Privacy Policy
Last Updated: November 4, 2025
Welcome to OCars ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and related services.
By using the OCars App, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our App.
1. Information We Collect
1.1 Personal Information
We collect the following types of personal information when you use our App:
- Account Information: Full name, email address, phone number, and password
- Profile Information: Profile photo, date of birth, address, and preferred communication methods
- Identity Verification: KYC documents including:
- Aadhaar Card number and document
- Driving License number and document
- PAN Card number and document
- Passport number and document (if applicable)
- Selfie for identity verification
- Financial Information: Payment method details, transaction history, and billing information (processed securely through Razorpay payment gateway)
1.2 Location Information
We collect precise location data when you:
- Search for cars near your location
- Select pickup and drop-off locations for bookings
- Track your trip during active rentals
- Host a car and set its location
Location data is collected using GPS, Wi-Fi, and cellular network information to provide accurate location-based services.
1.3 Vehicle and Booking Information
We collect information related to your car rental activities:
- Booking history, trip details, and rental duration
- Car preferences and search history
- Odometer readings (before and after trips)
- Trip photos (before and after rental)
- Reviews, ratings, and feedback
- Dispute and complaint information
1.4 Host Information
If you are a car host, we collect additional information:
- Vehicle details (make, model, year, registration number, color)
- Vehicle photos and documentation
- Pricing information and availability calendar
- Earnings and payout information
- Bank account or UPI details for payments
1.5 Device and Technical Information
We automatically collect certain technical information about your device:
- Device model, operating system version, and unique device identifiers
- IP address and mobile network information
- App version and installation information
- Crash reports and performance data
- Push notification tokens for device-specific messaging
1.6 Usage Information
We collect information about how you interact with our App:
- App usage patterns, features accessed, and time spent
- Search queries and filters used
- Interaction with notifications
- Customer support communications
2. How We Use Your Information
We use the collected information for the following purposes:
2.1 Service Provision
- Create and manage your account
- Process and manage car rental bookings
- Facilitate communication between users and hosts
- Process payments and manage transactions
- Verify identity through KYC processes
- Provide customer support and respond to inquiries
2.2 Safety and Security
- Verify user identity and prevent fraud
- Monitor for suspicious or illegal activities
- Resolve disputes and investigate violations of our Terms of Service
- Ensure compliance with legal obligations
2.3 Communication
- Send booking confirmations and trip updates
- Notify you about account activity and important changes
- Send promotional offers and marketing communications (with your consent)
- Deliver push notifications for trip status updates
2.4 Improvement and Analytics
- Analyze usage patterns to improve our services
- Develop new features and functionalities
- Conduct research and analytics
- Monitor app performance and fix technical issues
2.5 Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and court orders
- Protect our rights and prevent harm
- Enforce our Terms of Service and policies
3. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Service Providers
We share information with trusted third-party service providers who perform services on our behalf:
- Google Firebase: Authentication, cloud database, file storage, analytics, and push notifications
- Razorpay: Payment processing and transaction management
- OpenStreetMap: Location services and map functionality
- Cloud Infrastructure: Hosting and data storage services
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
3.2 With Other Users
Certain information is visible to other users as necessary for the service:
- Hosts can see renter's name, phone number, and booking details
- Renters can see host's name, contact information, and vehicle details
- Reviews and ratings may be displayed publicly
3.3 Legal Requirements
We may disclose information when required by law, regulation, or legal process, including:
- Responding to subpoenas, court orders, or government requests
- Protecting our rights, property, or safety
- Investigating potential violations of our Terms of Service
- Preventing harm to users or the public
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data transmitted between your device and our servers is encrypted using SSL/TLS protocols
- Secure Storage: Personal information is stored in encrypted databases managed by Google Firebase
- Authentication: Secure password hashing and two-factor authentication (OTP) for account access
- Access Controls: Role-based access controls to limit who can access your information
- Regular Audits: Security assessments and vulnerability testing
- Firebase Security Rules: Database and storage rules to prevent unauthorized access
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce our agreements
- Maintain security and prevent fraud
Specific retention periods:
- Account Data: Retained while your account is active and for 3 years after account closure
- Booking History: Retained for 7 years for financial and legal compliance
- KYC Documents: Retained as required by law (typically 7-10 years)
- Payment Information: Processed securely by Razorpay; we do not store full payment card details
- Location Data: Retained only for active trips and deleted within 30 days after trip completion
You may request deletion of your personal information at any time, subject to legal retention requirements.
6. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
6.1 Access and Portability
- Request access to your personal information
- Request a copy of your data in a machine-readable format
- Review and update your account information through the App
6.2 Correction
- Update or correct inaccurate information
- Modify your profile and preferences
6.3 Deletion
- Request deletion of your account and personal information
- Note: Some information may be retained for legal compliance
6.4 Objection and Restriction
- Object to processing of your personal information for marketing purposes
- Restrict processing in certain circumstances
6.5 Withdraw Consent
- Withdraw consent for data processing at any time
- Disable push notifications in device settings
- Opt-out of marketing communications
6.6 Location Services
- Control location permissions through your device settings
- Note: Some features may not work without location access
To exercise these rights, please contact us using the information provided in the "Contact Us" section below.
7. Third-Party Services
Our App uses the following third-party services that may collect and process your information:
7.1 Google Firebase Services
- Firebase Authentication: User authentication and account management
- Cloud Firestore: Database storage for app data
- Firebase Storage: File and image storage
- Firebase Analytics: App usage analytics and performance monitoring
- Firebase Cloud Messaging (FCM): Push notifications
For more information about Google's data practices, please review their Privacy Policy: https://policies.google.com/privacy
7.2 Razorpay Payment Gateway
Payment processing is handled by Razorpay. Your payment information is processed securely by Razorpay according to their Privacy Policy: https://razorpay.com/privacy/
We do not store your full payment card details. Only transaction IDs and payment status are stored in our system.
7.3 OpenStreetMap
We use OpenStreetMap for map and location services. For information about OpenStreetMap's data practices, visit: https://wiki.openstreetmap.org/wiki/Privacy_Policy
8. Children's Privacy
Our App is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
9. International Data Transfers
Your information may be transferred to and stored on servers located outside your country of residence, including in the United States and other countries where our service providers operate. These countries may have data protection laws different from those in your country. By using our App, you consent to the transfer of your information to these countries.
We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including contractual clauses and compliance with applicable data protection laws.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated Privacy Policy in the App
- Sending you a notification through the App or via email
- Updating the "Last Updated" date at the top of this policy
Your continued use of the App after such changes constitutes acceptance of the updated Privacy Policy.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, please contact us using the information provided below.
12. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including:
- Right of access, rectification, and erasure
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
Our legal basis for processing your personal information includes:
- Performance of a contract (providing car rental services)
- Consent (marketing communications, optional features)
- Legal obligation (KYC verification, financial record keeping)
- Legitimate interests (security, fraud prevention, service improvement)
13. India-Specific Privacy Rights
If you are located in India, your personal information is processed in accordance with the Information Technology Act, 2000 and related rules. You have the right to:
- Access and receive a copy of your personal information
- Correct inaccurate or incomplete information
- Grieve to the grievance officer regarding data processing concerns
14. Contact Us
We will respond to your inquiries within 30 days as required by applicable law.
15. Consent
By using the OCars App, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the App and contact us to delete your account.
This Privacy Policy is effective as of November 4, 2025 and was last updated on November 4, 2025.
© 2025 OCars. All rights reserved.