement or regulatory authorities where legally required

CarBayz does not sell personal information for money.

We keep personal information only for as long as reasonably necessary for the purpose it was collected for. Different categories are retained for different periods, because the underlying obligations differ. Retention may be required for:

• operating your account and services
• completed vehicle transactions and the related agreements
• payment, refund and settlement evidence
• dispute handling and legal claims
• fraud prevention and platform security
• internal audit records
• legal, tax, accounting and regulatory requirements

Authentication codes are short-lived and expire quickly. Information that is no longer required for any of the purposes above is deleted or anonymised in line with our internal retention practice and applicable law.

We apply reasonable technical and organisational safeguards to protect personal information, including access controls, authenticated access, role-based permissions, restricted staff access on a need-to-know basis, server-side handling of credentials, encryption in transit, masking of sensitive values on operational screens, and logging and audit trails of record changes.

No system, product or transmission method can be guaranteed to be completely secure. We do not claim that our services are immune from every possible risk, and we ask you to protect your own account credentials and devices.

Depending on applicable law, you may ask us to:

• access the personal information we hold about you
• correct or update inaccurate information
• delete personal information that is no longer required
• withdraw consent where consent is the applicable basis
• change your communication preferences
• explain how your information is used

Requests are subject to verification of your identity and to our legal, accounting, fraud-prevention and record-retention obligations. We will tell you if a request cannot be fully met and explain why.

You may request deletion of personal data associated with your CarBayz account by following the instructions on our Data Deletion page. There is no fee for submitting a deletion request.

We may need to retain limited records even after a deletion request, where this is required for completed vehicle transactions, accounting and tax, payment and refund evidence, ownership-transfer records, fraud prevention, legal claims or other regulatory requirements. Records that are legally required cannot always be deleted immediately.

CarBayz services are intended for persons who are legally able to enter into a vehicle transaction. Our services are not designed for children, and we do not knowingly collect personal information from children beyond what a parent or guardian may provide in the course of a lawful transaction. If you believe a child's information has been shared with us unnecessarily, please contact us so we can review and remove it where appropriate.

We use reputable technology and cloud providers to operate our platform. Depending on the provider, information may be processed on infrastructure located outside your immediate region. Where that happens, we take the protections required by applicable law and require our providers to handle information only for the purposes we instruct.

Our website and communications may link to third-party websites or services. Those services operate independently, and their own privacy practices apply to anything you do there. This Policy does not control independent third-party websites or services.

We may update this Policy as our services, legal obligations or providers change. When we do, the version and Last Updated date shown at the top of this page are updated. Where a change is material, we will communicate it through an appropriate channel. Previous policy details are retained internally for audit purposes.

For any privacy question, or to make a request under this Policy, contact us using the details below.

Business:

CarBayz Automotive

Legal / trading entity:

CARBAYZ

Address:

A18, NEAR DR. CR CHAUDHARY, KAMLA NEHRU NAGAR, JODHPUR, RAJASTHAN, 342001, India

Privacy queries:

help@carbayz.com

Phone:

+919134102030

WhatsApp:

+919134102030

See also our Terms & Conditions and Data Deletion pages.