1. Introduction
Welcome to Karto. Karto is a multi-vendor online marketplace that connects customers with local restaurants, grocery stores, pharmacies, retail shops, and delivery partners. This Privacy Policy explains how we collect, use, disclose, process and protect your personal information whenever you use our website, mobile application, or any services offered by Karto. By using our services, you agree to this Privacy Policy.
2. Information We Collect
Depending on how you use Karto, we may collect different types of information:
Customer Information
- Full Name
- Email Address
- Mobile Number
- Delivery Address
- Saved Addresses
- Profile Photo (Optional)
- Order History
- Payment Information
- Location Data
Vendor Information
During vendor registration and verification, we may collect:
- Business Name & Owner Name
- Mobile Number & Email Address
- Shop Address & Operating Hours
- GST Number (if applicable)
- FSSAI License (for food businesses)
- Shop License
- PAN Card & Aadhaar Card
- Bank Account Details (Name, AC No, IFSC)
- Cancelled Cheque or Bank Proof
- Business Registration Documents
- Store Images & Tax Information
Delivery Partner (Rider) Information
To verify delivery partners and ensure safe deliveries, we may collect:
- Full Name & Date of Birth
- Mobile Number & Email Address
- Residential Address & Profile Photo
- Aadhaar Card & PAN Card
- Driving License & License Number
- Vehicle Registration Certificate (RC)
- Vehicle Number & Type
- Insurance & Pollution Certificate (PUC)
- Bank Account Details (Name, AC No, IFSC)
- Emergency Contact
- Live GPS Location during deliveries
- Device Information
3. Identity Verification
To maintain a safe marketplace, Karto verifies the identity of vendors and delivery partners. Verification may include:
- • Aadhaar Verification
- • PAN Verification
- • Driving License
- • Business License
- • GST Verification
- • FSSAI Verification
- • Vehicle Verification
- • Bank Account
These documents are used only for verification, fraud prevention, legal compliance, and providing marketplace services.
4. Permissions Used
Karto may request the following permissions depending on the features you use:
- Location (for delivery)
- Camera (upload profile or product images)
- Gallery/Photos
- Notifications
- Internet Access
- Phone Number verification (OTP)
5. How We Use Data
- Create your account & Process orders
- Deliver products & Process payments
- Verify identity & Customer support
- Improve app performance
- Marketing & Personalized recommendations
- Push notifications & Security monitoring
6. Fraud Prevention
- Verify your identity & business ownership
- Detect suspicious activities
- Prevent fake accounts & payment fraud
- Verify delivery partner eligibility
- Prevent unauthorized access
- Investigate complaints or disputes
7. Location Information
We collect location information only to show nearby vendors, calculate delivery charges, track deliveries, and improve delivery accuracy. You can disable location access anytime through your device settings.
8. Payment Information
Payments are securely processed through trusted third-party payment providers. Karto does not store your complete debit card, credit card, UPI PIN, or banking passwords on our servers.
9. OTP Verification
We use OTP verification to authenticate users and secure accounts. Your mobile number is used solely for verification, transaction alerts, and order updates.
10. Cookies & Tracking
We may use cookies, local storage and similar technologies to:
- Remember sessions
- Improve performance
- Understand behavior
- Enhance security
- Analyze traffic
11. Data Sharing
We never sell your personal information.
We may share limited information with:
- • Vendors to fulfill orders
- • Delivery Partners for order logistics
- • Customers for order tracking
- • Payment Gateway & Banking Partners
- • Identity Verification & OTP Providers
- • Cloud Hosting & Analytics Providers
- • Government Authorities (when legally required)
12. Vehicle Information
For delivery partners, Karto collects:
- Vehicle Number & Type
- Registration Certificate (RC)
- Insurance Details
- Pollution Certificate (if applicable)
13. Bank Information
For vendors and partners, Karto collects:
- Account Holder Name & Bank Name
- Account Number & IFSC Code
- UPI ID (if applicable)
- Cancelled Cheque or Bank Proof
14. Data Security
- 🔒 HTTPS & SSL/TLS Encryption
- 🔒 Secure Authentication
- 🔒 Password Hashing & Encryption
- 🔒 Secure Cloud Infrastructure
- 🔒 Role-Based Access Controls
- 🔒 Regular Security Audits
- 🔒 Encrypted Document Storage
- 🔒 Secure Payment Processing
- 🔒 Monitoring Against Intrusions
15. Data Retention
We retain your information only as long as necessary to provide services, resolve disputes, comply with laws, and prevent fraud.
16. Your Rights
You have the right to access, correct, or delete your information, request data export, withdraw consent, and disable notifications.
17. Children's Privacy
Karto is not intended for children under 13. We do not knowingly collect their personal information.
18. Third-Party Services
Our services integrate with Payment Gateways, Google Maps, Firebase, Cloud Providers, Analytics, and Notification Services.
19. Account Deletion
Users can request account deletion via support. Upon verification, data is deleted unless legal retention is required.
20. International Data Transfers
Information may be processed or stored on secure servers in different countries where our service providers operate.
21. Policy Updates
We may update this policy periodically. Changes become effective immediately upon publication.
22. Contact Us
If you have any questions regarding this Privacy Policy, please reach out to us.