Privacy Policy

Who we are

NoCom is a used-vehicle marketplace that connects identity-verified owners directly with buyers. This policy explains what personal data we collect, why, and your rights over it. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

Phone number — when you sign up. It is used to authenticate you and, for a seller, is shown to a buyer only after that buyer pays to unlock your listing.

Your name — read from your Aadhaar via DigiLocker when you verify your identity. We use it to confirm you are a real person and to match it against the RC owner name when you list a vehicle.

Aadhaar number — used once, in real time, to fetch your name and the RC ownership match through our KYC partner. We do NOT store your Aadhaar number.

City / location — the city you select, so buyers see relevant local listings.

Vehicle details and photos — what you upload when listing a vehicle, plus RC data (make, model, year, ownership, insurance and finance status) fetched from the Vahan database.

Payment information — collected and processed entirely by our payment provider (Razorpay). NoCom never sees or stores your card, UPI or bank details.

Device notification token — so we can send you app notifications.

Basic usage and diagnostic data — to keep the app working and secure.

How we use it

We use your data to verify identity and vehicle ownership, publish and show listings, let buyers and sellers contact each other, process payments, send you relevant notifications, and prevent fraud and misuse. We do not sell your personal data to anyone.

Who we share it with

Other users — a seller's name and city are shown on their listings; their phone number is shown only to a buyer who has paid to unlock that specific listing.

KYC partner (Surepass) — performs Aadhaar/DigiLocker identity and RC ownership checks on our behalf.

Payment provider (Razorpay) — processes payments.

Infrastructure provider (Google Firebase / Google Cloud) — hosts the app's database, storage and notifications.

Authorities — where required by law.

How long we keep it

We keep your account and listing data while your account is active. When you delete your account, we remove your profile and listings. Some records (for example payment/transaction records) may be retained where the law requires. Your Aadhaar number is never retained at all.

Security

Data is encrypted in transit (HTTPS). Sensitive actions — verification, payment confirmation, and revealing a seller's phone number — are handled on our servers, not on your device, so they cannot be forged by a modified app.

Your rights

You can access and correct your profile in the app, and delete your account from Account → Settings → Delete account. Under the DPDP Act you may also contact us at support@nocom.app to exercise your rights or raise a complaint.

Children

NoCom is not intended for anyone under 18. We do not knowingly collect data from minors.

Changes

We may update this policy. Material changes will be reflected here with a new effective date, and, where appropriate, notified in the app.