Privacy Policy

KaroCar is an online marketplace for renting cars by the month. This policy explains how KaroCar (“we”, “us”) collects, uses, shares and protects your personal information when you use our website and apps as a customer.

Depending on how you use KaroCar, we collect:

• Account details: your name, email address, phone number and password (which we store in protected form, never in plain text).
• Identity verification information: photos of your CNIC and driving licence, a selfie, and the details we read from them, such as your name, ID and licence numbers, dates and the result of our checks.
• Booking and payment information: the cars you view and request, your rental dates, quotes, invoices and payment status, and the budget you share with a vendor if you choose to.
• Messages and support: what you send us or a vendor through KaroCar, and our replies.
• Technical information: your device and browser type, IP address, and how you use the service. We also keep a sign-in session in your browser’s storage so you stay signed in.

• To create and secure your account, and to send you the one-time codes we use to confirm your email.
• To verify your identity and your licence, and to confirm that you are allowed to book and drive.
• To process your booking requests, issue invoices, take payments and provide support.
• To send you service messages, such as booking updates, reminders and security alerts.
• To prevent fraud, misuse and unlawful activity, and to keep the platform safe.
• To understand how KaroCar is used and improve it.
• To meet our legal obligations and to establish or defend legal claims.

Your identity documents and selfie are used to confirm who you are and that you can drive. You complete this step on your phone, and the images are sent to us over an encrypted connection.

We use this information only for verification, fraud prevention and meeting legal obligations. We do not use it for advertising. A vendor you book with sees what is needed to hand over the car, such as your name and confirmation that you are verified, and not your full identity images unless it is genuinely necessary and lawful.

We do not sell your personal information. We share it only with:

• Vendors you request or book a car from, so they can assess your request, hand over the car and manage the rental.
• Service providers who help us run KaroCar, such as hosting, email and messaging, payment, analytics and identity-checking providers. They may use your information only to provide their service to us.
• Authorities, courts or other parties when the law requires it or when needed to protect people, our rights or the platform, for example to investigate fraud or an accident.
• A buyer or successor, if KaroCar’s business is sold or reorganised, who must continue to protect your information under this policy.

We keep your information for as long as your account is active and for as long as we need it for the purposes above. After you close your account we keep what we are required to keep, for example booking, invoice and payment records and verification records needed for legal, tax or fraud-prevention reasons, and then delete or anonymise it. Incomplete sign-ups that are never verified are removed after a short period.

We use technical and organisational measures to protect your information, including encrypted connections, hashed passwords, access controls and short-lived sign-in tokens. No system is completely secure, so please choose a strong password, keep it private and tell us if you suspect your account has been accessed without your permission.

Subject to applicable law, you can:

• Ask to see the personal information we hold about you.
• Ask us to correct information that is wrong or out of date.
• Ask us to delete your account and information. We may need to keep some records we are legally required to keep, and you will not be able to book while your verification is deleted.
• Object to, or ask us to limit, some uses of your information.
• Choose which service messages you receive where we offer a setting for it.

To use these rights, contact us through the Help centre on our website. We may ask you to confirm your identity first.

We use cookies and browser storage that are needed for the service to work, such as keeping you signed in and remembering a sign-up that is in progress. We may also use analytics tools to understand how the website is used. You can clear or block these in your browser settings, but parts of KaroCar may then not work as expected.

KaroCar is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us personal information, please contact us and we will delete it.

KaroCar and our service providers may process and store your information in Pakistan or in other countries. Where we transfer information abroad we take steps to make sure it stays protected in line with this policy.

We may update this policy from time to time. We will post the new version here with a new date and, for important changes, tell you in the app or by email.

If you have a question about this policy or how we handle your information, please contact us through the Help centre on our website.