1. Operator and grievance contact
Showroom 360 is operated by Ashu Sharma, sole proprietor trading as Jagdamba Enterprises. Ashu Sharma is the privacy contact and Grievance Officer. Requests may be sent to support@showroom360.in, through the Contact page, or by recorded delivery to Second Floor No. 17, WZ-61A/8A, Vashisht Park Main, Pankha Road, New Delhi, Delhi 110046. If email returns a delivery failure, use the Contact page or recorded delivery. We may verify a requester’s identity and authority before acting. We address privacy grievances expeditiously and within one month of receipt, or within any shorter period required by applicable law.
2. Our roles
For lead, customer, employee, vehicle, activity, custom-field, document, and campaign information controlled by a Dealership, the Dealership decides the purpose and means of processing and Showroom 360 acts as its data processor. Requests about that Dealership-controlled information are ordinarily routed to the Dealership.
For account registration, waitlist, billing, tax, product security, fraud prevention, support, service administration, Showroom 360 marketing, and legal-compliance information that we determine how to use, we are responsible for the processing described here.
3. Information we handle
- Account and waitlist information such as name, work email, phone, Dealership, branch, role, team size, login events, and account status.
- Dealership Data such as lead and customer contact information, vehicle interests, sources, notes, follow-ups, activities, owners, custom-field values, uploaded documents, reports, and campaign records supplied by authorised Dealership users.
- Billing and tax information such as legal name, GSTIN, billing address, place of supply, invoice contact, selected plan, seats, coupon or negotiated discount, mandate and payment-provider identifiers, transaction status, refunds, credit notes, and reconciliation records.
- Support, device, security, and usage information such as communications, IP address, browser or device details, login and audit events, error and performance logs, and actions needed to secure and support the service.
4. Arbitrary custom fields and documents
Dealership owners may define arbitrary fields and document fields. The field name does not change the Dealership’s responsibility to establish necessity, lawful purpose, notice, permission, restricted access, accuracy, retention, and deletion. Technical availability is not a representation that collecting a particular document is lawful.
Identity and finance information—including Aadhaar, PAN, bank statements, driving licences, and finance applications—may be uploaded only under the restricted conditions in the Terms. Where Aadhaar information is used, the Dealership must independently comply with Aadhaar-specific requirements, offer alternatives where required, and avoid collecting or storing an Aadhaar number when the applicable verification method prohibits it.
5. Information the service is not designed for
Do not use Showroom 360 to collect or store passwords, PINs, OTPs, authentication secrets, CVV or complete payment-card credentials, medical or health information, biometric templates, sexual-orientation information, or children’s personal data. Do not submit information for an unlawful, misleading, or undisclosed purpose.
6. Why we process information
- Provide, personalise, secure, maintain, administer, and support the service and follow the Dealership’s lawful instructions.
- Authenticate users, enforce role and branch access, scan uploads, detect misuse, investigate incidents, maintain audit evidence, and protect people, customers, and the service.
- Manage trials, seats, Orders, discounts, mandates, charges, renewals, tax invoices, credit notes, refunds, reconciliation, and operational notices.
- Respond to requests and disputes, enforce the agreement, comply with legal obligations, and establish or defend legal claims.
- Send Showroom 360 marketing to dealership contacts where permitted and honour opt-outs and suppression records.
- Measure capacity, reliability, security, and product performance using aggregated and de-identified information that does not identify a person or Dealership.
7. Payments
Razorpay processes checkout, mandates, recurring charges, and refunds. Showroom 360 does not store complete card, bank-account, UPI credential, PIN, OTP, or CVV information. We retain provider identifiers, transaction status, amount, invoice, tax, refund, credit-note, fraud-prevention, and reconciliation information needed for billing, support, audit, and law.
8. Operational and promotional communications
We send account, security, billing, renewal, payment, support, and product-operation notices to Dealership owners and users. These notices are part of operating the service and may continue while an account or legal obligation remains active.
Showroom 360 marketing to dealership contacts includes an opt-out where required. Dealership campaigns to leads and customers use a Dealership-owned provider account. For those campaigns, the Dealership is the sender and remains responsible for consent, registrations, preferences, templates, suppression, complaints, and lawful content.
9. Sharing and subprocessors
We disclose information only as needed to authorised personnel and service providers; to the Dealership and its authorised users; to professional advisers; to authorities where legally required; to protect rights, security, and the service; or in a genuine business transfer subject to appropriate safeguards. We do not sell personal data.
Our current core service providers are Amazon Web Services for application, database, storage, email infrastructure, logging, backup, and security services in the Mumbai region (ap-south-1); Cloudflare for public-website delivery, security, request metadata, and transmission of waitlist submissions; and Razorpay for billing, mandates, payments, refunds, and related verification. A communication provider connected and controlled by the Dealership processes campaign information under the Dealership’s own account and agreement.
10. Security and privileged access
Current safeguards include encrypted transport, AWS network and database access restrictions, tenant and role controls in the application, and private storage for supported documents with encryption, versioning, secure-transport enforcement, public-access blocking, and malware scanning. Safeguards differ by service component and evolve with risk and technology; no system can guarantee absolute security.
Authorised Showroom 360 personnel may use direct administrative access where reasonably necessary for support, security, maintenance, or legal compliance. Such access is limited by internal authorisation, confidentiality, and purpose. A customer-authorised, time-limited support-access workflow is not guaranteed unless the product or Order expressly states that it is enabled.
11. Retention and deletion
We keep active Dealership Data for the subscription or trial and applicable payment grace. After expiry, we ordinarily retain it for up to 90 days for reactivation, support, disputes, and data return. An authorised owner may request one support-assisted export of data that is reasonably retrievable using our then-available tools and formats without resubscribing. The current self-service lead-workbook export is not a complete account export.
Current in-product deletion of a supported lead or document removes it from ordinary use and archives the record. It does not by itself confirm permanent erasure. An authorised owner may submit a verified permanent-erasure request through support. After the applicable retention or verified request, we initiate deletion or irreversible de-identification of reasonably retrievable operational data, subject to legal holds, security evidence, disputes, technical dependencies, and residual copies expiring through the backup cycle.
Waitlist information is retained until consent is withdrawn, the contact is converted to an account, or 24 months pass after the last meaningful interaction, whichever requires deletion first unless law permits or requires longer retention. Account, security, payment, invoice, tax, credit-note, dispute, and audit evidence may be retained longer where required by law or reasonably necessary for fraud prevention, security, or legal claims. We retain only the categories and periods justified for those purposes.
12. Requests and choices
A person may request access, correction, updating, erasure, consent withdrawal where applicable, grievance handling, or information about processing by writing to support@showroom360.in or using the Contact page. We verify identity and may route a request about Dealership-controlled information to the relevant Dealership.
The Dealership is responsible for first-line handling of requests from its leads, customers, and employees. We provide processor assistance under the Data Processing Addendum. A request may be limited where processing or retention is required by law, needed for security or fraud prevention, concerns another person, or is otherwise permitted to continue.
13. Personal-data incidents
We escalate and investigate reasonably credible personal-data incidents from the time we become aware of them. We provide notices to affected Dealerships, individuals, authorities, and CERT-In when and as required by applicable law. Dealership notices include information reasonably available to help the Dealership assess consequences, respond, and meet its own obligations.
14. Changes
We may update this Policy for law, security, processors, operations, or the service. We post the new version and effective date and give reasonable notice of a material change where appropriate. A change does not authorise a materially different use of Dealership Data contrary to the Data Processing Addendum without the Dealership’s instruction or another lawful requirement.