Privacy Policy | CarOrbit Technologies

At CarOrbit Technologies, your privacy is an engineering priority, not just a legal requirement. This document outlines exactly how we protect, store, and automatically delete your data under the provisions of the Digital Personal Data Protection Act, India.

1. Location & Cookie Tracking

CarOrbit Technologies strictly minimizes tracking. We utilize a secure, encrypted cookie (carorbit_buyer_location) exclusively for Core Service Operation (such as zero-latency local car searches).

We do not use third-party ad-tracking pixels (e.g., Facebook Pixel, Google Analytics).
Your location data is never sold or shared with external marketing agencies.

2. EXIF Privacy Auto-Shield

To protect sellers from stalking or identity theft, our system processes all uploaded vehicle images in RAM. We automatically strip and permanently delete all GPS coordinates, timestamps, and EXIF metadata from your photos before they are saved to our database.

3. KYC & Identity Verification Processing

We utilize authorized third-party identity verification partners to securely extract text from KYC documents. This extraction process occurs strictly in volatile memory. Neither CarOrbit Technologies nor our verification partners retain, store, or train AI models on your physical document images. Once the text is verified, the image is permanently destroyed.

4. Data Collection & Internal Telemetry

We collect diagnostic data and platform usage telemetry solely to prevent fraud, detect bot abuse, and improve the "AI Evaluated Price" algorithm.

Zero Data Sale Guarantee: CarOrbit Technologies explicitly guarantees that your personal data, chat history, and phone numbers are never sold, rented, or leased to third-party data brokers or marketing firms.

5. Strict Data Retention Timers

We do not hoard user data. We enforce strict cryptographic timers to automatically purge data when it is no longer required for legal or operational purposes.

Chat Logs

45 Days

In-app chats are permanently destroyed after 45 days to ensure communication privacy.

KYC Data

180 Days

Retained for 180 days after account deletion strictly for fraud investigation purposes.

Wallet Ledger

7 Years

Retained mandatorily to comply with Indian Taxation laws and financial audits.

6. Grievance & Data Deletion Requests

Under the provisions of the Digital Personal Data Protection Act, you possess the absolute right to withdraw your consent for data processing at any time. Upon withdrawal, your account and associated non-financial data will be queued for destruction. You may request data deletion or raise privacy concerns by contacting our Grievance Officer:

Email: grievance@carorbit.in