Privacy Policy

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register, use our services, or communicate with us, including:

• Account Information: Name, email address, phone number, date of birth
• Profile Information: City, state, PIN code, preferences, vehicle interests, budget range
• Transaction Information: Purchase inquiries, offers submitted, group deal participation, booking details, price negotiations
• Financial Information: Payment details processed securely by Razorpay, our authorized payment processor
• Communication Data: Messages, emails, feedback, survey responses, and support requests

Note: We do not currently collect identity documents (e.g. PAN card, Aadhaar), employment details, or existing vehicle information. We may collect identity documents in the future if KYC verification becomes required for service delivery.

2.2 Information Automatically Collected

When you use our Platform, we automatically collect certain technical and usage information:

• Device Information: IP address, browser type and version, operating system, screen resolution
• Usage Data: Pages viewed, products browsed, time spent on Platform, referring pages, date and time stamps, session duration — collected via analytics tools we use to improve the Platform
• Location Data: General geographic location based on IP address; city/state based on the PIN code or city you select on the Platform
• Transaction Data: Offers submitted, group deals joined, booking status, communication history with dealers
• Local Storage: Authentication tokens stored in your browser to keep you logged in (see Section 8)
• Log Files: Server logs containing access times, pages viewed, and errors

2.3 Information from Third Parties

We may receive limited information about you from the following third-party sources:

• Partner Dealers: Transaction updates, booking status, and delivery-related information
• Razorpay: Payment confirmation, refund status, and transaction verification data

2.4 Non-Personal Information

We also collect and process non-personal information, which is data that does not directly identify you as an individual. This includes:

• Aggregated or anonymized data that cannot be used to identify specific individuals
• Statistical information about Platform usage patterns and trends
• De-identified data derived from personal information
• Technical information about devices and browsers in aggregate form

Non-personal information is not subject to the same restrictions as personal information under this Policy. We may use, share, and process non-personal information for any purpose at our discretion, including for analytics, research, product improvement, and marketing purposes, in compliance with applicable laws.

4.1 Partner Dealers and Other Partners

When you express interest in a product, submit an offer, join a group deal, or request information, we share relevant information with the applicable dealer or partner to facilitate your transaction and provide you with the requested services. This may include:

• Your name, email address, phone number, and city/location
• Your vehicle preferences, budget range, and specific product interests
• Your offer details, booking requests, and group deal participation
• Communication history and inquiries made on the Platform
• Financial information (when necessary for financing or loan applications)
• Any other information you provide or authorize us to share

By submitting an inquiry, offer, or joining a group deal, you explicitly consent to us sharing your information with relevant partners for the purpose of fulfilling your request. Partners may contact you directly via phone, email, SMS, or WhatsApp to assist with your inquiry.

4.2 Service Providers and Third-Party Vendors

We engage third-party companies and service providers to perform services on our behalf. These service providers have access to your personal information only to perform specific tasks and are obligated not to disclose or use it for any other purpose. Our service providers include:

• Razorpay: Payment processing, refunds, and financial transactions
• Mailjet: Transactional email delivery (booking confirmations, OTPs, notifications)
• SMS24Hours: SMS delivery for OTP authentication and transactional notifications
• Cloudinary: Cloud storage for product images and dealer-uploaded documents
• Google Tag Manager (GTM): Tag management platform used to deploy analytics on our site
• Google Analytics (GA4): Loaded via GTM to collect anonymised usage data (pages visited, session duration, general traffic patterns)
• Google Ads: Used for advertising and conversion tracking to measure the effectiveness of our ads
• Microsoft Clarity: Behavioural analytics tool that records anonymised session replays and generates heatmaps to help us understand how visitors interact with our Platform. Clarity may record mouse movements, clicks, and scroll depth. Sensitive form fields (such as phone numbers and payment fields) are automatically masked. Data is processed by Microsoft
• Meta Pixel (Facebook Pixel): Advertising and conversion tracking tool provided by Meta Platforms, Inc. The Pixel collects data about your visits and actions on our Platform (pages viewed, products browsed) and shares this with Meta. This data may be used by Meta to show you relevant Ekatra advertisements on Facebook, Instagram, and Meta's partner network, and to measure the effectiveness of those ads. Meta may process this data on servers outside India — see Section 12.
• Railway: Backend hosting and data storage infrastructure
• Vercel: Frontend hosting and content delivery

We ensure that all service providers maintain adequate data protection standards and comply with applicable privacy laws.

4.3 Legal Requirements

We may disclose your information to comply with:

• Legal processes (court orders, subpoenas)
• Government or regulatory requests
• Law enforcement investigations
• Protection of our rights or safety of others

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

6.1 Retention Periods

Specific retention periods for different types of data:

• Active Account Data: Retained for the duration of your account plus 3 years after account closure or last activity
• Transaction Records: Retained for 7 years from the date of transaction to comply with tax, accounting, and regulatory requirements
• Communication Records: Email and SMS logs retained for 3 years for customer service quality and dispute resolution
• Marketing Communications: Retained until you opt out, plus 6 months for processing opt-out requests and maintaining suppression lists
• Legal and Compliance Data: Retained as required by law enforcement, court orders, or regulatory bodies
• Usage Data: Retained in aggregated/anonymized form for business analytics

6.2 Data Deletion

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable laws. You may request deletion of your personal information at any time (subject to legal retention requirements) by contacting us at support@ekatraonline.com.

Please note that even after deletion, we may retain certain information in anonymized or aggregated form, and we may retain your information in backup systems for a limited period.

7.1 Access and Portability

You may request access to your personal information and receive a copy in a structured, commonly used format.

7.2 Correction

You may update or correct inaccurate personal information through your account settings or by contacting us.

7.3 Deletion

You may request deletion of your personal information, subject to legal obligations and legitimate business needs.

7.4 Opt-Out of Marketing

You may unsubscribe from promotional emails using the link in each email or by updating your communication preferences.

7.5 Withdraw Consent

Where we process data based on your consent, you may withdraw consent at any time. However, please note that:

• Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal
• We may still retain and process certain information as required by applicable laws or for legitimate business purposes
• Withdrawal of consent may limit your ability to use certain features or services on the Platform
• We may not be able to provide you with products or services if you withdraw consent for processing essential information