Privacy Policy

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register, use our services, or communicate with us, including:

• Account Information: Name, email address, phone number, password, date of birth
• Profile Information: City, state, PIN code, preferences, vehicle interests, budget range
• Identity Documents: PAN card, Aadhaar card, Voter ID, Driving License (for KYC verification when required)
• Vehicle Information: Current vehicle details (if applicable), vehicle registration number, preferred vehicle models, color preferences
• Transaction Information: Purchase inquiries, offers submitted, group deal participation, booking details, price negotiations
• Financial Information: Payment details, bank account information, credit/loan application data (processed securely by authorized third-party financial institutions and payment processors)
• Communication Data: Messages, emails, phone call recordings (for quality and training purposes), feedback, survey responses, and support requests
• Employment Information: Employer name, designation, monthly income (when applying for financing or loan products)

Note: We do not solicit sensitive personal information unless necessary for service delivery. Any sensitive information you voluntarily share with us will be handled in accordance with this Policy and applicable laws.

2.2 Information Automatically Collected

When you use our Platform, we automatically collect certain technical and usage information:

• Device Information: IP address, browser type and version, operating system and version, device identifiers (IMEI, device ID), mobile network information, screen resolution, device model
• Usage Data: Pages viewed, features used, search queries, products browsed, time spent on Platform, click-through data, referring/exit pages, date and time stamps, session duration
• Location Data: General geographic location based on IP address, city/state based on PIN code you provide, or precise geolocation (only if you grant explicit permission through your device settings)
• Transaction Data: Information about offers submitted, group deals joined, inquiries made, booking status, communication history with dealers
• Cookies and Tracking Technologies: Cookies, web beacons, pixels, local storage, and similar technologies (see Section 8 for details)
• Log Files: Server logs containing access times, pages viewed, errors encountered, and referring website addresses

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Partner Dealers: Transaction updates, delivery status, service records, customer feedback
• Financial Institutions: Credit assessment data, loan approval status, payment verification
• Authentication Services: Profile information from Google, Facebook, or other social login providers (when you choose to sign in using these services)
• Analytics Providers: Aggregated usage statistics, demographic data, behavioral insights
• Marketing Partners: Campaign performance data, referral information
• KYC Verification Services: Identity verification results, document authentication status
• Public Sources: Publicly available information from government databases, social media, or other public forums

2.4 Non-Personal Information

We also collect and process non-personal information, which is data that does not directly identify you as an individual. This includes:

• Aggregated or anonymized data that cannot be used to identify specific individuals
• Statistical information about Platform usage patterns and trends
• De-identified data derived from personal information
• Technical information about devices and browsers in aggregate form

Non-personal information is not subject to the same restrictions as personal information under this Policy. We may use, share, and process non-personal information for any purpose at our discretion, including for analytics, research, product improvement, and marketing purposes, in compliance with applicable laws.

4.1 Partner Dealers and Other Partners

When you express interest in a product, submit an offer, join a group deal, or request information, we share relevant information with the applicable dealer or partner to facilitate your transaction and provide you with the requested services. This may include:

• Your name, email address, phone number, and city/location
• Your vehicle preferences, budget range, and specific product interests
• Your offer details, booking requests, and group deal participation
• Communication history and inquiries made on the Platform
• Financial information (when necessary for financing or loan applications)
• Any other information you provide or authorize us to share

By submitting an inquiry, offer, or joining a group deal, you explicitly consent to us sharing your information with relevant partners for the purpose of fulfilling your request. Partners may contact you directly via phone, email, SMS, or WhatsApp to assist with your inquiry.

4.2 Service Providers and Third-Party Vendors

We engage third-party companies and service providers to perform services on our behalf. These service providers have access to your personal information only to perform specific tasks and are obligated not to disclose or use it for any other purpose. Our service providers include:

• Payment Processors: Processing payments, refunds, and financial transactions (e.g., Razorpay, PayU, payment gateways)
• Communication Services: Email delivery (e.g., SendGrid, Amazon SES), SMS and WhatsApp messaging, push notifications
• Cloud Infrastructure: Hosting, data storage, and computing services (e.g., AWS, Google Cloud, Microsoft Azure)
• Analytics Providers: Website analytics, user behavior tracking, performance monitoring (e.g., Google Analytics, Mixpanel)
• Customer Support Tools: Helpdesk software, live chat, CRM systems (e.g., Zendesk, Freshdesk)
• KYC and Verification Services: Identity verification, document authentication, fraud detection
• Marketing Platforms: Email marketing, advertising platforms, social media marketing tools
• Financial Institutions: Banks, NBFCs, and lending partners for processing loan and financing applications
• Logistics Partners: Vehicle delivery coordination and tracking services

We ensure that all service providers maintain adequate data protection standards and comply with applicable privacy laws.

4.3 Legal Requirements

We may disclose your information to comply with:

• Legal processes (court orders, subpoenas)
• Government or regulatory requests
• Law enforcement investigations
• Protection of our rights or safety of others

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

6.1 Retention Periods

Specific retention periods for different types of data:

• Active Account Data: Retained for the duration of your account plus 3 years after account closure or last activity
• Transaction Records: Retained for 7 years from the date of transaction to comply with tax, accounting, and regulatory requirements
• KYC Documents: Retained in accordance with RBI guidelines and applicable financial regulations (typically 5-7 years after relationship ends)
• Communication Records: Email, SMS, and call recordings retained for 3 years for customer service quality and dispute resolution
• Marketing Communications: Retained until you opt out, plus 6 months for processing opt-out requests and maintaining suppression lists
• Financial and Loan Data: Retained for 7 years to comply with financial reporting and audit requirements
• Legal and Compliance Data: Retained as required by law enforcement, court orders, or regulatory bodies
• Analytics and Usage Data: Typically retained in aggregated/anonymized form indefinitely for business intelligence

6.2 Data Deletion

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable laws. You may request deletion of your personal information at any time (subject to legal retention requirements) by contacting us at support@ekatraonline.com.

Please note that even after deletion, we may retain certain information in anonymized or aggregated form, and we may retain your information in backup systems for a limited period.

7.1 Access and Portability

You may request access to your personal information and receive a copy in a structured, commonly used format.

7.2 Correction

You may update or correct inaccurate personal information through your account settings or by contacting us.

7.3 Deletion

You may request deletion of your personal information, subject to legal obligations and legitimate business needs.

7.4 Opt-Out of Marketing

You may unsubscribe from promotional emails using the link in each email or by updating your communication preferences.

7.5 Withdraw Consent

Where we process data based on your consent, you may withdraw consent at any time. However, please note that:

• Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal
• We may still retain and process certain information as required by applicable laws or for legitimate business purposes
• Withdrawal of consent may limit your ability to use certain features or services on the Platform
• We may not be able to provide you with products or services if you withdraw consent for processing essential information

8.1 Types of Cookies

• Essential Cookies: Necessary for Platform functionality
• Analytics Cookies: Help us understand usage patterns (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Deliver relevant advertisements

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.