Introductory Declaration

• This document is an electronic record under the Information Technology Act, 2000 and related rules.
• It is generated electronically and does not require physical or digital signatures.
• Published in compliance with Rule 3(1) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and Rule 4 of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• The policy outlines how Carosa collects, uses, stores, and protects user data.

Definitions

• “You” / “User” – Any individual or entity using Carosa’s website or app who is legally competent to contract under the Indian Contract Act, 1872.
• “We” / “Us” / “Our” – Refers to Carosa and/or its operating company.
• “Parties” – Refers collectively to Carosa and the User.
• Headings are for readability only and do not affect interpretation.
• Use of the platform implies acceptance of this Privacy Policy and the Terms of Use.

1. Consent for Verification with Government and Authorized Databases

1.1 Users expressly authorize Carosa to:

• Verify vehicle registration, challan status, and ownership through government databases like VAHAN, RTO, and other authorized APIs.
• Cross-check details with banks, insurers, and authorized data providers to ensure authenticity.
• Use verified information to prevent fraud and maintain platform transparency.

1.2 Such verification may include accessing public records or official data linked to the User’s submitted information.

1.3 No personal data is modified or misused during the verification process.

2. Consent for Collection and Use of Personal Information

2.1 By using the platform, Users consent to the collection and processing of:

• Name, contact number, email address, and communication details.
• Location, IP address, and device identifiers.
• Vehicle details (make, model, registration, variant, ownership status).
• Transaction and communication records on the platform.

2.2 Information is collected for legitimate business purposes, including identification, service delivery, analytics, and compliance.

2.3 Users can withdraw consent anytime by emailing support@carosa.in, subject to service limitations.

3. Purposes of Information Use

Carosa may use information for:

• Verifying user identity and vehicle ownership.
• Enabling listings, sales, and purchases of vehicles.
• Processing payments and facilitating buyer-seller communication.
• Sending offers, alerts, and important notifications.
• Enhancing platform functionality and personalizing experience.
• Conducting audits, analytics, and improving platform security.
• Complying with applicable legal and regulatory requirements.

4. Cookies and Other Identifiers

• 4.1 Carosa uses cookies and similar technologies to:
  • Maintain user login sessions and security.
  • Remember preferences such as language and display settings.
  • Measure website performance and user engagement.
  • Provide relevant recommendations or ads.
• 4.2 Users can disable cookies in browser settings; however, this may affect certain functionalities.
• 4.3 Carosa does not store personally identifiable data in cookies.

5. Legitimate Uses & Consent

• 5.1 Carosa processes data under the following lawful bases:
  • Contractual Necessity: To deliver requested services.
  • Legitimate Interest: To prevent misuse, improve services, and ensure platform safety.
  • Legal Obligation: To comply with court or government orders.
• 5.2 Consent is taken explicitly during registration, listing, or communication activities.
• 5.3 Users have the right to revoke consent; however, access to certain features may be restricted thereafter.

6. Limiting Use, Disclosure & Transfer of User Data

• 6.1 Carosa will not sell, trade, or rent user information to any unauthorized third party.
• 6.2 Data may be shared only with:
  • Authorized service providers, payment gateways, or logistics partners.
  • Government authorities or regulators for lawful requests.
  • Technology vendors for hosting, storage, or analytics, under strict confidentiality.
• 6.3 All third parties are bound by non-disclosure agreements and data protection obligations.
• 6.4 Data transfers (if any) are handled securely following Indian data protection standards.

7. User’s Rights

• Access: Request details of their stored data.
• Correction: Update or rectify inaccurate information.
• Deletion: Request account or data removal, subject to legal obligations.
• Withdrawal: Revoke consent for specific data uses.
• Grievance Redressal: Raise data-related concerns at support@carosa.in.

Carosa will respond to such requests within a reasonable time frame as mandated by law.

8. APIs & Third-Party Integrations

• 8.1 Carosa integrates with third-party APIs to:
  • Fetch verified vehicle data from official sources.
  • Enable secure payments, document processing, and loan/insurance verification.
  • Support RC transfers, challan checks, and inspection records.
• 8.2 All integrations are authorized, encrypted, and comply with applicable privacy standards.

8.1 Disclosure to Third Parties

• Carosa may disclose limited data to third-party partners for operational support or analytics.
• Such disclosures are restricted to the minimum data required for the intended purpose.
• All partners must maintain strict confidentiality and adhere to data protection norms.

9. Information Shared with Dealers and Affiliated Partners

• Buyer and seller contact details.
• Vehicle information relevant to the deal.
• Transactional or inspection data.

Shared data is used only for completing legitimate transactions and is not reused for unrelated activities. Dealers and partners are contractually obligated to protect user information.

10. Privacy & Data Retention

• 10.1 Carosa retains data only as long as:
  • Required for service fulfillment or user relationship.
  • Mandated by legal or regulatory requirements.
• 10.2 After expiry of retention period, data is securely deleted or anonymized.
• 10.3 Carosa employs encryption, firewalls, and secure servers to protect against unauthorized access, alteration, or disclosure.

11. Updates to the Policy

• 11.1 Carosa reserves the right to modify or update this Privacy Policy at any time.
• 11.2 Updates will be published on this page with the date of revision.
• 11.3 Users are encouraged to review this Policy periodically. Continued use implies acceptance of the updated version.

12. Disclaimer

• 12.1 While Carosa implements advanced security practices, no online platform is completely immune to risks.
• 12.2 Users are advised to exercise caution when sharing personal or vehicle details online.
• 12.3 Carosa shall not be liable for breaches caused by factors beyond reasonable control, such as unauthorized hacking or third-party negligence.