Privacy Policy

01Information We Collect

We collect the following categories of personal data:

• Information you provide: your name, mobile number, email address and delivery address; vehicle details you add to your garage (make, model, year, engine/variant, registration number, VIN); account credentials; wishlist, cart and saved searches; and reviews or other content you submit.
• Order and payment information: items ordered, billing and shipping details, payment method and transaction reference. Card numbers are collected and processed by our PCI-DSS-compliant payment gateway partners — we never store full card details on our servers.
• Vehicle and fitment data: details from YMME selection, VIN or registration plate decoding, used to match parts to your vehicle.
• Part-scan images: photos you upload for part-number scanning (OCR). These are used only to identify the part and improve the feature, and are not used for any other purpose.
• Usage and device information: IP address, browser and device type, pages visited, search queries and city-level location, collected through cookies and similar technologies.

02How We Use Your Information

We use your personal data to:

• Fulfil orders — process payments, pack and deliver products, and handle returns, refunds and warranty claims.
• Ensure fitment — match parts against your vehicle using YMME, VIN or registration plate data.
• Provide accounts and support — sign-in, order tracking, service bookings, and customer support via phone, WhatsApp, email or chat.
• Improve the Site — personalise recommendations, run analytics and troubleshoot issues.
• Ensure security and legal compliance — prevent fraud and misuse, verify identity, and meet legal obligations.
• Market (with consent) — send offers, order updates and rewards updates. You can opt out at any time.

03Lawful Basis and Consent

Under the DPDP Act, we process personal data with your consent or for legitimate purposes, such as performing our contract with you (for example, delivering an order) and complying with the law.

You may withdraw consent at any time by contacting us. Please note that some services (such as delivery of an order) require the relevant data to function — withdrawing consent may limit what we can do for you.

04Sharing and Disclosure

We never sell your personal data. We share it only with:

• Delivery and logistics partners (delivery address and phone number),
• Payment gateways and payment processors (transaction data),
• Cloud and hosting providers (such as Cloudflare) and analytics providers,
• Government or regulatory authorities when required by law, and
• A buyer or successor entity in connection with a merger, acquisition or reorganisation.

05Cookies and Similar Technologies

The Site uses cookies and similar technologies for the following purposes:

• Essential cookies — needed for the cart, sign-in and language preferences to work.
• Analytics cookies — help us understand how the Site is used so we can improve it.
• Preference cookies — remember your choices, such as language and saved vehicles.

06Data Retention

We keep personal data only as long as needed for the purposes described in this policy or as required by law (for example, tax and accounting records). Order and account data is retained until you close your account or we no longer need it. Part-scan images are not retained longer than necessary for the scanning feature.

07Your Rights

Under the DPDP Act, you have the right to:

• Access the personal data we hold about you,
• Correct inaccurate or incomplete data,
• Erase your data, subject to legal retention requirements,
• Withdraw consent where processing is based on consent, and
• Seek grievance redressal for any violation of your rights.

08Security

We use technical and organisational measures to protect your data — including TLS encryption in transit, hashed credentials and OTPs, access controls and monitoring. No method of transmission or storage is 100% secure, so please keep your account credentials safe and report any suspected misuse to us.

09Children's Privacy

Our services are not directed at children under 18 years of age, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

10Third-Party Links

The Site may link to external websites, such as brand pages and social media profiles. Their privacy practices are governed by their own policies and are not covered by this Privacy Policy.

11Grievance Officer and Contact

If you have a question, complaint or request regarding your personal data, please contact us:

• Email: [email protected]
• Helpline: 1800-AUTOG-IND (toll-free)
• Phone / WhatsApp: +91 80 4567 8900

12Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on the Site with a revised “Last updated” date. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.