Privacy Policy

4×4 India / PAUL Store (the “Platform”) is operated by PAUL Foundry Technologies Private Limited (“PAUL Foundry”, “we”, “us”), CIN U62011ML2026PTC014285, based in Shillong, Meghalaya, India.

This Privacy Policy covers the Platform’s website, vehicle Garage, saved loadouts, product discovery, account features, assisted-commerce enquiries and Trail Guide. A seller, WhatsApp, email service or other website you choose to use may have a separate privacy policy.

The information involved depends on the features you use. You may browse public products without signing in.

• Account and contact details: when you sign in, Firebase Authentication processes account identifiers and authentication information. We may receive your user ID, email address and basic profile details that your sign-in provider makes available. We do not ask for your account password in an enquiry.
• Vehicle, shopping and fitment information: vehicle make, model, variant, year, saved Garage vehicles, wishlist entries, loadouts and product preferences.
• Marketplace enquiries: signed-in enquiries may record your account ID, email address, vehicle context, requested items, indicative value, enquiry channel, lead reference, status, creation date and partner attribution information.
• Messages you decide to send: details you enter in WhatsApp, email or other contact channels, including contact details and information necessary to answer your question.
• Trail Guide inputs: the terrain or destination, trip duration, vehicle and optional preferences you submit to generate planning advice.
• Technical and usage information: hosting, authentication, security, and analytics services may handle IP address, browser/device characteristics, event or error information and similar operational metadata as relevant to their services.

For guests, the Platform uses browser local storage to remember a selected vehicle, cart contents, wishlist and currency preferences on that device. This information is not a signed-in marketplace lead merely because you saved it locally.

If you sign in after selecting a guest vehicle, the application may migrate that vehicle to your account’s saved Garage records in Firestore. Browser storage can be cleared through your browser settings. Authentication providers and service infrastructure may also use cookies or similar storage to maintain sign-in and essential website operations.

Vercel Analytics is included to help understand website usage and performance. We do not describe all telemetry as anonymous, and we do not claim that no technical identifiers are processed.

We use relevant information to authenticate accounts; save Garage vehicles and wishlist selections; show vehicle-relevant gear; prepare and respond to customer enquiries; confirm fitment, pricing and seller responsibilities; maintain lead references and follow-up records; prevent misuse; troubleshoot security or reliability problems; and comply with applicable legal obligations.

Information entered into Trail Guide is processed to produce the requested trip-preparation response. We do not use an enquiry or an AI-generated suggestion as an automatically confirmed purchase or technical fitment certification.

We will not treat your acceptance of this policy or ordinary browsing as blanket consent to unrelated marketing. Where a separate opt-in or legal basis is required, that must be obtained through the appropriate interaction.

For signed-in customers, the Platform currently creates a marketplace lead record in Firestore before opening a pre-filled WhatsApp or email enquiry. The record can include product, vehicle, contact and attribution details. Administrators may use this record to handle the enquiry and record its progress.

For visitors who are not signed in, an enquiry can open WhatsApp or email without creating a matching stored marketplace lead. Your chosen messaging or email provider may still process the message under its own policies.

We may disclose the relevant portion of your enquiry to an appropriate supplier, dealer or service partner when needed to check stock, vehicle compatibility, quotations, delivery, installation, warranty or follow-up. We should not share unrelated personal information. Different Partners may separately determine how they handle the enquiries they receive.

The Trail Guide uses a Google-hosted generative AI service. The details you submit to request a Trail Guide response are sent for processing by that provider. Please avoid entering passwords, payment-card details, identity documents or other sensitive information into AI prompts or customer messages.

We use Google Firebase/Google Cloud for identity and data infrastructure, Vercel for website hosting and analytics, and third-party communication channels when you choose to contact us. Other providers may participate in a separately confirmed sale, but automated Razorpay/Shiprocket checkout is not the current flow for unverified marketplace partner products.

Service providers process information under their applicable arrangements and policies. We do not promise that data always stays in India, that every provider is incapable of accessing it, or that user content is never subject to any provider-specific processing terms.

Signed-in Garage information and marketplace leads are stored through Firebase/Firestore. Some guest preferences stay in browser storage on your device. Copies of communications can remain in the messaging or email services through which they were exchanged.

We retain information for as long as reasonably needed for the requested service, customer support, transaction records, dispute handling, fraud prevention and legal obligations, and review deletion requests subject to those needs. We do not promise a fixed retention or deletion period that has not been operationally verified.

Access controls, authenticated sessions and database security rules help restrict account and internal marketplace information. No internet service can guarantee absolute security. Contact us if you suspect unauthorized use of your account or data.

You can avoid creating an account when browsing public catalog information. You can clear guest vehicle, cart or wishlist information through the browser storage controls, and you can request assistance with account or personal-data access, correction, deletion, consent-related questions or a privacy complaint.

Email foundrypaul@gmail.com with “Privacy Request” in the subject, along with enough information for us to identify the relevant account or enquiry. We may need to verify your authority before disclosing or changing personal data. We will review requests under applicable law and explain where a legal retention obligation or other lawful exception applies.

Where processing is based on consent, you may ask how to withdraw that consent. Withdrawing consent may affect features that need the information to work. This published notice does not substitute for a separate consent request where one is legally required.

This marketplace is intended for people able to make lawful purchasing enquiries. Do not submit children’s personal data or another person’s contact details without appropriate authority. If you believe that we have received such data inappropriately, contact us so that we can review it.

Do not submit passwords, complete payment-card details, government identification documents or sensitive health information through the public enquiry and AI interfaces.

Depending on the services used, personal information may be processed by infrastructure or communication providers in India or other locations. Applicable legal restrictions and contractual safeguards must be assessed for the particular processing activity.

We aim to provide clear information consistent with applicable Indian privacy law, including the Digital Personal Data Protection Act, 2023 and notified Rules as their provisions come into force. Publication of this notice does not itself constitute a claim of formal certification or complete regulatory compliance.

For privacy questions, requests or complaints, contact PAUL Foundry Technologies Private Limited, Shillong, Meghalaya, India, at foundrypaul@gmail.com, or use the contact page. We will route your message to the person responsible for addressing it and respond as required by applicable law.

We may update this notice when our products, service providers, legal obligations or data-handling practices change. The last-updated date above identifies the published version. Material changes will be communicated as legally required.