Privacy Policy

Last Updated: March 9, 2026

1. Introduction

CarsAvailables ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

Phone number (required for authentication)
Email address (optional, for account recovery and notifications)
First name and last name
Gender
Profile image (optional)

Vehicle Information (for Owners):

Vehicle brand, model, variant, and year
Fuel type and transmission type
Base location
Vehicle value and per-day pricing
Vehicle images (3-10 images per vehicle)

Booking Information:

Vehicle selection
Start date and time
End date and time
Rental price
Payment method preferences

Trip Information:

Handover media (vehicle condition photos)
Handover OTP verification
Trip start, completion, and closure timestamps
Documents uploaded (Aadhar, PAN, driving license, etc.)
Payment collection status

Financial Information:

Wallet balance
Transaction history and ledger entries
Payment gateway transaction IDs
Payout information

Communication Data:

Messages and communications with other users
Support requests and customer service interactions

2.2 Information Automatically Collected

Device Information:

Device type and model
Operating system version
Unique device identifiers
Mobile network information

Usage Information:

App usage patterns and features accessed
Time and date of access
IP address
Browser type (for web version)

Location Information:

Base location for vehicle listings (provided by you)
Location data during active trips (with explicit consent)
Location retention is limited per our configuration settings

2.3 Information from Third Parties

Payment Processors:

Payment transaction details from Razorpay/Stripe
Payment verification status

Authentication Services:

OTP verification through SMS service providers

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

To create and manage your account
To facilitate vehicle listings and bookings
To process payments and manage wallet transactions
To enable communication between renters and owners
To verify handovers and manage trips
To provide customer support

3.2 Security and Safety

To verify your identity through OTP authentication
To prevent fraud and unauthorized access
To document vehicle condition for dispute resolution
To ensure secure handover processes

3.3 Communication

To send booking confirmations and updates
To notify you of trip status changes
To send payment receipts and transaction notifications
To respond to your inquiries and support requests
To send important service updates (with opt-out option)

3.4 Legal and Compliance

To comply with legal obligations
To enforce our Terms of Service
To resolve disputes and protect our rights
To maintain audit trails for financial transactions

3.5 Service Improvement

To analyze usage patterns and improve our Service
To develop new features and functionality
To personalize your experience
To conduct research and analytics (anonymized data)

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Other Users

For Renters: Vehicle owners can see your booking requests, trip status, and contact information (if you haven't denied contact sharing)
For Owners: Renters can see your vehicle listings, contact information (if contact is allowed), and booking responses

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

Payment Processors: Razorpay, Stripe for payment processing
Cloud Storage: For storing images and documents (AWS S3, Firebase, or similar)
SMS Providers: For OTP delivery
Analytics Services: For app usage analytics (anonymized data)
Hosting Services: MongoDB Atlas, Redis for data storage

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

Court orders or legal processes
Government requests
Law enforcement investigations
Protection of our rights, property, or safety
Protection of other users' rights and safety

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Storage and Security

5.1 Data Storage

Your data is stored on secure cloud servers (MongoDB Atlas)
Images and documents are stored in encrypted cloud storage
Financial data is stored with additional security measures
Data is stored in compliance with applicable data protection laws

5.2 Security Measures

We implement industry-standard security measures:

Encryption: Data in transit (HTTPS/TLS) and data at rest
Authentication: JWT token-based secure authentication
Access Controls: Role-based access control for sensitive data
Secure Storage: Flutter Secure Storage for sensitive tokens
Regular Audits: Security audits and vulnerability assessments

5.3 Data Retention

Account Data: Retained while your account is active
Transaction Data: Retained for legal and accounting purposes (minimum 7 years)
Trip Data: Retained for dispute resolution and legal compliance
Location Data: Retained only for the duration specified in our configuration (LOCATION_RETENTION_DAYS)
Deleted Accounts: Data is deleted within 30 days of account deletion, except where legal retention is required

6. Your Rights and Choices

6.1 Access and Correction

You have the right to:

Access your personal information
Correct inaccurate information
Update your profile and account settings

6.2 Data Deletion

You can request deletion of your account and associated data by:

Using the "Delete Account" feature in the app (if available)
Contacting us at [support email]
Following the data deletion instructions in our Data Deletion Policy

Note: Some information may be retained for legal, accounting, or dispute resolution purposes.

6.3 Communication Preferences

You can opt out of marketing communications
Service-related communications (bookings, payments) cannot be opted out
You can control contact sharing with other users in your settings

6.4 Location Data

Location tracking requires explicit consent
You can revoke location permissions at any time
Location data is retained only during active trips and for a limited period

6.5 Payment Information

Payment data is processed by third-party payment processors
We do not store full credit card information
You can view your transaction history in the Wallet section

7. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries.

We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

9. Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Third-Party Services We Use:

Payment Gateways: Razorpay, Stripe (see their privacy policies)
Maps: Google Maps API (see Google's privacy policy)
Cloud Storage: AWS S3, Firebase (see their privacy policies)

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy in the app
Updating the "Last Updated" date
Sending you an email notification (if you have provided an email)
Displaying a prominent notice in the app

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

11. Your Consent

By using our Service, you consent to:

The collection and use of information as described in this Privacy Policy
The processing of your personal data for the purposes stated
The transfer of your data to third-party service providers as described

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [Your Support Email]

Address: [Your Business Address]

Phone: [Your Support Phone Number]

Data Protection Officer (if applicable):

Email: [DPO Email]

13. Regional Privacy Rights

13.1 GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights:

Right to access your personal data
Right to rectification
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

To exercise these rights, contact us at [support email].

13.2 CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of sale of personal information (we do not sell your data)
Right to non-discrimination

13.3 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions where we operate.

Effective Date: [Date]
Last Updated: [Date]

By using CarsAvailables, you acknowledge that you have read and understood this Privacy Policy.

Data Deletion Policy • Support & Contact

Back to Home