Privacy Policy

Your mobile number, name, email address, language preference and postal addresses; identity verification results, including your name, date of birth and the last four digits of your Aadhaar number received through DigiLocker, your PAN, and your bank account number, IFSC and the account holder name; details of cars you list, including the registration record, photographs, videos and inspection results; offers, messages, viewings, deals, payments, invoices and tax records; support tickets; and device, log and usage information needed to run and secure the service.

We never receive or store your full Aadhaar number. A liveness capture confirms that a real person is present and is compared with the photo on your Aadhaar by an automated face-comparison service run on UKKI's cloud provider in India. The Aadhaar photo we receive through DigiLocker is kept only until the face check is done, and for no more than 30 days. Both pictures are deleted after the check.

To create and secure your account; to verify your identity as the law and our partners require; to list, inspect and show cars; to let buyers and sellers negotiate and complete deals; to handle payments, refunds, payouts, invoices and tax deductions; to collect documents and arrange handover and registration transfer; to prevent fraud and enforce our terms; to answer support requests and complaints; to meet legal, tax and regulatory obligations; and, only if you consent, to send you marketing.

We process your personal data on the basis of your consent, given for each purpose separately and never bundled, and, where the law permits, for legitimate uses such as complying with law, meeting a court order or responding to an emergency. You may withdraw a consent at any time, as described in clause 9.

With the other party to a deal, only to the extent the deal needs: before the buyer's payment is received the other party sees only your locality, and your full name, phone number and address are shown only once it has been received. With partner firms that carry out work on a deal, such as inspectors, document collectors, transport, finance and registration-transfer partners, limited to the job they are given. With service providers who process data on our behalf, including identity verification, SMS and messaging, payments, cloud hosting and storage in India. With lenders and insurers you choose to use. With government authorities, Regional Transport Offices and tax authorities where the law requires. We do not sell personal data.

With the seller's choice, a listing may be published on partner classified sites. A listing never carries the seller's name, phone number or exact address. Photographs of a car may show its registration plate.

Your data is stored on servers in India. It is encrypted in transit, and sensitive identifiers such as PAN and bank account numbers are additionally encrypted at rest. Access by our staff and partners is limited to what their role needs and is logged.

Deal, payment, ledger, invoice and tax records, identity verification results and deal documents are kept for eight years, to meet tax and anti-money-laundering record-keeping obligations; after that, the records are kept only in anonymised form, with every field that identifies you removed, so that the accounts still balance. Photographs, videos and inspection media are deleted after three years. Masked call logs are deleted after one year. Support tickets are deleted after three years. Liveness captures, and the Aadhaar photo they are compared with, are deleted after the face check, and the Aadhaar photo is kept for no more than 30 days. Where a legal hold applies to a record, we keep it until the hold ends.

You may ask to access a summary of your personal data and how it is processed; to correct, complete or update it; to erase data we no longer need to keep by law; to withdraw any consent; to nominate somebody to exercise these rights if you die or become incapacitated; and to have a grievance about our handling of your data redressed. You can manage your consents, devices and account in your account settings, or contact our Grievance Officer as set out in the Grievance Redressal notice. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Withdrawing a consent stops the processing it covered from that point. It does not affect processing already carried out, or records we must keep by law. Withdrawing consent to identity verification may mean you cannot start or complete a deal.

We use cookies that are needed to keep you signed in and to secure the service. We use analytics only if you consent to it.

UKKI is not intended for anyone under 18, and we do not knowingly process the personal data of children.

If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as the law requires.

We may publish a new version of this policy. Where a change affects a purpose you consented to, we will ask for your consent again.

Questions about this policy and requests to exercise your rights go to our Grievance Officer at grievance@ukki.in, or through Help in the app.