1. Information we may collect

Depending on the way you use CarbiQR, we may collect the following categories of information:

• Basic account or contact details such as mobile number, name, email address if provided, and support request details.
• Vehicle and QR-related details such as QR ID, vehicle type, vehicle number, new vehicle status where number is pending, insurance dates, service dates, service history, and linked showroom or salesperson references.
• Subscription, payment, and order records such as physical QR-linked plan type, activation status, renewal status, Razorpay order or payment references, shipping order details, and related billing or support records.
• Showroom or partner interaction data such as onboarding source, offers, service booking requests, insurance quote requests, reminder activity, support history, and lead-related workflow entries.
• Communication records shared through the website contact form, email conversations, support tickets, in-app actions, onboarding messages, and account-closure or deletion requests.
• Technical and usage information such as browser type, device information, log data, app identifiers, and feature access details needed for security and service operation.
• Push notification tokens and related notification-delivery data where you grant notification permission on a supported device.
• Location information where a public QR scan flow or related request is submitted with device or browser location access enabled.

2. How we use this information

• To create and manage vehicle-linked QR profiles, user accounts, showroom accounts, and authorized internal workflows.
• To support owner contact flows, move requests, tow alerts, and public QR request handling without unnecessarily exposing personal details.
• To maintain service history, reminders, insurance workflows, booking continuity, and linked showroom communication.
• To manage subscriptions, plan renewals, direct QR orders, shipping records, payment verification, confirmations, and related support requests.
• To coordinate with authorized showroom partners, salespersons, and internal admin or employee teams involved in onboarding, support, servicing, or account review.
• To send operational notifications such as move or tow alerts, service reminders, insurance reminders, order updates, subscription reminders, showroom offers, and general platform announcements.
• To improve security, investigate misuse, prevent duplicate or fraudulent actions, and maintain platform reliability.
• To respond to inquiries, correction requests, deletion requests, or showroom closure requests sent through the website, app, or official support channels.

3. Sharing and disclosure

CarbiQR does not sell personal information as a business model. We may share limited and relevant information only in situations where it is necessary to operate the service properly, such as with:

• Authorized internal teams, including admin or employee accounts, handling support, onboarding, security, notifications, payment review, or account management.
• Approved showroom, service, or sales partners when they are part of your activation, support, servicing, reminder, insurance, offer, or account-related flow.
• Technology, hosting, payment, notification, or communication providers who help us operate the platform, including payment processing and push notification delivery.
• Legal or regulatory authorities when disclosure is required by law or necessary to protect our rights and users.

4. Payments, notifications, permissions, and device data

Subscription and direct order payments may be processed through Razorpay or a relevant payment service provider. We may store transaction status, order references, payment identifiers, plan details, and shipping-related information required for verification, activation, order handling, fraud prevention, support, and recordkeeping. Sensitive financial credentials such as full card details, complete UPI credentials, or similar payment instrument data are generally handled by the payment service provider rather than treated as standard website or support data by CarbiQR.

These payment records relate to physical QR-linked vehicle services, direct QR orders, or replacement flows, and not to standalone digital content or virtual goods.

If you allow app notifications, we may collect and store a device push token to send operational alerts, reminders, showroom offers, order updates, and platform notices. If you grant camera permission, it may be used to scan QR codes inside the app. If location access is granted during a supported public QR flow, approximate or precise location data may be attached to the related move or tow request for context.

5. Data security and retention

We apply reasonable administrative and technical safeguards to protect data submitted through our website and platform. While no online system can guarantee absolute security, we take practical steps to reduce unauthorized access, accidental loss, or misuse.

Information may be retained for as long as it is needed for operational, support, subscription, payment, order, compliance, dispute-resolution, fraud-prevention, service-history, reminder, or partner-management purposes, or until removal is reasonably possible under our systems and obligations. Some records may remain in backup, log, accounting, or legal-review systems for a limited period even after an account is deleted or a showroom closure is approved.

6. Your choices and account controls

• You may contact us to update your contact details or request support regarding profile-related information.
• You may choose whether to submit optional information through forms, support channels, and account workflows.
• You may manage camera, notification, and other device-level permissions through your mobile device settings where applicable.
• You may disable push notifications through device settings, although important service alerts may then no longer reach you on that device.
• User accounts may have an in-app account deletion flow. Once completed, access to that account may end, but some records may still be retained where legally, operationally, or financially necessary.
• Showroom accounts may have a closure-request flow rather than instant self-deletion. Approved closure requests may deactivate showroom access and block future login, while records needed for compliance, commissions, payments, dispute review, or historical servicing may be retained.
• You may reach out to us if you need clarification on how your information is being used, corrected, retained, deleted, or reviewed.

7. Policy updates

We may update this Privacy Policy from time to time as our product, app features, partner workflows, or legal requirements evolve. The updated version will apply from the time it is published on this website.