Last updated 23 October 2026

Privacy policy

This policy explains what CarSpy collects when you use the CarSpy app and this website, why we collect it, who we share it with and what you can ask us to do with it. "CarSpy", "we" and "us" mean the operator of CarSpy. Questions go to support@carspy.in.

What we collect

If you sign up as an inspector

Your name, WhatsApp number, email address, date of birth and gender.
Your country, state, district and local address.
Your driving licence, Aadhaar (as ID proof) and CV.
Your password, which we store only in hashed form.
The credit packs you buy, your credit balance and how you used it.
Everything you add to an inspection: vehicle details, photos, video, audio notes, files, flags and the finished report.
Reviews that clients leave on your published reports.

If you book an inspector

Your name, WhatsApp number and, if you give it, your email address.
The car's make and model, and its year and registration number if you give them.
Where and when you want the inspection, and any notes you add.

When you visit the website

When you sign in, we set one cookie, carspy_fl_session, to keep you signed in. It can't be read by scripts on the page and expires after two hours. We don't use advertising cookies. Our hosting provider keeps standard server logs, such as IP addresses and the pages requested, to run and secure the site.

In the app

The app asks for access to the camera, microphone and files only so you can capture photos, video, audio and documents for an inspection. You can refuse these permissions, but you won't be able to add that kind of evidence.

Why we use it

To review your application and confirm you are who you say you are before switching your account on.
To run your account, sell you credits and keep a record of how they were used.
To create, store and share the inspection reports you make.
To pass a client's booking to the inspector they chose.
To show inspector profiles and reviews on this site.
To contact you about your account, a booking or a report, including on WhatsApp.
To prevent fraud and misuse, and to meet our legal obligations.

We don't sell your personal data, and we don't use it for advertising.

Who sees it

Clients and anyone with the report link. A published report shows the vehicle details, the evidence you captured, your name and the date. Anyone you send the link to can open it.
Visitors to this site. Approved inspectors may be listed with their name, district, state, ratings and reviews. Your documents, phone number, email and address are never shown publicly.
The inspector you book. Your booking details go to that inspector so they can contact you and carry out the inspection.
Our staff. Only people who need it, for example to review applications or answer support requests.
Service providers. Companies that host our servers and files, process payments and send messages for us. They may use your data only to provide that service. Card and bank details are handled by the payment provider, and we never see them.
Authorities. When the law requires it, or to protect someone's safety or our legal rights.

How long we keep it

We keep your account data while your account is open. If your application is rejected or you close your account, we delete your identity documents and personal details, except where we have to keep records by law, such as payment records. Reports you already shared may be kept so that their links keep working for your clients, unless you ask us to remove them. Booking details are kept for as long as needed to handle the booking and any dispute about it.

Keeping it safe

Data travels over encrypted connections, documents and reports are kept on access-controlled servers, and passwords are stored hashed. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.

Your rights

Under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you, you can ask us to:

tell you what personal data we hold about you and who we've shared it with,
correct or update it,
delete it, or close your account,
withdraw consent you gave us, which stops any further use that relies on it,
let someone act for you if you die or can't act yourself.

Email support@carspy.in from the address on your account. We'll reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

CarSpy is not for anyone under 18, and we don't knowingly collect data from children.

Changes to this policy

If we change this policy, we'll update the date at the top. If the change is significant, we'll also tell inspectors by email or in the app before it takes effect.