Legal
Privacy Policy
Last updated 26 October 2026
This policy explains what personal data Quakeship collects through quakeship.com, the Quakeship account and Quakeship Auto (quakeship.com/auto), why, who can see it, and what you can do about it. The Less Android app has its own privacy policy, linked from the app.
Who we are
Quakeship is an independent software business in India, run by Chandrasekhar Sahoo as a sole proprietorship.
Grievance Officer: Chandrasekhar Sahoo, support@quakeship.com. Write to this address for anything about your data, including complaints.
Two roles
- Your account and your Auto profile: Quakeship decides how this data is used, as described below.
- The customers and other people you add in Auto: the business you add them for, or you when you work on your own, decides what to collect and why, and must have those people’s permission. Quakeship stores and processes that data on the business’s behalf, only to run Auto.
Your Quakeship account
| Data | Why | How long |
|---|---|---|
| Your name and email address | To create your account, address you, and send account email | Until you delete your account |
| Your password, stored only in hashed form | To let you log in. We never store or see the password itself. | Until you change it or delete your account |
| When you signed up, verified your email and accepted the terms | To run the account and show you when it was created | Until you delete your account |
| Sessions: a random token in a cookie, of which we store only a hash | To keep you logged in | 30 days, or until you sign out |
| A record of account emails we sent you (type and time) | To limit how many emails are sent and investigate delivery problems | 31 days |
| Server logs: IP address, page requested, time and browser type | Security and troubleshooting | Up to 180 days |
An account that never verifies its email address is deleted automatically after 7 days.
Call-back requests
If you ask us to call you back about a website, using the form on quakeship.com/websites, we keep your name, mobile number, and what you wrote about your business, with the time you sent it. We use them only to contact you about that request. We don’t keep your IP address with it. A copy goes to a private channel in our team chat (Discord), so we see it quickly. We delete requests after 12 months, or sooner if you ask.
Quakeship Auto: about you
Auto is a car and loan-file tracker for used-car businesses and the agents who work with them. When you use it, it keeps:
- your name and email, from your Quakeship account;
- the mobile number you choose to show the businesses and agents you work with;
- your place in each business: owner, manager, member or agent, a job title, and who you report to;
- your bank codes and the payout % you add to them, which only you see;
- what you do on a car (changes, notes, files), with your name and the time, in that car’s History;
- notifications for you under the bell, kept for 30 days;
- your catalogue link settings, if you make one.
A business can also add you before you join: by email (an invite, which lapses after 30 days if you don’t take it up) or by name and mobile as a team member who hasn’t joined yet. Someone may also record money you put into a car with them, with your name, mobile and email.
Quakeship Auto: about customers and others
Businesses and agents use Auto to keep:
- Buyers and sellers: name, mobile, city, work, PAN, and only the last 4 digits of Aadhaar.
- Their documents: such as bank statements, salary slips, ITR, PAN, RC and insurance. Aadhaar can be kept only as a masked copy (first 8 digits hidden), which the uploader confirms.
- The car: its details, registration, chassis and engine numbers, and photos.
- The loan: its steps and figures, the banks the file is logged with, and the result of the CIBIL check (Passed, Failed or No history). Auto never keeps a credit score.
- Others: bank officers’ names, bank, branch and mobile, kept by each person for themselves, and people who put money into a car (name, amount, mobile, email).
- Notes and History: what was done on each car, by whom and when.
Everything is stored on servers in Mumbai, India.
Who sees what in Auto
| Who | What they see |
|---|---|
| Business owners | Every car in their business, the people on them and their documents |
| Managers and members | The cars handled by themselves and the people who report to them; managers also see cars nobody has taken yet |
| Agents | The cars they added or shared with a business, without the team’s own notes, follow-ups and bank payout |
| Someone who put money into a car | That car’s details and photos and their own amount, never the buyer, seller, loan or documents |
| Quakeship | Only totals for the whole platform (how many businesses, people and cars) and each business’s name and counts. To act on something against our Terms, we can look up one person by email and see their name, how many cars they have and which businesses they’re on, never the cars or customers themselves |
A car nobody has shared with a business is seen only by the person who added it. Bank officers someone keeps in Auto are seen only by them, even on a car they share. A car sent to a business to sell carries only the car and its photos, never the people on it, their documents or the loan. Someone removed from a business loses its cars and documents at once. The app gives Quakeship no view of anyone’s cars, customers or documents, and we don’t open them on the server except to fix a problem you ask us to fix, keep Auto secure, or when the law requires it.
Links that open without logging in
Auto can make four kinds of link for people outside it. Each can be turned off at any time by the person who made it (or the business). Anyone who has a link can open it, so share it only with the person it’s for.
- A car link for a customer shows the car (name, year, fuel, kilometres, owner number) and its photos, with the business’s name and logo. Never the customer, documents, registration number or loan.
- A catalogue lists a person’s cars for sale with their photos, and their prices only if that person turns prices on. Never the registration number, buyer, seller or loan.
- A document link for a bank gives the customer’s name and only the documents chosen when it was made. Made from a car, it also shows the car (with its registration number), the loan asked for and the buyer’s city and work, never their mobile or PAN. It stops working after 1, 3 (the default), 7 or 30 days, as chosen.
- A resell link for a dealer shows one car with its registration number, photos and the price typed when it was made, and the sender’s name and the mobile they chose to show. Never the seller, buyer, documents or loan. It stops working after 1, 3, 7 (the default) or 30 days, as chosen.
We only email you about your account: verification codes, password resets, a notice when your password changes, an invite when someone adds you to a business in Auto, and rare security or legal notices, such as a breach that affects you or an important change to this policy. Everything else in Auto is a notification in the app. We send no marketing.
What we don’t do
- We don’t run advertising, analytics or tracking scripts on quakeship.com or in Auto.
- We don’t sell or rent personal data, or share it for anyone else’s marketing.
- We don’t use the data businesses keep in Auto for anything but running Auto for them.
Cookies
We set two cookies, both needed for the account to work, so there’s no consent banner:
qs_sessionkeeps you logged in. Page scripts can’t read it, and it lasts up to 30 days.qs_signed_intells our pages to show “Account” instead of “Log in”. It holds no personal data.
Auto also remembers in your browser which menu layout to show you.
Who processes data for us
- Amazon Web Services hosts our servers in Mumbai, India, where all account and Auto data is stored.
- An email delivery service sends account emails and invites, so it handles the recipient’s address and the message. It never receives customer data or documents.
- Discord receives a copy of each call-back request (name, mobile number and what you wrote) in our private team channel.
- Our DNS provider also forwards mail sent to quakeship.com addresses, and support email is handled in Gmail.
Some of these providers process data outside India. We only use them to run Quakeship.
How long we keep it
- Cars, customers and their History are kept while the business or person who added them uses Auto, until they delete them or ask us to. Deleting never removes what someone else still works with: a car shared with a business stays with that business, with its photos and the people on it.
- A deleted file disappears from Auto at once, and its contents are erased after 30 days, unless it’s still attached elsewhere in Auto.
- Backups are kept for a limited time and replaced in turn.
- Notifications are kept for 30 days, and invites nobody takes up lapse after 30 days.
Your choices and rights
- Delete your account at any time from your account page. Your login (name, email and password hash) is erased immediately. Your Auto profile and what you added in Auto stay, because a business’s files may depend on them, until you ask us to delete them.
- Delete your Auto data under You in Auto: your own cars, the customers you added for yourself, your bank contacts, codes, links and files, and your place on every team. Cars you shared stay with those businesses. A business’s owner deletes the whole business from its Settings. Or write to support@quakeship.com for a single car or customer, and we confirm when it’s done.
- Correct your name on your account page, and your mobile and bank codes in Auto. To change your email address, write to us.
- Ask what we hold about you, or ask us to correct or erase it, at support@quakeship.com.
- If a business keeps your details in Auto as its customer, ask that business first, since it decides what it keeps. You can also write to us, and we’ll pass your request on and help them act on it.
Security
We protect personal data with reasonable security measures, including encryption in transit and when stored, and access limited by role. If a breach affects personal data, we’ll inform the people affected and the authorities as the law requires. For data a business keeps in Auto, we tell that business promptly.
Age
Quakeship accounts are for people aged 18 and over.
Changes
When this policy changes, we update this page and its date. If a change significantly affects how we use your data, we’ll email account holders first.