Privacy policy

In short: we collect what we need to verify who you are, run auctions and ads safely, and meet our legal duties. We don't sell your data. Google Analytics and the Meta Pixel measure your visit only if you accept measurement cookies. You can ask what we hold, correct it, or ask us to erase it. News and offers are optional and separate. This policy follows the Digital Personal Data Protection Act, 2023 (DPDP Act) and is part of our Terms of use.

1. Who we are

The data fiduciary is Mahendra Developers, Office No. 202, IInd Floor, Queens Corner, Amrapali Marg, Vaishali Nagar, Jaipur, Rajasthan, 302021, which runs AuctionHub at www.auctionhub.live. Our Grievance Officer, Customer care (+91 92160 23283, info@auctionhub.live), handles every privacy request and complaint.

2. What we collect

• Account: mobile number and/or email address, name, city, state, language, and (if you use Google sign-in) your Google account ID and email.
• Identity (KYC): your name as on PAN, PAN number and a copy of the PAN card, the last 4 digits of your Aadhaar and a masked copy (first 8 digits hidden), unless you are a car or bike seller who joined through a team invite and chose not to give them. We never keep a full Aadhaar number.
• Seller invites: if you agree on a call with our team to sell a car or bike, the team enters your name, mobile number, email address, vehicle type and language to send you a personal link to join. If you share them, the team may also prepare your listing with your vehicle's details, photos, video and RC numbers: you see it before you join, and it becomes a draft in your account that you check, may change and submit yourself. We keep only a fingerprint of that link, and when it was sent and opened.
• Ad forms and WhatsApp: if you fill in a form in our Facebook or Instagram ad, Meta passes us your name, mobile number and answers (such as your vehicle, its model year and your city). If you message us on WhatsApp, we see your name, number and messages there.
• Listings: what you list, its photos, videos and documents, and private details such as a vehicle's registration, chassis and engine numbers, which only our team sees.
• Transactions: bids, entry fees and other payments (reference numbers from Razorpay; we never see your card or bank login), invoices, refunds, winners and sales.
• What you agreed to: every box you tick (the document and its version, the sentences, the time, IP address and device), and your answers such as a source-of-funds declaration for larger bids.
• Messages: chats between buyers and sellers, enquiries, consultation requests, buyer requirements, and questions you ask our AI tools.
• Agents: business details, address proof, vehicle papers, and the names and mobile numbers of vehicle owners.
• Technical: IP address, device and browser type, and logs of important actions (such as bids and phone-number views), for security and as evidence.
• Measurement, only if you accept it: the pages you visit, the link or ad that brought you here, and some actions on the site, through Google Analytics and the Meta Pixel (section 9).

3. Why we use it

Consent for one purpose is not consent for another. We will ask again before using your data for anything not listed here.

4. Who sees it

• Other users see you only as a code (for example “Bidder #A284”). After a live auction, the winner and the seller see each other's name and phone number to complete the sale; after a non-live auction our team connects them. In Sell · Buy · Rent, logged-in users can see a seller's phone number, and every view is recorded.
• Our team sees what it needs: the verification team sees KYC documents and private listing details. Access is logged.
• Service providers acting for us, under written agreements: Razorpay (payments), our email and SMS providers (login codes and alerts), identity-verification partners, our hosting provider, Google (sign-in, if you use it, and the website's fonts), Google Analytics and Meta Platforms (the Meta Pixel), only if you accept measurement cookies (section 9), Meta Platforms for the ad forms and WhatsApp chats you start, and a third-party AI service provider that processes listing details, listing documents, photos and the questions you ask, only to produce answers. KYC documents are never sent to AI.
• Others, only when needed: the other side of your transaction to complete it; professional advisers you ask us to deal with; our auditors, insurers and lawyers; regulators, courts and law enforcement where the law requires; and a successor if our business is transferred, after telling you.

We don't sell personal data and don't share it with advertisers. If you accept measurement cookies, Google and Meta receive what section 9 describes. Some providers (for example email or AI) may process data outside India, as the DPDP Act permits.

5. How long we keep it

6. Your rights

6.1 You may ask us for a summary of the personal data we hold about you and how we use it; to correct, complete or update it; to erase data we no longer need; and to nominate someone to exercise your rights if you die or can't. You may also complain to us and, if we don't resolve it, to the Data Protection Board of India.

6.2 Write to our Grievance Officer. We reply within 30 days.

6.3 We can't erase data the law makes us keep (such as anti-money-laundering and tax records); we'll tell you which and for how long.

7. Withdrawing consent

You may withdraw your consent at any time, for the future. Withdrawing consent to identity verification means you can't bid or sell, and we may have to close your account; we'll explain before we do. You can stop news and offers at any time without affecting your account.

8. Security, and if something goes wrong

Our staff will never ask you for a login code, OTP or password, on a call or in a message. Data travels over HTTPS; documents are stored privately and are never at a public address; access is limited to the people who need it and is logged. If a personal data breach happens, we will tell the Data Protection Board and the people affected, as the law requires.

9. Cookies

9.1 Necessary cookies keep you logged in, protect forms, and remember your language and your cookie choice. They are always on.

9.2 Measurement cookies stay off until you press Accept on the cookie banner. With them on, Google Analytics (from Google) and the Meta Pixel (from Meta Platforms, which runs Facebook and Instagram) receive the pages you visit, the link or ad that brought you here, your device and browser type, your approximate location from your internet address, and these actions: creating an account, submitting identity verification, applying as an agent or dealer, sending a listing or an ad, placing a bid (its amount) and paying a fee (its amount and invoice number). We use this only to see which ads and pages bring people and to improve the website. We never send them your name, phone number, email address, documents or messages, and they never run on our team panel, invitation links, identity-verification or payment pages.

9.3 Google and Meta handle this information under their own privacy policies (Google, Meta) and may process it outside India.

9.4 You can change your choice at any time with Cookie settings at the bottom of every page. Choosing Only necessary stops the measurement from then on and removes its cookies from your browser.

10. Children

AuctionHub is only for people aged 18 or over. We don't knowingly process children's data, and we erase it if we find we have.

11. AI features

Our AI advisor, website helper, document explainer, listing writer and listing translation send the listing details, listing documents, photos and the questions you submit to our AI service provider, which processes them on our behalf and only to generate answers. KYC documents are never sent to AI. AI answers are general guidance, not legal or financial advice.

12. Changes

We'll tell you about material changes to this policy and, where the law requires, ask for your consent again.