The short version
- We collect only what we need to run getautoR: account details, vehicle and service details, documents you choose to upload, and basic device and usage data.
- We never sell your personal data, and we do not use it for third party advertising.
- Location, camera, microphone and notifications are used only after you give permission, and only for the feature you are using.
- AI voice calls tell you they are from an AI agent and may be recorded. You can ask to speak to a person at any time.
- You can see, correct, download or delete your data. Delete your account in the app or by writing to us. See how.
This summary is for convenience. The full policy below is what applies.
01Who we are and what this covers
getautoR is a product of Pronext Softtech Private Limited, a company incorporated in India with its registered office at [Registered office address], India ("getautoR", "we", "us", "our").
This Privacy Policy explains how we collect, use, share and protect personal data when you use any of the following (together, the "Services"):
- our website at www.getautor.co.in;
- the getautoR Dealer Platform, the web and mobile system used by vehicle dealerships and their staff;
- the Customer App, which dealerships offer to their customers, sometimes under the dealership's own brand name and logo (a "white-labeled" app), on Android and iOS;
- the getautoR Voice AI agent, WhatsApp, SMS and email messages, and any support we provide.
If you use a Customer App that shows a dealership's brand, that app is still powered by getautoR and this policy applies to it, together with any privacy notice the dealership gives you.
This policy is written to meet India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and its rules, and the requirements of Google Play, the Apple App Store, Meta and Google platform policies. Where other laws such as the EU or UK GDPR apply to you, you have the extra rights described in Your rights.
02Our role: fiduciary and processor
Data protection law treats companies differently depending on who decides why data is used.
- Data about dealership customers. When a dealership uses getautoR to manage its leads and customers, the dealership decides why and how that data is used. The dealership is the Data Fiduciary (or "controller"), and getautoR acts as its Data Processor. We process that data only on the dealership's instructions and under our agreement with it.
- Data about dealership staff, website visitors and people who contact us. For this data, getautoR is the Data Fiduciary and decides how it is used, as described in this policy.
If you are a customer of a dealership and want to exercise a right over your data, you can contact the dealership directly or contact us. If we receive your request, we will pass it to the right dealership and help them respond.
03Information we collect
Information you give us
- Account and contact details: name, mobile number, email address, city or address, and a password or one time password (OTP) login.
- Dealership details (for dealer accounts): business name, branch, GST number, staff names, roles and work contact details.
- Vehicle details: make, model, variant, registration number, chassis or VIN number, purchase date, insurance and service history.
- Documents you choose to upload for KYC or to keep in your digital document wallet, such as your Registration Certificate (RC), driving licence, insurance policy, pollution certificate (PUC) and identity proof.
- Service and booking details: test ride bookings, service slots, job cards, pickup and drop requests, invoices and feedback.
- Loyalty and referral details: points balance, rewards redeemed, and the name and phone number of a person you choose to refer.
- Messages you send us or the dealership through chat, forms, email or WhatsApp.
- Enquiry form details from our website: name, email, phone, location, interest and message.
Information collected automatically
- Device and app data: device model, operating system, app version, language, IP address, and device or advertising identifiers where permitted.
- Usage data: screens viewed, features used, time and date of activity, and referring pages.
- Diagnostics: crash reports and performance logs, used to fix problems.
- Cookies and similar technology on our website. See Cookies and tracking.
Information from calls
When the Voice AI agent or dealership staff call you through getautoR, we may record the call and create a written transcript and summary. The agent says at the start of the call that it is an AI agent and that the call may be recorded.
Information from others
- Dealerships who add your details as a lead or customer.
- Advertising lead forms, for example Meta (Facebook and Instagram) Lead Ads and Google Ads lead forms, when you submit a form for a dealership that uses getautoR.
- Sign in providers such as Google or Apple, if you choose to sign in with them. We receive your name, email address and profile picture only.
- Verification partners who help confirm that vehicle and identity documents are valid, where you ask for or agree to verification.
- Payment partners, who tell us whether a payment succeeded. We do not receive or store your full card number, UPI PIN or banking password.
Information we do not collect
We do not read your SMS inbox, call logs or full contacts list. We do not collect biometric data such as fingerprints or face data. Where a device uses fingerprint or face unlock to open the app, that check stays on your device and we never receive it.
04App permissions
Our apps ask for device permissions only when you use a feature that needs them. You can refuse or turn off any permission in your phone settings. The rest of the app will keep working.
| Permission | Why we ask | When |
|---|---|---|
| Camera | To photograph or scan documents, your vehicle, or a job card. | Only when you tap to capture. |
| Photos and files | To upload a document or image you choose. We access only the files you pick. | Only when you tap to upload. |
| Location | To show nearby branches, and for live tracking of a pickup, drop or roadside service you request. | Only while you use the feature. We do not track location in the background. |
| Microphone | To send voice notes or talk to the in-app AI assistant. | Only while you record. |
| Notifications | For booking updates, service reminders, renewal alerts and reward updates. | After you allow them. |
| Phone (dealer staff app) | To place calls to leads from within the app. | Only when staff tap to call. |
05How we use information
We use personal data only for the purposes below:
- To provide the Services: create and manage accounts, capture and manage leads, book test rides and service, keep your documents in your wallet, run loyalty and referral programs, and send transactional messages.
- To verify documents (KYC) when you or the dealership request it.
- To communicate with you by call, WhatsApp, SMS, email and in-app notification about your enquiry, booking, vehicle, service or account.
- To power AI features such as lead scoring, follow-up timing, service and renewal predictions, the chat assistant and the Voice AI agent. See AI and automated processing.
- To keep the Services safe: detect fraud, abuse, fake referrals and security threats.
- To improve the Services: fix bugs, measure performance and understand which features are useful, mostly using aggregated or de-identified data.
- To meet legal duties: keep records required by law, respond to lawful requests, and enforce our terms.
- For marketing, only with your consent. Promotional messages are sent only where you have agreed. You can opt out at any time by replying STOP, using the unsubscribe link, or changing notification settings.
We do not use personal data for any purpose that is unrelated to the above without first telling you and, where needed, asking for your consent.
06Legal basis for processing
- Consent. For most processing of personal data, including marketing, precise location and optional features. You can withdraw consent at any time, and withdrawal does not affect processing already done.
- Legitimate uses allowed under Section 7 of the DPDP Act, such as data you voluntarily provide for a specific purpose, and compliance with law or court orders.
- Contract. To provide the Services you or your dealership signed up for.
- Legal obligation. To keep tax, accounting and security records.
- Legitimate interests (where GDPR applies), such as keeping the Services secure and improving them, balanced against your rights.
07AI and automated processing
getautoR uses artificial intelligence to help dealerships work faster. Here is how we keep it fair and transparent:
- AI voice calls. The Voice AI agent always identifies itself as an AI agent. Calls may be recorded and transcribed. You can ask to speak to a human at any time, or ask not to be called again.
- Lead scoring and predictions help dealership staff decide whom to contact first. They do not make decisions that have a legal or similarly serious effect on you. A person at the dealership can review any outcome.
- AI providers. Some AI features use trusted third party model providers. We share only the data needed for the task, under contracts that require them to keep it confidential and secure. We do not allow them to use personal data from getautoR to train their own general purpose models.
- Accuracy. AI can make mistakes. Important information such as prices, bookings and documents should be confirmed with the dealership.
09Google, Meta and Apple data
Google user data
If you sign in with Google or connect a Google service, getautoR's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve the features you can see in the app. We do not use it for advertising, we do not sell it, and people cannot read it unless you ask us to, it is needed for security, or the law requires it.
Meta data
When a dealership connects its Meta (Facebook or Instagram) Lead Ads to getautoR, we receive the details you entered in the lead form so the dealership can contact you. We use this data only for that purpose and handle it according to Meta's Platform Terms. To ask us to delete data received from Meta, follow the steps in Delete your account and data.
Apple
If you sign in with Apple, we receive only the name and email address (or Apple's private relay email) that you choose to share.
No cross-app tracking
Our apps do not track you across apps or websites owned by other companies for advertising. If this ever changes, we will ask for your permission first, including through Apple's App Tracking Transparency prompt on iOS.
11How long we keep data
We keep personal data only for as long as needed for the purpose it was collected, or as long as the law requires. Then we delete it or make it anonymous.
| Data | How long |
|---|---|
| Account and profile | While your account is active. Deleted within 30 days after you delete your account. |
| Uploaded documents | Until you remove them or delete your account. |
| Leads and customer records | As long as the dealership keeps its getautoR account, or until the dealership or you ask for deletion. |
| Call recordings and transcripts | Up to 12 months, unless the dealership sets a shorter period. |
| Invoices and tax records | Up to 8 years, as required by Indian tax and company law. |
| Security and access logs | At least 180 days, as required by CERT-In directions, and then deleted. |
| Backups | Deleted data is removed from backups within 90 days. |
Under the DPDP Act, if you do not use your account for a long time, we may delete personal data that is no longer needed, after giving you advance notice.
12How we protect data
We use reasonable security practices in line with the IT Act, 2000 and recognised industry standards, including:
- encryption of data in transit (HTTPS / TLS) and at rest, including documents in the document wallet;
- role-based access, so dealership staff and our team see only what their role needs;
- multi-factor authentication for administrative access, and logging of sensitive actions;
- regular security reviews, updates and staff training.
No system is completely secure. If a personal data breach happens, we will inform the Data Protection Board of India and affected users as required by law, and take quick steps to limit harm.
13Your rights
Under the DPDP Act, you have the right to:
- Access a summary of your personal data and how it is used, and know who it has been shared with;
- Correct, complete or update inaccurate or incomplete data;
- Erase your personal data when it is no longer needed or when you withdraw consent, unless the law requires us to keep it;
- Withdraw consent at any time, as easily as you gave it;
- Grievance redressal through our Grievance Officer, and then with the Data Protection Board of India;
- Nominate another person to exercise your rights if you die or become unable to act.
If you are in the European Union, United Kingdom or another region with similar laws, you also have the right to data portability, to object to or restrict certain processing, and to complain to your local data protection authority. Residents of California and other US states may have rights to know, delete and correct data, and to opt out of the sale or sharing of data. We do not sell or share personal data for cross-context behavioural advertising.
To use any right, write to autor.pronext@gmail.com from your registered email or phone, or use the in-app settings. We may need to verify your identity. We will respond within 30 days. We will not treat you differently for using your rights.
14Delete your account and data
You can delete your account and the personal data linked to it at any time. This works for the getautoR Customer App, dealership-branded Customer Apps powered by getautoR, and dealer staff accounts.
Option 1: In the app
- Open the app and sign in.
- Go to Profile, then Settings.
- Tap Delete account and confirm.
Option 2: Without the app
- Send an email to autor.pronext@gmail.com with the subject Account deletion request.
- Include the name, mobile number or email used on the account, and the app or dealership name if the app shows a dealership brand.
- We will confirm your identity and complete the request within 30 days, and email you when it is done.
You can also use this email to delete only some data, such as specific documents, call recordings, or data we received from Meta or Google, without deleting your whole account.
What is deleted: your profile, contact details, uploaded documents, vehicle details, booking history, chat history, call recordings and loyalty points. What we may keep: invoices, tax and transaction records the law requires us to keep, and limited records needed to prevent fraud, for the periods listed in How long we keep data. Loyalty points and rewards cannot be recovered after deletion.
15Children
The Services are meant for adults and businesses. They are not directed at children. Under the DPDP Act, a child is anyone under 18 years of age. We do not knowingly collect personal data from children without verifiable consent from a parent or lawful guardian, and we do not track, profile or show targeted advertising to children.
If you believe a child has given us personal data, contact us and we will delete it.
16Where data is stored
We store data primarily on secure cloud servers. Some of our service providers may process data in other countries. When data leaves India, we transfer it only to countries not restricted by the Government of India under the DPDP Act, and we use contracts and safeguards so it stays protected to the standard in this policy.
17Third party links and services
The Services may link to websites or services run by others, such as a dealership website, a payment page, WhatsApp or a map. Their own privacy policies apply to them. We are not responsible for how they handle data.
18Changes to this policy
We may update this policy when our Services or the law change. We will post the new version on this page and update the date at the top. If a change is significant, we will tell you through the app, by email or by another suitable way before it takes effect, and ask for fresh consent where the law requires it.
19Contact and Grievance Officer
For any question, request or complaint about privacy, contact our Grievance Officer, appointed under the Information Technology Act, 2000 and the DPDP Act, 2023. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
If you are not satisfied with our response, you can file a complaint with the Data Protection Board of India.