Privacy Policy

At ApniGaadi, your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

When you use our service, we may collect the following:

• Search Queries: The lookup codes you enter to search for records. Your search history is stored locally in your browser (localStorage) for the "Recent Searches" feature. Searches are processed by our servers to serve results and are retained briefly (up to one hour, linked to your IP address) for abuse prevention.
• Enquiry Data: When you tap the button to request a detailed report, we record the searched number and your IP address so we can serve your enquiry and measure interest.
• Account Data: If you sign in with Google, we receive and store your email address, name and Google account identifier — nothing else from your Google account, and never your password. We do not post anything or read your Gmail, Drive or contacts.
• Enquiry Communication: If you contact us for a detailed report, we keep what you send us — for example your email address or phone number and the conversation itself.

Data Security & Encryption

All traffic between your device and our servers is encrypted in transit (HTTPS/TLS), and lookup results are additionally encrypted with AES-256-GCM at the application layer. We also implement rate limiting and bot protection to prevent abuse and protect the integrity of our service.

How We Use Your Information

• To provide and improve our lookup service
• To analyze usage patterns and optimize user experience
• To respond to your queries and provide detailed reports
• To comply with legal obligations

Rate Limiting

To ensure fair usage and prevent abuse, we limit the number of searches per device to 15 per day. IP-based rate limiting (30 requests per hour) is also enforced server-side. If you need unlimited access, please contact us using the details below.

Data Storage

Your recent search history is stored in your browser's local storage; you can clear it at any time by clearing your browser's site data. On our servers we keep short-lived abuse-prevention records (search and request counters linked to your IP address, retained for up to 24 hours) and, if you request a report, the enquiry details described above. If you have an account, your account details are kept until you ask us to delete them.

Third-Party Services

We use the following third-party services:

• Google Sign-In: To let you sign in without a password. Google tells us your email, name and account identifier; Google's privacy policy applies to the sign-in itself.
• Google Analytics: To count visits and see which pages are used. It records pages viewed, approximate location, device and browser — never the vehicle numbers you search. Your IP address is anonymised by Google before storage.
• Hosting and infrastructure: Vercel (hosting), Cloudflare (network and bot protection), Supabase (database) and Upstash (abuse-prevention counters).

We do not sell or share your data with advertisers. Analytics tells us which pages get used; it is not linked to your account or to the vehicles you look up.

Your Rights

• You can clear your recent searches at any time by clearing your browser data.
• You can sign out at any time, and ask us to delete your account and everything linked to it.
• You can opt out of Google Analytics with a browser extension or by blocking analytics cookies.
• You can request a copy of, or the deletion of, any personal data we hold about you by contacting us.

Cookies

The site sets these cookies:

• A usage counter so free daily lookups can be enforced (24 hours).
• A sign-in cookie, if you have an account, so you stay logged in (30 days).
• A short-lived sign-in flow cookie that protects the login redirect against tampering (10 minutes).
• Google Analytics cookies (_ga) that count returning visits (up to 2 years). You can block them with any browser setting or extension that blocks analytics, and the site keeps working.

Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting the new policy on this page with an updated date.

Contact Us

Questions about this policy, or want your data deleted? Email us at contact@apnigaadi.app.