Privacy policy

Information we use

• Account details. When you sign in, CarLink uses your account identity and sign-in details to connect you with your CarLink IDs, inbox, and orders.
• Orders. To deliver a CarLink ID QR tag, we use the name, phone number, city, delivery address, vehicle type, make/model, plate number, selected plan, and order/fulfilment history that you submit.
• Approved refunds. If a cash-on-delivery refund is approved, we may ask for the account holder and bank or supported wallet details needed to send it. We use those details only to verify and process the refund and retain them only as needed for payment, support and applicable record-keeping obligations.
• CarLink ID contact and conversations. We store the selected contact reason, any optional note, replies, and relevant timestamps so the owner can receive and answer the visitor. The QR link itself uses a random identifier; it does not encode the owner's phone number, address, or plate number.
• Owner alerts. To let a CarLink ID accept visitor notes, its owner must connect and verify at least one device for alerts. CarLink stores that device's push subscription and delivery status. An owner alert may include the visitor's selected reason or note.
• Optional scanner reply alerts. A visitor may choose to receive a browser alert when the owner replies. This is optional and is not required to send the initial note. If enabled, CarLink stores that device's push subscription and verification/delivery status; the alert says that the owner replied and links to the private conversation.
• Essential browser storage. Sign-in uses authentication session storage. If a visitor enables reply alerts, that browser may keep a private conversation verification key in local storage so the visitor can reopen the conversation on that device. Do not share the private conversation link or key.
• Plus scan analytics. For active Plus CarLink IDs, after a visitor continues past the scan notice, CarLink records scan time and a masked network address. A keyed, per-ID pseudonymous network identifier can group repeat activity and support owner-requested blocking. We do not use this to identify a person or determine precise location. Network addresses may be shared or change.
• Basic technical data. Information such as browser, device, and diagnostic data may be processed to deliver, maintain, and protect the website.

How we use information

We use it to authenticate owners; process, confirm, and deliver orders; connect visitors with the correct CarLink ID inbox; deliver owner alerts needed for CarLink ID notes and optional scanner reply alerts; show Plus scan activity; prevent spam, abuse, and unauthorized access; maintain and troubleshoot CarLink; and meet applicable legal obligations.

We do not sell personal information. We do not show a visitor the owner's phone number through the CarLink ID contact flow.

Who processes it

CarLink relies on service providers to support account access, website operation, secure storage, and notification delivery. They may process information as needed to provide these services to CarLink. Data may be processed outside Pakistan. We do not sell personal information or authorize service providers to use CarLink data for their own advertising.

We may disclose information when required by law, to protect people or the service, or as part of a business transfer. We share no more than is reasonably necessary for that purpose.

Retention and your choices

• Conversation-linked notes and replies are scheduled for deletion 30 days after the conversation's last activity. An owner can also delete a conversation sooner. Other stored contact notes may remain until deleted or no longer needed for the service.
• The Plus dashboard shows scan activity from the last 30 days. At present, older raw scan records are not automatically deleted; we retain them for service operation and abuse prevention while we establish a deletion schedule. Network blocks expire after 30 days.
• Order and fulfilment records are retained while needed to handle delivery, support, and business records. If an order is removed, some fulfilment history or vehicle details for an already-issued CarLink ID may remain so its QR contact service continues to work; buyer contact details are removed from the order view.
• Owners can manage connected alert devices, but each CarLink ID needs a verified owner device to accept visitor notes. Scanners may disable optional reply alerts at any time through CarLink or their browser settings. Owners can also turn off individual CarLink IDs and delete conversations from the inbox.

Security and children

We use access controls and database permissions intended to limit private account, order, and conversation data to authorized users and service operations. No internet service can guarantee perfect security; keep your private visitor conversation link confidential and tell us if you believe it has been exposed.

CarLink is designed for vehicle owners and ordinary road users, not children. Please do not submit information about a child unless it is necessary to resolve a safety issue.

Contact and changes

Send privacy questions or requests to carlink056@gmail.com. Please include only the information needed to handle your request. We may update this policy as CarLink changes; the effective date above will show when it was last revised.