Privacy Policy

1. Introduction

Humntn Ventures Pvt Ltd ("Carzorro", "Company", "we", "us" or "our") respects the privacy of individuals who use the Carzorro mobile application, website, and related services (collectively, the "Platform").

Carzorro operates a digital marketplace connecting customers seeking car-washing and related vehicle-cleaning services with independent service providers ("Vendors").

This Privacy Policy explains how we collect, receive, use, store, share, retain, and protect personal information when you access or use the Platform, register an account, participate in the Vendor onboarding process, place or fulfil a Booking, make or receive payments, or contact our support team.

This Privacy Policy applies to Customers who browse, register, or book services through Carzorro; Vendors who register to offer services; individuals associated with a Vendor's business or franchise registration; and individuals who contact Carzorro for support, complaints, or other business-related purposes.

By using the Platform, you acknowledge that you have been provided access to this Privacy Policy. Where consent is required by applicable law, we will seek the appropriate consent before processing your personal data.

2. Personal Information We Collect

We collect only the information reasonably necessary for the purposes described in this Policy, subject to applicable legal requirements.

2.1 Customer Information

When a Customer registers, browses, or places a Booking, we may collect:

• Name and contact details, including mobile number and email address
• Account registration and login information
• Vehicle details, such as vehicle type, model, and other details voluntarily provided
• Service address, locality, and booking location
• Booking history, selected packages, scheduled dates and times, cancellation records, and service completion details
• Payment status, transaction references, refunds, and payment-related records
• Customer ratings, reviews, feedback, complaints, and support communications
• Information voluntarily provided when reporting a service issue or requesting assistance

2.2 Vendor and Franchise Information

To register and operate as a Vendor on Carzorro, we may collect:

• Name, business name, mobile number, email address, and business contact details
• Business address and service locations
• Franchise or outlet details and individual franchise registration information
• PAN details and supporting tax or business documentation, where required
• Aadhaar-related information only where lawfully permitted and reasonably necessary for verification
• Bank account details and information necessary for Vendor settlements
• Information concerning the Vendor's service packages, prices, bidding participation, accepted Bookings, and service performance
• Vendor ratings, complaints, policy violations, and relevant quality assurance records
• Security Deposit records, including the ₹1,000 deposit required for each applicable franchise registration, partial payments, deductions, replenishments, and refunds
• Communications relating to onboarding, verification, account management, and customer service

If a Vendor operates multiple franchise locations, information may be maintained separately for each registration to manage onboarding, booking eligibility, settlement records, and Security Deposit balances.

2.3 Payment Information

Carzorro may process or receive information relating to:

• Booking payments and transaction references
• Payment confirmation and status
• Refunds and disputed transactions
• Vendor settlement records
• Security Deposit payments, adjustments, and refunds
• Relevant bank or payment-provider references

Where payments are processed by third-party payment gateways or financial service providers, those providers may collect and process payment information under their own applicable terms and privacy policies. Carzorro does not intend to collect or store full payment card credentials, card security codes, or payment authentication credentials unless a specific lawful and secure arrangement expressly requires it.

2.4 Technical and Usage Information

When you access the Platform, we may collect certain technical information, where available and appropriate, such as:

• Device type, operating system, and app version
• IP address and basic diagnostic information
• Login timestamps and session-related records
• Platform interactions, feature usage, and error logs
• Security events and information used to detect fraud or unauthorised access

The exact information collected depends on the device, permissions, and features used.

2.5 Location Information

Carzorro may process location information to:

• Identify service locations
• Match Customers with eligible Vendors
• Display relevant service availability
• Facilitate Vendor arrival and booking fulfilment
• Help resolve location-related service disputes

Location information may be entered manually by the User or obtained through device location services where the relevant feature is enabled and permission is granted. You may be able to disable location permissions through your device settings. However, certain location-dependent features may not work correctly without the necessary information.

2.6 Customer Support and Communications

If you contact Carzorro, we may collect your name, contact details, Booking reference, complaint description, and other information you choose to provide. We may maintain records of support interactions to respond to queries, resolve disputes, improve service quality, and meet legal obligations.

3. Purposes for Which We Use Personal Information

Carzorro uses personal information for specific and legitimate business purposes, including the following:

3.1 Account Registration and Management

• Creating and maintaining Customer and Vendor accounts
• Authenticating users and protecting account access
• Verifying Vendor registration information where appropriate
• Managing individual franchise registrations and onboarding status

3.2 Booking and Service Fulfilment

• Displaying available service packages
• Enabling booking requests and Vendor bidding
• Allocating Bookings to eligible Vendors
• Communicating booking confirmations, cancellations, rescheduling, and service updates
• Sharing necessary service-location and contact details with the relevant Vendor

3.3 Payments and Financial Records

• Processing or facilitating Customer payments
• Coordinating Vendor settlements
• Recording Security Deposit payments and balances
• Calculating authorised adjustments, cancellation charges, refunds, and other applicable amounts
• Reconciling transactions and investigating payment disputes
• Meeting applicable tax, accounting, and financial recordkeeping requirements

3.4 Service Quality and Platform Integrity

• Monitoring service completion and customer feedback
• Investigating complaints and reported incidents
• Evaluating Vendor service quality and booking compliance
• Detecting suspicious transactions, misuse, and fraudulent activity
• Enforcing applicable Terms & Conditions and Vendor policies

3.5 Customer Support and Dispute Resolution

• Responding to questions, requests, and complaints
• Investigating booking, payment, and service-related disputes
• Communicating the status of refunds and other remedies
• Maintaining records necessary to resolve recurring issues

3.6 Platform Improvement

• Diagnosing technical errors
• Improving application performance and usability
• Understanding general usage trends
• Developing features and improving operational processes

Where appropriate, we may use aggregated or de-identified information for analysis and reporting.

3.7 Legal and Regulatory Compliance

We may process information where necessary to comply with applicable laws, respond to lawful requests, maintain required records, establish or defend legal claims, and prevent or investigate unlawful activity.

3.8 Marketing and Promotional Communications

Carzorro may send promotional communications only in accordance with applicable law and the relevant consent or communication preferences. Where required, we will obtain consent before sending marketing communications. You may opt out of promotional communications through the available unsubscribe mechanism or by contacting us. Opting out of marketing will not prevent us from sending essential service communications, such as booking confirmations, payment notifications, security alerts, or legally required notices.

4. Legal Basis and Consent

Carzorro will process personal data in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023, and the rules and provisions applicable to the relevant processing activity.

Depending on the circumstances and the provisions in force, processing may be based on valid consent, a legally recognised permitted use, a contractual or service-related necessity where applicable, or another basis permitted by law.

Where consent is required:

• We will provide appropriate information about the purpose of collection and processing
• We will seek consent through an appropriate mechanism
• You may withdraw consent using the applicable method, subject to legal requirements
• Withdrawal of consent will not invalidate processing lawfully carried out before withdrawal
• Certain Platform features may become unavailable if the information is necessary to provide the requested service and no other lawful basis applies

We will not treat access to this Privacy Policy alone as a substitute for obtaining consent wherever separate consent is legally required.

5. How We Share Personal Information

Carzorro does not sell personal information to third parties for their independent marketing purposes. We may share personal information in the following circumstances, limited to what is reasonably necessary and legally permitted.

5.1 Between Customers and Vendors

To fulfil a Booking, Carzorro may share relevant Customer information with the Vendor assigned to the Booking, including:

• Customer name and relevant contact information
• Service address or location
• Vehicle and package details relevant to the service
• Scheduled booking time and service instructions

Vendors may use this information only to fulfil the Booking, communicate about the service, and address relevant service issues. Vendors must not misuse Customer information, sell it, disclose it to unauthorised persons, or use it for unrelated marketing.

5.2 Payment Service Providers

We may share relevant transaction and account information with payment gateways, banks, and other authorised payment service providers to facilitate payments, settlements, refunds, fraud prevention, and reconciliation.

5.3 Verification and Compliance Providers

Where necessary and lawful, we may share relevant Vendor registration or verification information with authorised service providers, verification partners, financial institutions, or professional advisers. Identity documents and Aadhaar-related information will be shared only where legally permitted and necessary for the specified purpose.

5.4 Technology and Operational Service Providers

We may use third-party providers for hosting, cloud infrastructure, analytics, customer support, notifications, security, communications, and technical maintenance. These providers may process personal information on our behalf under appropriate contractual, confidentiality, and security arrangements, where required by law.

5.5 Legal Requirements and Protection of Rights

We may disclose information where required or authorised by applicable law, a valid legal process, a competent authority, or where disclosure is reasonably necessary to investigate fraud, protect safety, enforce our rights, or establish or defend legal claims.

5.6 Business Transfers

If Carzorro undergoes a merger, restructuring, acquisition, sale of assets, or similar business transaction, relevant personal information may be transferred where legally permitted and subject to appropriate safeguards.

5.7 With Your Consent

We may share information for additional purposes where you have provided the required consent or where another lawful basis applies.

6. Aadhaar, PAN and Vendor Verification Documents

Carzorro recognises that identity and tax documents require appropriate care.

• 6.1 PAN information and business documents may be collected where necessary for Vendor onboarding, tax compliance, financial reconciliation, or other lawful business purposes.
• 6.2 Aadhaar information will be requested or processed only where legally permitted and reasonably necessary for a clearly specified purpose.
• 6.3 Where identity verification can be completed using a less intrusive method, Carzorro will consider an appropriate alternative where practicable and legally acceptable.
• 6.4 Carzorro will not require or use Aadhaar information in a manner prohibited by applicable law.
• 6.5 Access to identity documents will be restricted to authorised personnel and service providers who need the information for a legitimate purpose.
• 6.6 Vendors should not submit passwords, one-time passwords, biometric information, or other authentication credentials unless a specific lawful verification process requires an appropriate and secure mechanism. Carzorro will not ask Vendors to disclose Aadhaar authentication OTPs through ordinary customer support communications.
• 6.7 Identity documents will be retained only for as long as necessary for the specified purpose, applicable legal requirements, dispute resolution, or other lawful retention grounds.

7. Cookies, Device Permissions and Similar Technologies

• 7.1 Carzorro may use cookies, software development kits, device identifiers, and similar technologies where necessary for Platform functionality, security, diagnostics, and permitted analytics.
• 7.2 Such technologies may help maintain sessions, remember preferences, identify technical errors, prevent misuse, and understand Platform performance.
• 7.3 Where legally required, Carzorro will provide appropriate notice and obtain consent before using non-essential tracking technologies.
• 7.4 Users may manage available device permissions through their device settings. Browser-based cookie controls may also be available when using a website.
• 7.5 Disabling certain technologies or permissions may affect the availability or performance of some Platform features.

8. Data Security

Carzorro takes reasonable measures to protect personal information against unauthorised access, disclosure, alteration, loss, and misuse.

Depending on the nature of the information and the risks involved, safeguards may include:

• Access controls and role-based permissions
• Authentication and account security measures
• Secure transmission and storage mechanisms where appropriate
• Confidentiality obligations for personnel and service providers
• Monitoring and investigation of suspicious activity
• Backup and recovery procedures
• Procedures for handling suspected data breaches

No digital system can be guaranteed to be completely secure. However, Carzorro will take the security measures required by applicable law and respond appropriately to identified risks. Users must protect their account credentials and promptly report suspected unauthorised access.

If a personal data breach occurs, Carzorro will take appropriate steps to investigate, contain, and address the incident and provide notifications to affected individuals or authorities where required by applicable law.

9. Data Retention and Deletion

Carzorro retains personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal obligations and permitted retention grounds. Different categories of information may have different retention periods.

For example:

• Account Information: Retained while an account is active and for an appropriate period afterwards where necessary
• Booking Records: Retained to manage services, complaints, refunds, and relevant disputes
• Payment and Tax Records: Retained for the periods required by applicable financial, tax, and accounting laws
• Vendor Verification Records: Retained for as long as necessary for onboarding, fraud prevention, legal compliance, and legitimate dispute resolution
• Security Deposit Records: Retained to reconcile deposits, deductions, replenishments, and refunds
• Customer Support Records: Retained as necessary to respond to complaints and establish or defend claims
• Technical and Security Logs: Retained for a period appropriate to their security and operational purpose

When personal information is no longer required and there is no lawful basis for retaining it, Carzorro will take appropriate steps to delete or irreversibly de-identify it in accordance with applicable law.

Certain information may need to be retained after account closure to comply with legal requirements, resolve outstanding payments or disputes, prevent fraud, or establish or defend legal claims.

10. Your Rights and Choices

Subject to the applicable law and the provisions in force, individuals may have rights relating to their personal data, including:

10.1 Access to Information

You may request information about the personal data processed by Carzorro and other information that must be provided under applicable law.

10.2 Correction and Updating

You may request correction or updating of inaccurate, incomplete, or misleading personal information, subject to applicable legal requirements.

10.3 Erasure

You may request erasure of personal data where the applicable law provides that right and retention is no longer necessary or legally required.

10.4 Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent through the applicable mechanism. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

10.5 Grievance Redressal

You may raise a concern or complaint about the handling of your personal information through the contact details provided in this Policy.

10.6 Nomination and Other Statutory Rights

You may exercise any additional rights, including nomination rights, where available under the applicable provisions of Indian data protection law.

10.7 How to Submit a Request

To exercise a privacy right, contact:

Email: Abhishek.singh@carzorro.com
Subject: Privacy Request – Carzorro

Please provide sufficient information to help us identify your account and understand your request. We may request reasonable verification before acting on a request to protect your information against unauthorised disclosure. Carzorro will respond within the timelines prescribed by applicable law. Certain requests may be restricted where the law permits or requires us to retain or process the relevant information.

11. Children's Privacy

Carzorro is designed for individuals who are legally capable of entering into the relevant service transactions. We do not knowingly seek to collect children's personal data in circumstances that violate applicable law.

Where applicable law requires verifiable parental or lawful guardian consent for processing a child's personal data, Carzorro will implement the necessary measures before undertaking such processing, subject to applicable exemptions.

If you believe that a child's personal information has been provided to Carzorro inappropriately, please contact us so that we can assess the matter and take appropriate action as required by law.

12. Third-Party Websites and Services

The Platform may contain links to or integrations with third-party websites, payment services, maps, or other applications. Carzorro is not responsible for the independent privacy practices of third parties operating their own services. Users should review the relevant third-party privacy policies before providing information directly to those services.

Where a third party processes personal information on Carzorro's behalf, Carzorro will take the measures required by applicable law and the relevant contractual arrangements.

13. Cross-Border Data Processing

Carzorro may use technology or service providers whose systems or infrastructure are located outside India. Where personal data is transferred or processed outside India, Carzorro will comply with applicable Indian legal requirements, including any restrictions, conditions, or safeguards that apply to the relevant transfer.

Carzorro will not undertake a transfer prohibited by applicable law.

14. Marketing Communications and Preferences

• 14.1 Carzorro may send service-related communications such as booking confirmations, payment updates, cancellation notifications, settlement information, security alerts, and important policy changes.
• 14.2 Promotional communications will be sent in accordance with applicable law and the relevant consent or communication preferences.
• 14.3 You may opt out of promotional emails or messages using the available unsubscribe mechanism or by contacting Customer Support.
• 14.4 Opting out of promotional messages will not prevent essential communications required to deliver a service, secure an account, complete a transaction, or meet legal obligations.

15. Vendor Data and Confidentiality Obligations

• 15.1 Vendors may receive Customer personal information solely to perform the relevant Booking and fulfil their obligations under the Platform's Terms & Conditions.
• 15.2 Vendors must take reasonable measures to prevent unauthorised access to Customer information.
• 15.3 Vendors must not retain Customer information longer than necessary for the service or a lawful purpose.
• 15.4 Vendors must not use Customer details for independent marketing, unsolicited communications, data resale, or unrelated purposes without an appropriate lawful basis.
• 15.5 Vendors must notify Carzorro promptly if they become aware of unauthorised access, loss, disclosure, or misuse of Customer information obtained through the Platform.
• 15.6 Vendors remain responsible for their own processing of personal data and must comply with applicable legal requirements.
• 15.7 Carzorro may investigate reported misuse of personal information and take proportionate action under its Terms & Conditions, subject to applicable law.

16. Data Breaches and Incident Management

If Carzorro becomes aware of a suspected or confirmed personal data breach, it may take appropriate measures, including:

• Investigating and containing the incident
• Securing affected accounts, systems, or records
• Assessing the nature and extent of the breach
• Taking remedial steps to reduce potential harm
• Notifying affected individuals and relevant authorities where required by law
• Maintaining appropriate incident records

Vendors and other service providers who process information on Carzorro's behalf must cooperate with reasonable incident investigation and response measures and comply with their applicable legal and contractual obligations.

17. Changes to This Privacy Policy

Carzorro may update this Privacy Policy to reflect changes in its services, data-handling practices, technology, or applicable law. The updated version will be published on the Platform with a revised "Last Updated" date.

Where a change is material or additional consent or notice is required by law, Carzorro will provide the appropriate notification and seek consent where necessary. Users are encouraged to review this Policy periodically to remain informed about how their information is handled.

18. Grievance Redressal and Privacy Contact

19. Governing Law

This Privacy Policy will be interpreted in accordance with the laws of India, including applicable Indian data protection and consumer protection legislation.

Nothing in this Policy limits any rights or remedies available to an individual under applicable law.

20. Contact Us