Privacy Policy

1. Who we are

Lowzo (the "Platform") is operated by Ollinio Technologies India Pvt Ltd, a company incorporated under the laws of India.

This privacy policy explains how we collect, use, disclose, and protect your personal information when you use the Lowzo platform, website, and mobile applications.

2. What we collect

We collect only the information necessary to operate the Platform and provide our services to you.

Information you provide directly

• Contact details: Your name, email address (for Google Sign-In), and phone number (for OTP authentication).
• Location: Your device location is collected when you create a request. This location is stored on your profile and refreshed each time you open the app to ensure dealer matching is accurate.
• Search text: The text you type into the Home search bar.
• Requirement details: Vehicle make, model, variant, budget, radius, reference photos, and any notes you provide.
• Exchange vehicle details: Photos and description of your current vehicle if you choose to use the exchange feature.
• KYC documents (for dealers): Aadhaar, PAN, bank statements, and a selfie for identity verification.
• Dealer business information: Business name, category, address, GST number, brands handled, and public listing content.
• Dealer leads: When a buyer unlocks your bid, you receive the buyer's name and phone number.

Information collected automatically

• Device and app data: Operating system, app version, device model, and push notification token.
• Notification preferences: Your opt-in/opt-out choices for push and email notifications.
• Payment reference: Payment gateway reference IDs and success/failure status. We never store your card, UPI, or bank account numbers.
• Bids and offers: All bids placed by dealers and the content of those bids.

3. Why we collect your information

We use your information for the following purposes:

• Reverse-auction and radius matching: To show your request to dealers within your chosen radius.
• Authentication: To verify your identity using OTP (SMS) and Google Sign-In.
• Indicative estimates: To provide loan EMI estimates and trade-in valuations (for planning purposes only).
• Transactional notifications: To send you updates about bids, unlocks, and other important activity.
• Dealer verification: To verify dealer identities and KYC documents before they are allowed to bid.
• Payment processing: To facilitate success fee and post fee payments through Razorpay.
• Bot and fraud prevention: We use reCAPTCHA during phone sign-in to prevent automated abuse.

4. Your consent

We obtain your consent in the following ways:

• OS permission prompts: When you first open the app, you will be prompted to grant permissions for location, camera, and notifications. You can change these settings at any time in your device settings.
• KYC-to-AI opt-in: If you choose to use the AI-powered KYC document verification feature (Aadhaar, PAN, bank statement analysis), you will see a separate, explicit opt-in checkbox that is unticked by default. You can opt in or out at any time.
• Withdrawable consent: You may withdraw any consent you have given at any time by contacting us at support@lowzo.in or adjusting your settings within the app.

5. Who we share your information with

We share your information only with the third parties necessary to operate the Platform. We do not sell your data, use it for advertising, or share it with analytics providers.

What other users see

• Dealers see: Your requirement (vehicle, budget, area), but not your phone number or email.
• Buyers see: Dealer details (name, rating, verification badge) only after they choose to unlock a dealer.
• When a dealer wins: The dealer receives your name and phone number as a "lead" to complete the transaction.

6. International data transfers

Your data is stored primarily in India via Google/Firebase (Mumbai region).

However, some data processing occurs outside India:

• Anthropic (USA): If you opt in to the AI-powered KYC verification, your Aadhaar, PAN, and bank statement images are sent to Anthropic's servers in the USA for document analysis. This requires your explicit, separate consent.
• Web search (USA): Search enrichment queries are processed via Anthropic's web search service in the USA.

By using the search feature, you consent to the transfer of search terms to the USA. By ticking the KYC opt-in checkbox, you consent to the transfer of your KYC documents to the USA for AI-assisted verification.

7. Data retention

We retain your data for the periods set out below. These periods are consistent with the Account & Data Deletion policy.

8. Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
• Document storage: Each user's documents are stored in a per-account, isolated storage bucket with access controls.
• Limited access: Staff access to user data is restricted to authorised personnel who need it to perform their roles (support, fraud prevention).
• Payment security: All payments are processed by Razorpay, a PCI-DSS compliant gateway. Lowzo never stores your card, UPI, or bank account numbers.

9. Your rights under the DPDP Act

Under the Digital Personal Data Protection (DPDP) Act, 2023, you have the following rights:

• Access: Request a copy of the data we hold about you.
• Correction: Update or correct your personal information through the app or by contacting us.
• Erasure: Delete your account and personal data (see Account & Data Deletion).
• Withdraw consent: Withdraw any consent you have given at any time.
• Nominate a representative: You may nominate a representative to act on your behalf for data protection matters.
• Grievance redressal: If you are not satisfied with our response, you may approach the Data Protection Board of India (established under the DPDP Act).

To exercise any of these rights, contact our Grievance Officer at grievance@lowzo.in.

10. Children’s privacy

Lowzo is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it. If you believe we have collected data from a child, please contact us.

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last updated" date.
• Sending an in-app notification to alert you of the change.

We encourage you to review this policy periodically. Your continued use of the Platform after changes are made constitutes acceptance of the updated policy.

12. The lowzo.in website

The Lowzo website (lowzo.in) does not use analytics, tracking cookies, or advertising tools.

Dealer bid requests. When you tap “Get dealer bids” on the website you can choose to fill in a short form with your name, mobile number, the vehicle you want and your city. We also record the page you were on, how you reached the site (for example a search engine or an ad campaign), and the IP address the form was sent from (to block spam). Filling in the form is optional: you can skip it and open the Lowzo app directly.

We use these details only to contact you by phone or WhatsApp about the vehicle you asked about, to help you post your request on the Lowzo app, and to share your request with verified dealers on Lowzo so they can offer you a price. We do not sell your details or use them for unrelated marketing. They are kept only as long as needed to handle your request. To have them deleted at any time, email support@lowzo.in.

So you don’t have to type them again, your browser remembers the name and number you entered on your own device. You can remove this by clearing the site data for lowzo.in in your browser.

If you interact with the website and choose to contact us via email or the contact form, the information you provide will be handled in accordance with this policy.

13. Contact us

If you have any questions, concerns, or requests regarding this privacy policy or your data, please contact us: