Last updated: 22 August 2026
CarBay is a service operated by Ayush Enterprises, a business registered in India ("we", "us"). We provide websites and Google Business Profile optimisation services to car dealerships. This policy explains what data we collect, why, and how we protect it.
From dealers (our customers): business name, address, phone, email, opening hours, vehicle inventory details and photos, and login credentials (passwords are stored only as bcrypt hashes — never in readable form).
From website visitors (your customers): the name, phone number, email and message submitted through enquiry, test-drive, finance or sell-your-car forms. This is passed to the dealer so they can respond to the enquiry.
From Google Business Profile (only with your explicit consent): your business profile details, reviews, ratings and performance metrics.
When you connect your Google Business Profile, you authorise us via Google OAuth 2.0 using the
business.manage scope. We use this access only to:
We request the narrowest scope that supports these features. We do not sell, rent or transfer Google user data to third parties, use it for advertising, or use it to train machine-learning models. Google user data is used solely to provide the features described above, consistent with the Google API Services User Data Policy, including the Limited Use requirements.
If you enable AI-written review replies, the text of the review and your business details are sent to a third-party language-model provider solely to generate suggested reply wording. No other personal data is shared, and you remain in control of whether a reply is published.
We share data only with the service providers needed to run the platform (hosting, image storage, and the language-model provider if AI replies are enabled), and with Google when you have authorised us to act on your profile. We do not sell personal data.
We keep your data for as long as your account is active. You can disconnect Google at any time from your dashboard, which immediately deletes the stored access tokens. On request, or when you close your account, we delete your data and any Google user data we hold.
You may also revoke our access directly at myaccount.google.com/permissions.
You can request a copy of your data, correction of inaccuracies, or deletion at any time by contacting us.
For any privacy question or request, email hello@carbay.in.