Privacy Policy

GODSVISION MULTI BUSINESS DEVELOPMENT PVT LTD (“IndCars99”, “we”, “us”) operates the IndCars99 website (https://indcars99.com) and the IndCars99 mobile apps. We are the “data fiduciary” for personal data processed through them under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

The Android app is listed on Google Play under the developer name Bliszkot. The listing name is only the publisher account; the service, your account and your data are operated and controlled by GODSVISION MULTI BUSINESS DEVELOPMENT PVT LTD, as described in this policy.

IndCars99 lets you buy and sell pre-owned vehicles, rent vehicles and rent out your own, and lets businesses run advertisements. Access to some features is by paid subscription. By creating an account or continuing to use the service you agree to this policy.

Account & identity

• Name, mobile number and email address; a salted hash of your password (we never store the password itself).
• If you sign in with Google or Apple: your account ID, name and email (and, for Google, your profile picture). Apple may give us a private relay email address instead of your real one.
• One-time passwords (OTPs) we send by SMS to verify your number, and the fact that you verified.
• Account status, membership plan, plan start and expiry dates.

Listings you create (sell and rent out)

• Vehicle details you enter: make, model, year, kilometres, price, location, description, and details such as registration or RC information you choose to provide.
• Photos, 360° walkaround images and videos you upload, and any RC document image you attach.
• For rentals you host: rates, deposit, availability, pickup location and mileage limits.

Bookings & renting

• Booking dates, pickup and return locations and price breakdown.
• The renter’s name, phone, email and driving licence number entered at booking.

Messages & offers

• Chat messages, offers and attachments exchanged with other users or with our support team, and delivery/read status.
• Reports you file against a listing, a user or a chat, including any evidence image and your contact details, and the list of users you have blocked in chat.

Payments & subscriptions

• Plan purchased, amount, tax, currency, status, payment method type (e.g. UPI, card, net banking), and the gateway’s order and payment IDs.
• Invoices we issue, containing your name, email and phone.
• We do not receive or store your full card number, CVV, UPI PIN or bank credentials — those are handled by our payment gateway.

Usage & device data

• Pages and screens viewed, searches and filters, listings you save, and interaction with advertisements (impressions and clicks).
• Device and app information (device type, operating system, app version, IP address, crash logs) and, on mobile, a push-notification token if you allow notifications.
• Approximate or precise location only where you choose to search near you or enter a location for a listing or booking.

We do not sell your personal data. We do not use your chats to train advertising profiles. Advertisements are placed by page and content placement, not by sharing your identity with advertisers.

We share data only with the parties needed to run the service, under contracts that limit what they can do with it:

• Payment gateway (Razorpay) — to process payments and refunds.
• SMS and email providers — to deliver OTPs, receipts and notices.
• Google (Sign-In, Firebase Analytics, Firebase Cloud Messaging) — for sign-in, analytics and push notifications.
• Cloud hosting and storage (including Cloudflare) — to host our servers and store and deliver photos and videos.
• Other users — as described in the next section.
• Authorities and advisers — courts, regulators and law-enforcement when legally required, and our lawyers and auditors under confidentiality.
• Business transfers — a successor if we merge or are acquired, who must honour this policy.

• Public on a listing: vehicle details, photos, price, general location and the listing date.
• Members only: a seller’s or host’s contact details are shown to a buyer or renter with an active membership that includes this feature, or when you choose to contact them.
• Shared with your counterparty: when you make a booking, the host sees your name, phone and driving licence number for that booking. When you chat or make an offer, the other party sees your name and messages.
• Your password, OTPs, payment details and email are never shown to other users.

Subscriptions are paid through Razorpay. Card, UPI and bank details are entered on Razorpay’s secure checkout and are governed by Razorpay’s privacy policy. We receive only a confirmation with the payment ID, status and method type. Rent, deposits and vehicle sale prices are settled directly between users unless a booking screen says otherwise; IndCars99 does not hold those funds.

The mobile app asks for camera access to photograph vehicles for listings, and notification access if you choose to receive alerts. The app does not ask for your device’s GPS location. Permissions are requested only when you use those features and you can withdraw them in your device settings. Photos you capture are uploaded to our servers, where they may be processed automatically (for example, to remove the background and produce a clean vehicle image) before publication.

We use browser storage and similar technologies to keep you signed in (access and refresh tokens), remember preferences and filters, and cache listings so pages load faster (including a service worker). Firebase Analytics may set identifiers to measure usage. You can clear this data in your browser at any time; you will be signed out and some preferences reset.

See our Data Deletion Policy for exactly what is removed and what must be retained.

Under the DPDP Act you may:

• Access a summary of the personal data we hold about you and who we have shared it with.
• Correct or update inaccurate data (most of it can be edited in your profile).
• Erase your data and account — see the Data Deletion Policy.
• Withdraw consent for things that depend on it, such as notifications, camera and location access, at any time in the app or your device settings. Withdrawal does not affect processing already done, and some features may stop working.
• Grievance redressal — complain to us first (below). If unresolved you may approach the Data Protection Board of India.
• Nominate another person to exercise these rights if you die or become incapacitated.

To use these rights, write to indcars99@gmail.com from your registered email or phone. We verify your identity first and reply within 30 days.

We use encryption in transit (HTTPS), hashed passwords, signed access tokens with short expiry, role-based access for staff, and signature verification on payments. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires. Keep your password and OTPs private and sign out on shared devices.

IndCars99 is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Our servers are hosted so as to serve India, but some providers (such as Google and Cloudflare) may process data outside India. We transfer data only to countries and providers not restricted by the Government of India and require them to protect it.

We may update this policy as the service or the law changes. We will change the “Last updated” date above and, for material changes, notify you in the app or by email. Continued use after the effective date means you accept the update.

, GODSVISION MULTI BUSINESS DEVELOPMENT PVT LTD, No 314/5, 16th Main, Opp St.Francis School, Begur Road, Begur, Bangalore, Bengaluru (Bangalore) Urban, Karnataka, 560068. Email indcars99@gmail.com. We acknowledge complaints within 48 hours and aim to resolve them within 15 days.