Privacy Policy
Last updated: 9 August 2026
DealerBay is a marketplace that connects used-car buyers with local car dealers. This policy
explains exactly what we collect, why we collect it, and what we do not do with it. We collect
only what the service needs to work.
The short version
We sign you in with your phone number, we use your approximate location to show cars near you,
and we tell a dealer your phone number only when you choose to contact them about their car.
We do not sell your personal data, and we do not use it for advertising.
1. Who we are
DealerBay ("we", "us") operates the DealerBay mobile app and the website
dealerbay.in. We are the data controller (called a "Data
Fiduciary" under Indian law) for the personal data described in this policy.
Contact: support@dealerbay.in
2. What we collect and why
Everyone who signs in
| Data | Why |
|---|
| Phone number |
It is your account identity. We have no passwords — you sign in by receiving a one-time
code (OTP) by SMS. Without it there is no account. |
Approximate location
(city, or device location if you allow it) |
To show cars near you and sort results by distance. You can decline the device-location
permission and pick a city by hand instead — the app works either way. |
Notification token
(if you enable alerts) |
A device identifier issued by Google Firebase so we can notify you when a car matching
your saved search is listed. Only created if you allow notifications. |
Buyers
- Cars you view, save and search for — to power your saved list, your search
alerts, and to show dealers anonymous interest counts on their own cars.
- When you contact a dealer — tapping Call or WhatsApp on a car records that
a contact happened, so the dealer knows the enquiry came from DealerBay and can be billed
fairly. See section 3.
Dealers
- Business name, address and contact phone — shown publicly on your store
page so buyers can find and reach you.
- GSTIN — collected at sign-up to verify you are a genuine business. Buyers
never see the number itself; they see only a "GST verified" badge.
- Photo of your shop front — a trust signal shown on your store page.
- Car listings and photos you upload, which are public by design.
What we do not collect
We do not collect your name or email address. We do not collect contacts, call logs, SMS
messages, photos beyond those you deliberately upload, or continuous background location. We do
not ask for Aadhaar, PAN, bank details, or payment card details. We have no advertising
trackers and no third-party analytics SDK in the app.
3. When your phone number is shared
This is the most important thing to understand about DealerBay, so we state it plainly.
- Buyer → dealer. When you tap Call or WhatsApp on a car, you are connected
to that dealer using your own phone. The dealer therefore sees your number, exactly as with any
phone call. We record that the contact happened, on which car.
- Dealer → buyer. A dealer can see a list of buyers who contacted them. Your
number is shown to them only because you chose to call or message them first.
- Browsing is private. Viewing or saving a car does not reveal your
identity to anyone. Dealers see anonymous counts, never who you are.
We never publish your phone number publicly, and we never share it with a dealer you have not
contacted.
4. Who else processes your data
We use a small number of service providers, only to run the service. They act on our
instructions and may not use your data for their own purposes.
| Provider | What they handle |
|---|
| Amazon Web Services (AWS) | Hosting, database and sign-in infrastructure. |
| 2Factor.in | Delivers your sign-in OTP by SMS. Receives your phone number and the code only. |
| Google Firebase | Delivers push notifications, if you enable them. |
We may also disclose data if required by law, or to investigate fraud and abuse of the
marketplace.
We do not sell your personal data, and we do not share it with advertisers or data
brokers.
5. Where your data is stored
Your data is stored on AWS servers, currently in the United States, with appropriate
contractual safeguards for international transfer. SMS delivery is handled in India.
6. How long we keep it
- Account data — while your account is active.
- Contact records (which buyer contacted which dealer) — up to 24 months,
since they underpin dealer billing and dispute resolution.
- Listings — kept while live, and for a period after they are sold or
removed so dealers keep their own history.
- After you delete your account we remove your personal data within 30 days, except where we
must keep records to meet a legal or tax obligation — chiefly dealer invoice records, which
Indian tax law requires us to retain for up to 8 years. Full detail:
how to delete your account.
7. Your rights and choices
- Access and correction — view and edit your profile in the app at any time.
- Deletion — you may delete your account and the personal data attached to
it. See how to delete your account for the exact steps, what
is removed and what we must keep. We action requests within 30 days.
- Location — revoke the permission in your device settings; the app falls
back to a city you choose.
- Notifications — turn them off in your device settings or in the app.
- Grievance — if you are unhappy with how we handled your data, write to the
contact above and we will respond within 30 days, as required by Indian law.
8. Security
Sign-in is passwordless — there is no password to leak. All traffic is encrypted in transit
(HTTPS/TLS), data is encrypted at rest, and one-time codes are never written to our logs and
expire in five minutes. No system is perfectly secure, but we limit what we hold in the first
place so there is less at risk.
9. Children
DealerBay is not intended for anyone under 18, and we do not knowingly collect data from
children. If you believe a child has created an account, contact us and we will remove it.
10. Changes to this policy
If we make a material change we will update the date at the top of this page and, where the
change is significant, notify you in the app. Continuing to use DealerBay after a change means
you accept the updated policy.
11. Contact
Questions about this policy or your data:
support@dealerbay.in