IT ACT, 2000 & SPDI RULES COMPLIANCE

Privacy Policy

Last Updated: September 2026 • Cartrix Technologies Private Limited • Legal Transparency & Data Safeguards

Encryption256-Bit SSL
Gateway StandardPCI-DSS L1
Your Data Trust Architecture

We store no banking secrets, permanently redact vehicle owner private addresses, and run strict zero-retention search buffers.

Grievance Officer
01

1. Introduction

At CarHatke Services (operated and maintained by Cartrix Technologies Private Limited, an entity incorporated under the Companies Act with its registered office in New Delhi, India), we are deeply committed to safeguarding the digital trust and confidential information of our users.

This comprehensive Privacy Policy outlines the explicit protocols through which we collect, securely store, process, transmit, and protect your information whenever you access service.carhatke.com, use our verification utilities, authorize traffic challan payments, or request 24x7 roadside emergency assistance. We govern our data activities in rigorous adherence to the Indian Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).

02

2. Information We Collect

To provide precise vehicle document validations and seamless automotive support, we collect the following structured categories of data:

Vehicle Registration Details

Vehicle registration alphanumeric strings (e.g., DL01AB1234) provided by you into verification inputs to fetch public RC records and pending traffic court challans.

Contact Information

Your full name, mobile phone number, and email address shared during emergency roadside dispatch bookings, WhatsApp update requests, or payment confirmation requests.

Transaction Information

Unique payment reference identifiers, gateway timestamps, challan amounts, and service transaction status. We never store card numbers or UPI MPINs.

Technical Telemetry Data

Internet Protocol (IP) addresses, operating system version, browser user agents, and aggregated crash telemetry to optimize network response times and prevent bot scraping.

03

3. How We Collect Information

Data collection occurs transparently through direct interactions and system-level authorizations:

  • Direct Submission: Entered when you type a registration number into the query box, request WhatsApp concierge alerts, or book an on-site technician.
  • Helpline & Support Channels: Voluntarily provided when you contact our 24x7 telephone helpline (+91-8287647700) or message our official WhatsApp portal.
  • Automated Session Telemetry: Standard non-identifying telemetry gathered via browser cookies and server access records to maintain server load balance and network reliability.
04

4. How We Use Information

We employ your data strictly within delineated transactional boundaries. We do not sell, rent, or trade your personal data to commercial marketers.

Automated Retrieval & DisplayQuerying official public records to display vehicle fitness, insurance expiration dates, and pending challan fines in an easily readable format.
Traffic Fine Settlement TransmissionRouting authorized funds and vehicle citations to designated government payment gateways and clearinghouses for official dismissal.
Emergency RSA DispatchTransmitting real-time GPS coordinates and contact phone numbers to certified roadside mechanics or flatbed recovery operators.
Receipt & Confirmation DeliveryIssuing digital MoRTH-stamped receipts, payment acknowledgments, and operational tracking URLs via SMS and encrypted messaging.
Fraud Mitigation & Firewall IntegrityMonitoring automated requests to block malicious brute-force attempts and adhere to national cybersecurity directives.
05

5. Vehicle Data Directives

Vehicle details accessed on CarHatke Services are handled in strict adherence to applicable Ministry of Road Transport and Highways (MoRTH) standards and public vehicle register protocols.

Mandatory PII Redaction Protocol

To guarantee owner safety and privacy, private Personally Identifiable Information (PII)—including complete residential street addresses, personal mobile phone numbers, and full unmasked chassis/engine codes—is permanently redacted, masked, or truncated before presentation in search results.

06

6. Payment Security

All transactional checkouts executed on the portal operate over bank-grade 256-bit Secure Sockets Layer (SSL) and Transport Layer Security (TLS 1.3) encrypted connections.

RBI Authorized Gateways

Transactions route exclusively via certified Indian payment aggregators complying with the highest Reserve Bank of India standards.

PCI-DSS Level 1 Certification

CarHatke does not hold, save, or store credit card numbers, CVVs, debit pins, or UPI passwords on any internal database.

07

7. Cookies & Web Analytics

Cookies are micro-data tokens cached temporarily within your browser environment to improve navigational fluidity.

  • Essential Session Cookies: Required to preserve input queries across page refreshes during active challan settlement sessions.
  • Performance & Diagnostics Cookies: Anonymized telemetry evaluating DNS lookup speed, page rendering latencies, and CDN server performance.
08

8. Third-Party Service Providers

We partner with trusted technical and operational infrastructure partners who are contractually bonded under strict nondisclosure agreements:

  • Telecom & SMS Aggregators: Authorized telecom providers dispatching OTPs and order status updates.
  • Meta / WhatsApp Business Solution Providers: Cloud API conduits powering conversational vehicle concierge updates upon explicit user opt-in.
  • Certified RSA Fleet Operators: Licensed towing networks and roadside mechanical engineers receiving real-time coordinates only during active emergency dispatches.
09

9. Data Security Safeguards

Cartrix Technologies implements multi-tiered administrative, procedural, and technological safeguards to prevent unauthorized interception, alteration, or exfiltration:

End-to-End HTTPSEncrypted traffic across all client and backend endpoints.
Firewalled NodesMulti-zone cloud perimeter with automated DDoS shields.
Restricted AccessZero-trust internal authentication with audited administrative logs.
10

10. Data Retention Policy

We operate under a principle of strict storage limitation:

  • Vehicle Search Cache: Transient search queries and cached verification results are retained in memory only for the duration required to complete user review or service booking, after which they are automatically flushed.
  • Financial & Transaction Records: Transaction logs, payment receipts, and governmental challan clearinghouse confirmations are archived for statutory durations required under Indian taxation, accounting, and anti-fraud regulations.
11

11. Your Statutory Rights

Subject to applicable national legislation, vehicle owners and consumers utilizing CarHatke possess the following rights:

Right to Access

Request a copy of formal transaction slips processed under your mobile contact number.

Right to Correction

Rectify erroneous contact email addresses or phone details associated with open support tickets.

Right to Erase / Opt-out

Unsubscribe instantly from non-transactional vehicle status alerts or request customer profile closure.

12

12. Children's Privacy

Our automotive concierge services, roadside emergency logistics, and fine payments are exclusively intended for individuals who have attained legal driving age under the Motor Vehicles Act (18 years or older). We do not knowingly solicit or maintain personal details belonging to minors.

13

13. Policy Modifications

Cartrix Technologies Private Limited reserves the right to revise or adjust this Privacy Policy in response to technological updates, operational adjustments, or statutory amendments under Indian law. Continued engagement with our services represents acknowledgment and concurrence with updated practices.

14

14. Contact Us & Grievance Redressal

In compliance with the Information Technology Act, 2000 and the SPDI Rules, 2011, the official Grievance Officer appointed to handle data security inquiries and redress user concerns is detailed below:

Data Protection & Grievance OfficerCartrix Technologies Private Limited
Registered Corporate Office:SECOND FLOOR, C-47/2, near underpass, Lawrence Road Industrial Area, Keshav Puram, Tri Nagar, New Delhi - 110035 India

privacy@carhatke.com

+91-8287647700

Resolution SLA: Within 30 working days