Privacy Policy

1. Who we are

CARS 365 is a pre-owned car showroom in Boduppal, Hyderabad. We provide car listings, enquiries, sell-your-car submissions and vehicle-loan callback assistance.

2. Information we collect

• Account: verified mobile number (MSG91 SMS OTP), name at registration, optional email and city, session and security records.
• Browsing, saved cars and enquiries: selected or saved car, contact details and any message you send. Signed-in saved cars are linked to your account.
• Sell your car: owner name, registration/RC number, city, vehicle details and optional photos you capture or choose. Submitted photos stay private to authorised staff; they are not automatically public listings.
• Loan callback: your full name as printed on Aadhaar, contact mobile and consent text, version and time. No car selection is required. We do not request document photos, document numbers, date of birth, bank choice, loan amount or tenure in this flow.
• Location and notifications: a city you choose manually; the app can ask for coarse location permission, but the current city screen does not obtain GPS coordinates. If enabled, Firebase Cloud Messaging processes a device token and your choices for car updates, loan offers and marketing.
• Technical information: request and session information needed to deliver the service and prevent abuse. The website may use Cloudflare Turnstile on forms.

3. How we use information

We verify accounts, show saved cars, reply to enquiries, review private sell submissions, pass a requested vehicle-loan callback to a bank or NBFC, deliver chosen notifications and protect the service. A separate marketing choice does not replace loan-request consent.

4. Sharing

Cloudflare hosts our API, database and private vehicle media; MSG91 delivers OTPs; Google Firebase Cloud Messaging delivers opted-in notifications; Google Sheets holds staff follow-up rows, including loan name and mobile, with blank car fields for new callback requests, but no identity-document images or numbers; Cloudflare Turnstile protects website forms. Authorised staff access records for these purposes. With your loan consent, we pass your name and mobile to a bank or NBFC that finances vehicle purchases, and that lender contacts you directly about the callback request. Lenders control their later processing and may seek their own KYC. We may disclose information when law requires it. We do not sell personal data.

5. App permissions

The app uses Internet and network-state access; it requests camera for user-chosen photos, notification permission for optional messages and coarse location permission for the optional city experience. It does not request contacts, SMS, call-log, precise or background location, or broad photo-library access. You can change permissions in Android settings.

6. Retention

Loan applicant name and contact mobile are cleared automatically 180 days after submission; the matching staff Sheet row is rewritten without those contact fields. Request status and consent evidence remain until account deletion. Older loan requests also retain their original car snapshot and consent evidence until account deletion. Other account and transaction records are retained while needed for the service, a request, security or a legal duty. Consent, deletion and security evidence may be retained for those purposes. On account deletion we also handle already-exported Sheet copies and lender copies separately; see the deletion page.

7. Security

We use HTTPS, encrypted local session storage and an encrypted sell-draft database. Sell photos are held privately in Cloudflare R2 and accessed by authorised staff. No method can guarantee absolute security; contact us promptly if you suspect misuse.

8. Your data rights

You may request access, correction and erasure, withdraw consent for optional processing, make a grievance and nominate another person to exercise applicable rights. The Digital Personal Data Protection Act, 2023 phases these rights into force; we will handle applicable requests under the law then in effect. After using our grievance process, an eligible complaint may be taken to the Data Protection Board of India when that route applies. Contact the officer below to make a request.

9. Account deletion

In the app, use Profile > Delete account. Without the app, use https://cars365.co/delete-account/ and verify your number by SMS; email or phone us if that is unavailable. Access ends when the request is accepted; a resumable job removes primary records and private media. See the deletion page for retained evidence and downstream copies.

10. Children

The app and loan assistance are for adults aged 18 or older. We do not knowingly offer accounts to children.

11. Processing outside India

Cloudflare and other service providers may process information outside India. Our loan callback collects only the details above; lenders handle any later KYC through their own processes. Contact us for information about a particular transfer.

12. Changes

We will update this page and its effective date when our practices change. The policy in force when you use a feature applies to that use, subject to law.

13. Contact and Grievance Officer

Mr. Kurapati Markandeya, Founder & Managing Director, CARS 365, near Kiran International School, Keshavnagar, Hanuman Nagar Colony, Boduppal, Hyderabad, Telangana 500092. Email: contact@cars365.in. Phone: +91 99124 45588.

Document URL: https://cars365.co/privacy/