Privacy Policy

Navrit Auto Private Limited
Effective Date: April 23, 2026  ·  Last Updated: April 23, 2026

1. Introduction

Navrit Auto Private Limited ("Navrit," "we," "us," or "our") is incorporated under the Companies Act, 2013, with its registered office in Bengaluru, Karnataka, India. We operate the website navrit.ai and an AI-powered lead engagement platform for automotive dealers delivered through WhatsApp and other digital channels ("Services").

This Privacy Policy explains how we collect, use, store, share, and protect personal information across all markets where we operate. By using our Services or permitting us to process data on your behalf, you agree to the practices described in this Policy.

We operate under the data protection frameworks of the following jurisdictions:

2. Information We Collect

We collect the following categories of personal information:

• Contact Information: Name, phone number (including WhatsApp number), email address, city/location
• Vehicle Interest Data: Vehicle preferences, purchase intent, test drive requests, finance and insurance enquiries, service history
• Communication Data: Content of messages exchanged via WhatsApp and other channels in connection with dealer services; conversation timestamps and metadata
• Device and Usage Data: IP address, browser type, operating system, pages visited, time on page, referral source
• Dealer-Provided Lead Data: Customer contact details, enquiry records, purchase stage, DMS export data shared by dealer partners
• Business Information (Dealers): Dealership name and location, authorised staff contact details, DMS credentials (where applicable)
• Financial Data (Dealers): Billing and payment information for platform subscription fees

3. How We Use Your Information

We use personal information strictly for the following purposes:

• Delivering AI-powered lead re-engagement and customer communication services on behalf of dealer partners
• Sending WhatsApp messages, reminders, and follow-ups branded as the relevant dealer
• Analysing interaction patterns to improve dealer sales conversion and service quality
• Training and improving our AI models — using anonymised and aggregated data only
• Managing billing, accounts, and platform access for dealer partners
• Detecting and preventing fraud, abuse, or unauthorised access
• Complying with our legal obligations across all jurisdictions in which we operate

We do not use personal data for advertising, profiling for third-party commercial purposes, or any purpose not listed above without your explicit consent.

4. Legal Basis for Processing

Our legal basis for processing personal data varies by jurisdiction:

• Consent: Where you have provided clear, affirmative consent — including opting in to receive WhatsApp messages from a dealer partner. Consent may be withdrawn at any time.
• Contractual Necessity: Where processing is required to perform our Services under an agreement with a dealer partner.
• Legitimate Interests: Where processing is necessary for our legitimate business interests (such as fraud prevention and service improvement), provided these interests do not override your fundamental rights.
• Legal Obligation: Where applicable law requires us to process or retain data.

In Indonesia, we obtain consent in Bahasa Indonesia where required by UU PDP. In the Philippines, we register relevant data processing systems with the National Privacy Commission (NPC) as required by RA 10173. In Malaysia, we process personal data only for lawful purposes under the PDPA 2010 and do not transfer data outside Malaysia without adequate safeguards.

5. WhatsApp Business Messaging

We operate via the WhatsApp Business Platform (Meta Platforms, Inc.) to send communications on behalf of dealer partners. The following apply in all markets:

• All WhatsApp messages are sent under the branding and authority of the dealer whose name appears in the conversation
• You will only receive messages if your contact details were provided to the dealer during an enquiry or service visit, or if you have explicitly opted in
• You may opt out at any time by replying STOP to any message — opt-out is processed within 24 hours
• Message content is processed by our AI systems to generate relevant, contextual responses
• We do not sell, rent, or share WhatsApp contact data with third parties for their marketing
• WhatsApp's own Privacy Policy (Meta) also applies to your use of the WhatsApp platform

6. Data Sharing

We share personal information only in the following limited circumstances:

• Dealer Partners: Interaction outcomes, lead qualification status, and re-engagement summaries necessary for the dealer to serve you — shared only with the dealer that holds the original customer relationship
• Technology Service Providers: Cloud infrastructure providers, AI model providers, and communication API providers who process data exclusively on our behalf under data processing agreements with equivalent protections
• Legal and Regulatory Authorities: Where required by court order, regulation, or lawful government request in any jurisdiction where we operate

We do not sell, rent, or trade personal information with any third party for their independent use.

7. International Data Transfers

Personal data may be processed in India and other countries where our technology providers operate (including the United States and Singapore). We ensure appropriate safeguards govern any cross-border transfers, including:

• India: Transfers are subject to requirements under the DPDPA 2023 and any Central Government notifications regarding permitted geographies
• Indonesia: Data is primarily processed in Indonesia or in countries with comparable data protection standards as required by UU PDP; strategic sector data is stored on servers within Indonesian territory where mandated
• Philippines: Cross-border transfers are conducted only where the recipient country provides adequate data protection per NPC guidelines or through NPC-approved binding corporate rules
• Malaysia: Personal data is not transferred outside Malaysia without the consent of the Data Subject or approval under the PDPA 2010, except where exemptions apply

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations:

• Active customer interaction data: Retained for the duration of the dealer relationship plus 3 years
• WhatsApp communication logs: Retained for 2 years from last interaction
• Dealer account and billing data: Retained for 7 years post-contract (tax and audit compliance)
• Anonymised analytics data: Retained indefinitely

You may request deletion of your personal data at any time. We will fulfil deletion requests within 30 days except where retention is required by law.

9. Data Security

We implement appropriate technical and organisational measures to protect personal information, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls with least-privilege principles
• Regular security assessments and penetration testing
• Incident response protocols with breach notification procedures compliant with DPDPA 2023, UU PDP, RA 10173, and PDPA 2010 requirements

In the event of a personal data breach that poses a risk to individuals, we will notify affected parties and relevant authorities within the timelines required by applicable law.

10. Your Rights

You have the following rights regarding your personal data, subject to applicable law in your jurisdiction:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion / Erasure: Request deletion of your personal data where no lawful basis for retention exists
• Withdraw Consent: Withdraw consent for data processing at any time without affecting the lawfulness of prior processing
• Opt Out of Communications: Opt out of WhatsApp messages by replying STOP, or by contacting us directly
• Data Portability: Receive your personal data in a structured, machine-readable format where technically feasible
• Objection: Object to processing based on legitimate interests
• Lodge a Complaint: Raise concerns with the relevant data protection authority in your country (India: Data Protection Board; Indonesia: Ministry of Communication and Digital; Philippines: National Privacy Commission; Malaysia: Personal Data Protection Commissioner)

To exercise any of these rights, contact our Privacy Team at privacy@navrit.ai. We will respond within 30 calendar days.

11. Children's Privacy

Our Services are directed exclusively to businesses (automotive dealers) and individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe we may have collected data from a child, please contact us immediately at privacy@navrit.ai.

12. Cookies and Tracking

Our website uses essential cookies required for site functionality and optional analytics cookies to understand how visitors interact with our site. You may disable non-essential cookies through your browser settings. We do not use tracking cookies for advertising or cross-site profiling.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via our website and, where feasible, by direct notification. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of our Services after the effective date of changes constitutes acceptance of the updated Policy.

14. Grievance Officer and Contact

For privacy-related questions, complaints, or to exercise your rights:

Navrit Auto Private Limited
Bengaluru, Karnataka, India
Email: privacy@navrit.ai
Website: navrit.ai

Grievance Officer (India — DPDPA 2023):
Gaurav Jain, CEO
gaurav@navrit.ai
Response time: within 30 days of receipt

Data Protection Officer (Indonesia — UU PDP):
Contact via privacy@navrit.ai

Data Protection Officer (Philippines — RA 10173):
Contact via privacy@navrit.ai