Privacy Policy

Who we are

CarJio (carjio.com) operates an online marketplace where private owners and dealers list used cars for sale to buyers in India. When this policy says “we”, it means CarJio.

Data we collect

Account data

When you sign in we use email one-time passcodes (OTP) or Google sign-in. From this we receive your email address and, for Google sign-in, your name and profile photo. We store your name, email, phone number and role (buyer or seller) in your profile.

Listing and vehicle data

If you list a car, we store the details you enter (make, model, year, kilometres, ownership, price, city, description and highlights), the photos and videos you upload, and the documents you provide for verification (such as the registration certificate, insurance and service book).

Documents

Verification documents are stored in a private bucket and are never shown to buyers. Buyers only ever see that a document was provided and the outcome of our review. Where we capture details from a document, we keep only non-identifying metadata (for example the last four digits of a number, or an expiry date) — not the full document contents.

Usage and analytics

We record privacy-light events — such as a listing being viewed, saved, compared or contacted, and searches performed — to power Trending, Most-Viewed and recommendations. These events are append-only and are never readable by other users; we read them only in aggregate. We do not sell your data or use third-party advertising trackers.

How we use your data

• To create and secure your account and let you sign in.
• To publish your listing and show it to interested buyers.
• To compute the Trust Score, Transparency Score, Fair Price Analysis and Verification level shown on listings.
• To detect duplicate or fraudulent listings and keep the marketplace safe.
• To improve discovery (recommendations, collections and trending) using aggregated engagement.

Legal bases and sharing

We process data to perform our contract with you (running the marketplace), to meet our legitimate interest in a trustworthy service, and to comply with the law. We use Supabase for our database, storage and authentication, and Vercel for hosting; they process data on our behalf under their own security commitments. We do not sell personal data.

Data retention

We keep account and listing data while your account is active. Sold or removed listings and their media may be retained for a reasonable period for fraud prevention and dispute resolution, then deleted.

Your rights

You can access, correct or delete your profile and listings from your dashboard, or by contacting us. To delete your account and associated data, email privacy@carjio.com.

Cookies

We use a small number of cookies and local storage entries — see our Cookie Policy for the full list.

Contact

Questions about this policy? Email privacy@carjio.com.