Privacy Policy

1. Who handles your information

This Policy explains how the operator of Dealers-Drive, identified in the operator and contact details below, handles personal information through https://dealers-drive.com. It covers browsing, authentication, customer accounts, dealer onboarding and administration, vehicle listings, enquiries, saved cars, complaints and support. Independent dealerships separately handle information they receive for their own dealings with customers.

2. Account and authentication information

We collect your name, mobile number, verification status and account details. Customer sign-in currently uses mobile OTP through MSG91. Dealer sign-in supports Google and mobile OTP; dealer onboarding also links verified contact details. Google authentication can supply a Google account identifier, verified email, name and profile image. We do not receive your Google password.

Authentication records include sign-in times, sessions, verification and account-linking records, IP address and browser information. OTP delivery and verification involve MSG91 and telecommunications providers. Email verification and service emails use Resend. Do not send passwords or OTPs in enquiries or support requests.

3. Dealer business and identity information

Dealer onboarding collects the contact person’s name, verified phone and email, business name, address, district, state, pin code, map location, contact channels and services. It also collects chosen personal and business identity documents and relevant tax identifiers. Aadhaar is voluntary; where selected, onboarding asks for a masked copy. The Platform does not automatically mask an uploaded document.

We store document uploads and review decisions for onboarding, fraud prevention and dealer verification. Authorized staff may assist with information collection and record business visits and photographs. Dealer personnel information includes contact details, roles, invitations and membership history. Public dealer profiles display business information and approved portfolio photographs; identity-document copies are not public portfolio content.

4. Enquiries, complaints, saved cars and preferences

We store enquiries, the vehicle and dealership they concern, your name, verified mobile number, any message, and enquiry status and handling records. Submitting an enquiry discloses these contact and message details to the relevant dealership’s authorized personnel and may generate a service email notification. A dealership may then contact you about the enquiry.

Support requests and complaints contain the information you submit, replies, status and internal handling records. Saved cars are associated with your account. Interface preferences, such as a selected location, may be kept in your browser. Do not include another person’s information unless you have authority or another lawful reason.

5. Vehicles and photographs

We collect vehicle registration and specification information, descriptions, prices, listing history and photographs for listing review and publication. Registration-derived information may be obtained through configured vehicle-information services. Photos may incidentally show people, registration marks or locations. Avoid unnecessary personal information and tell support about material that needs correction or removal.

Vehicle photographs may be resized, cropped, optimized or prepared for presentation. Approved listing and business portfolio content is public. Private onboarding documents and internal business-visit evidence have restricted access.

6. Why we use information and applicable grounds

We use information to provide requested account and marketplace functions; verify contact details and dealer applications; review and publish listings; maintain saved cars; route enquiries; send service communications; handle complaints and privacy requests; prevent fraud; secure the service; and meet legal obligations or address disputes.

Processing must have a basis permitted by the law applicable at the time, including consent where required, information voluntarily provided for the requested service where legally permitted, or an applicable legal duty. Accepting the Terms and acknowledging this Policy is not blanket consent to every use, unrelated marketing or unrestricted disclosure. If you decline information necessary for a feature, we may be unable to provide that feature. Public browsing remains available.

As of 24 October 2026, the Digital Personal Data Protection Act, 2023 and Rules, 2025 have phased commencement. The principal processing, notice, consent and individual-rights provisions are scheduled for commencement eighteen months after the November 2025 Gazette publication. We assess requests under law currently in force, including applicable Information Technology Act and 2011 sensitive-personal-data rules; we do not represent future provisions as already operative. Statutory rights apply as they commence.

7. Who receives information

The dealership you enquire about receives your enquiry contact details and message for responding. Its authorized personnel must use them lawfully. Public listings and dealer profiles are visible to other visitors. Authorized platform personnel access information according to their work and permissions, including verification, moderation, customer support and security.

Infrastructure and service providers process information needed to operate the service: hosting and content delivery, PostgreSQL database hosting, object storage for photos and documents, Google authentication and Maps, MSG91 OTP, Resend email, Vercel hosting and analytics, and configured operational logging and monitoring. Our documented infrastructure includes AWS hosting and database services and Cloudflare R2 object storage; monitoring may use Grafana Cloud. Service arrangements can change. We do not assert that all data is hosted by a single provider or exclusively within India.

Providers may process information outside India, subject to applicable transfer requirements. Information may be disclosed where lawfully required by an authority, necessary to investigate fraud or protect legal rights, or as part of a lawful business transfer with appropriate safeguards. We do not authorize dealerships to use enquiry details for unrelated marketing.

8. Cookies, analytics and external services

The site uses session cookies for authentication and security, temporary authentication-flow cookies and an account-state hint in the browser. Browser storage may remember interface preferences. Signing out ends the current session; it does not erase records already stored on the server.

Vercel Web Analytics is included in the application layout and can collect page views and related technical information where enabled by the hosting service, including page URL, referrer, browser, device and approximate location. Its service describes analytics without analytics cookies; authentication cookies remain separate. The current integration is not restricted to public pages and does not itself remove query strings from URLs. Do not place personal or sensitive information in URLs.

Dealer location pages may load an embedded Google Map, which communicates browser and network information to Google and may use Google’s cookies or similar technologies. Opening Google sign-in, Maps or another external link also involves that provider’s own processing. Their privacy notices apply to their services. Policy acknowledgment does not itself authorize an optional tracking purpose where a separate choice is legally required.

9. Security

The Platform uses authenticated sessions, server-side access checks, restricted document access, short-lived document links, validation, rate limits and security logging. We limit access according to roles and operational need. These controls reduce risk but cannot guarantee absolute security. Report suspected misuse through Contact & Support.

Storage, backup and transport protections also depend on deployed infrastructure and providers. We make no unverified promise here about encryption of every record, a compliance certification or exclusive Indian storage.

10. Retention and deletion

Account, dealer document, enquiry, listing, support and agreement records are stored to operate the service and address security, complaints, disputes and legal obligations. Some operational records expire or are removed by specific maintenance processes, but a comprehensive automatic deletion schedule is not currently implemented. This Policy does not promise a fixed retention period or automatic anonymization.

Account closure or a deletion request requires review through support. Certain information may need to remain for an applicable legal duty, unresolved dispute, fraud investigation or evidence of an agreement. Provider logs and backups may have separate handling. We assess the records concerned and explain applicable limitations; closing an account does not instantly erase all copies.

11. Your choices, requests and complaints

Use Contact & Support or the privacy/grievance contact below to request access to information about your data, correction, withdrawal of a permission, account closure or deletion, or to complain about handling. State the account or information concerned and the outcome sought. We may reasonably verify identity or authority. Do not send an OTP, password or unnecessary identity document.

There is currently no self-service account-erasure or enquiry-permission withdrawal control. Support can assess requests, including requests concerning future contact or disclosure. A withdrawal cannot recall information already received by a dealership; you may also need to contact it about its own copies. Necessary support and privacy requests do not require renewed Terms acceptance. Statutory remedies and timelines apply where the relevant provisions are in force.

Account use is intended for adults aged 18 or above. Contact us if you believe a child has provided personal information so we can assess appropriate action under applicable law.

12. Acceptance records, updates and contacts

We record the authenticated account, the dealership where acceptance is made for it, the Terms and Privacy versions and a server timestamp when you affirmatively accept. We do not record acceptance merely because sign-in succeeded. These records help establish the agreement and Privacy Policy acknowledged.

This interim V1 Policy is pending external legal review. We will identify the effective date and version of updates and give further notice or seek a new choice where required. A policy update does not retrospectively expand the purposes of a previous permission. The effective date and operator and grievance/privacy contacts appear below.