CarsBook is a marketplace for car dealers. To run it, we hold your business details, your listings and the messages you send. This policy explains exactly what that is, what we do with it, and what you can ask us to do about it.
Your vehicle documents are private. The registration certificate, insurance, pollution control certificate and service records you attach to a listing are never published. They are visible only to the specific dealer you choose to share them with, and only after you choose to share them.
1. Who this policy covers
This policy covers the CarsBook Android app and this website. It applies to registered dealer accounts. It does not cover a third party website or app that we link to, which will have its own policy.
2. What we collect
2.1 Details you give us when you register
- Business name, owner name and an optional dealership logo or photo.
- Mobile number and email address.
- Address, city, state and pincode.
- Your dealer verification status, and the reason if you are rejected.
- Your IP address, recorded at registration for the one-trial-per-device control described in section 3.3.
- Your account credentials. Your password is never readable by us in plain text.
2.2 Details you put into the marketplace
- Vehicle listings: make, model, variant, year, fuel, transmission, ownership, kilometres, condition, description, colour, price, city and state.
- Photographs of the vehicle, up to 8 per listing.
- Documents attached to a listing, such as the registration certificate, insurance, pollution control certificate and service records.
2.3 Details created when you use the service
- Conversations and messages you send to other dealers, including photographs, documents and voice messages you share in a chat.
- Offers, counter offers and acceptances, recorded against the vehicle.
- Your plan and subscription history, and payments made for plans.
- Notifications sent to you, and which ones you have read.
- Push notification device tokens, so we can deliver alerts to your phone.
- App analytics and crash logs, used to keep the app working.
2.4 What we do not collect
- No vehicle payment data. CarsBook does not process payments for vehicles, so we never receive your bank details, card details or UPI credentials for a vehicle transaction.
- We do not buy your contact list and we do not sell or rent your details to anyone.
3. Why we use your information
3.1 To verify you are a dealer
We review your registration so that the marketplace only contains real dealer businesses. This is the single most important thing CarsBook does, because trust between strangers doing high value transactions is the whole product.
3.2 To show your listings and other dealers' listings
Your business name, city, state, listing content and photographs are shown to other approved dealers so they can find your stock and contact you. Your mobile number is shown to approved dealers so they can reach you about a listing.
3.3 To run the free plan
When your account is approved we record that the free plan has been used, against your dealer account, your mobile number and your device IP address. This exists to stop the free plan being claimed repeatedly by the same person. Without it the free plan could not be offered at all.
3.4 To let dealers talk and negotiate
Messages, photographs, shared documents, voice messages, offers and counter offers are processed so the two dealers can transact. The offer history is retained so both sides can see the current agreed number and how it was reached.
3.5 To manage your plan
We record your plan, its listing capacity, its start and end date, and any bonus month, so we can enforce your listing limit and tell you when something is about to change. On the free plan we also record the date each of your listings was published, because a free listing runs for a fixed 30 days and then comes down automatically. That date is deleted along with the listing.
3.6 To notify you
We send notifications about new messages, offers, listing activity, verification decisions and plan expiry. These are delivered to the installed CarsBook app on your phone. You can turn them off in your device settings or in the app.
3.7 To keep the service secure and working
We use logs, analytics and crash reports to detect abuse, fix faults and keep the marketplace reliable. We use access rules in our database so that a dealer can only change their own profile, and so that private documents stay private.
4. How private documents are protected
- Documents attached to a listing are stored separately from the public listing data.
- They are not included in any public view, search result, link preview or shared page.
- They are released only to a specific dealer, and only when the dealer who uploaded them chooses to share.
- Access to a document is enforced in our database, not only in the app interface, so it does not depend on a device behaving correctly.
- Chat attachments are readable only by the dealers in that conversation.
You decide who sees a document. If you share one, you are responsible for the consequences of that share.
5. Who we share your information with
We do not sell your information. We share it only with:
- Supabase, which provides our database, authentication and file storage.
- Our payment provider, which processes plan payments only. It never sees vehicle transaction details.
- Expo, which delivers push notifications to your phone on our behalf.
- Our hosting provider, which stores the website and the admin panel.
- Law enforcement or a regulator, where we are legally required to disclose it.
- The other dealer, where you publish a listing, send a message or send an offer. This is the point of the service.
Our CarsBook administrators can see dealer registration and verification information in order to approve, reject or suspend a dealer. They cannot read the private documents attached to a listing through the admin panel.
6. How long we keep your information
- Account and verification data is kept while your dealer account is open, and for a reasonable period afterwards so that we can answer questions about past transactions.
- Listings are kept while they are published, and for a period after they are ended or delisted.
- Messages, offers and shared documents are kept as long as the conversation is active, and for a reasonable period afterwards, because both dealers may need to show what was agreed.
- Payment records for plans are kept for the period required by tax and accounting law.
- Deleted listings can be restored by a CarsBook administrator for a short recovery window, so that a deletion made by mistake can be undone. After that window the data is permanently removed from our systems and from our backups as those backups rotate.
- Analytics logs are kept in aggregate form and are not linked to an individual dealer beyond what is needed for security.
7. Your rights and controls
You are in control of your own data. You can do the following yourself, at any time, without contacting us:
- See and change your details. Edit your dealership profile from inside the app.
- End or delete a listing. Remove any car you have published.
- Stop sharing a document. Withdraw access you have granted to another dealer.
- Turn off notifications. Change this in the app or in your device settings.
- Close your account. Request closure from the Profile screen or by emailing us.
You can also ask us directly. Email support@mobi24.in and we will action the request. We ask you to include the mobile number or email address on your dealer account so we can find you.
- Get a copy of your data. We will send you the registration details, listings, messages and offer records we hold about you. There is no charge for this.
- Correct your data. If something is wrong, we will correct it. If you cannot edit it in the app, tell us and we will fix it.
- Have your data erased. Where the law gives you the right to erasure, we will delete your personal data and confirm it in writing.
- Withdraw consent. Where we rely on your consent, you can withdraw it at any time, and we will stop the processing that relied on it.
Two honest limits. First, we cannot erase records that tax or accounting law requires us to keep, such as a plan payment receipt. Second, we may need to keep a record of a suspended or blocked account where a deal is in dispute. In both cases we will tell you what we are keeping and why.
We respond to a data request within 30 days. If we cannot action a request, we will say so and explain why. If you are unhappy with our response you may complain to the relevant data protection authority.
8. Security
- Account credentials are stored hashed. We cannot read your password.
- Login tokens are held in the device's encrypted secure storage.
- Access to dealer records, listings and documents is enforced by rules in our database rather than by the app alone.
- Private documents and chat attachments are stored in separate, non-public storage.
- Administrative access to the CarsBook panel is restricted and every administrative change is recorded.
No system is perfectly secure. If we discover a breach that affects your data, we will tell you and the relevant authority as required by law.
9. Children
CarsBook is a business service for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will remove it.
10. This website
This website is a set of static files. It has no accounts, no contact form and no server-side processing. Visiting a page does not create a dealer account and does not collect personal data beyond ordinary, anonymous web server logs such as an IP address, a user agent and the page requested. We do not run advertising trackers, analytics beacons or third party cookies on this site.
11. Changes to this policy
We may update this policy as the product changes. The current version is always published on this page. Where a change materially affects how we use your data, we will tell you in the app before it takes effect.
12. How to contact us
For any privacy question, data request or complaint:
- Email support@mobi24.in
- Call +91 99604 55992
- Hours: Monday to Saturday, 10:00am to 7:00pm IST
CarsBook has not yet published a registered postal address. We will add it to this page as soon as it is confirmed. Please do not send original documents to any address until it appears here.
Also read the terms of use, the acceptable use policy, the cookie policy and how to raise a complaint.