Privacy Policy for Camorent Vendor
Last Updated: January 28, 2026
Effective Date: January 28, 2026
Introduction
Welcome to Camorent Vendor ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").
Camorent Vendor is a business-to-business (B2B) platform designed for camera equipment rental vendors to manage their rental business, bookings, inventory, and financial settlements.
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the App.
We collect the following personal information that you provide to us:
Account Information:
- Full name (first and last name)
- Mobile phone number (10-digit Indian format)
- Email address
- Password (encrypted and securely stored)
- Date of birth (for identity verification purposes)
Business Information:
- Company/Business name
- GST Number (Goods and Services Tax Identification Number)
- PAN Number (Permanent Account Number)
- Business verification status
- Vendor role classification (buyer/owner/admin)
Identity Documents:
- Front and back images of government-issued identification documents
- These are stored locally on your device and transmitted securely to our servers for verification
1.2 Operational and Transactional Data
Booking and Rental Information:
- Order details (order names, SKU IDs, product descriptions)
- Rental dates (start and end dates)
- Crew member selections and quantities
- Equipment rental information (quantities, prices)
- Booking status and workflow stages
Financial Information:
- Revenue statistics
- Amount due and pending settlements
- Payment status (paid/pending)
- Settlement request details
- Challan (invoice) images
Images and Media:
- Product condition photos taken during pickup
- Product condition photos taken during return
- Challan/invoice document images
- Equipment photos uploaded for verification
Automatically Collected Information:
- Device token (for push notifications)
- Device type and operating system version
- App version
- Network connection status
- Error logs and crash reports (when enabled)
Location Data: We explicitly do NOT collect or track your geographical location. Location permissions are blocked in the App.
Audio Recordings: While the audio permission may be enabled for future features, we do not currently record audio.
Browsing History: We do not track your web browsing or activities outside the App.
We use the collected information for the following purposes:
2.1 Core Business Functions
- Account Management: Create and maintain your vendor account
- Authentication: Verify your identity during login and sensitive operations
- Business Verification: Validate GST and PAN credentials against government databases
- Order Processing: Facilitate creation, management, and completion of rental bookings
- OTP Verification: Send SMS-based one-time passwords for pickup and return confirmation
- Payment Processing: Calculate settlement amounts and process payment requests
- Documentation: Store challan and product images for record-keeping and dispute resolution
2.2 Communication
- Push Notifications: Send alerts for new bookings, payment updates, order status changes, and reminders
- Customer Support: Respond to your inquiries and provide technical assistance
- Account Updates: Notify you of important changes to your account or our services
2.3 Service Improvement
- Analytics: Analyze usage patterns to improve app functionality (when analytics are enabled)
- Bug Fixes: Identify and resolve technical issues
- Feature Development: Develop new features based on user needs
2.4 Legal Compliance
- Tax Compliance: Maintain records for GST and income tax purposes
- Regulatory Requirements: Comply with applicable Indian laws and regulations
- Fraud Prevention: Detect and prevent fraudulent activities
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Equipment Owners: When you create a booking, the equipment owner will see your business name, contact information, and rental details
- Buyers: If you are an equipment owner, buyers will see your business information when they rent from you
- Settlement Partners: Financial information related to settlements is shared with relevant parties in the transaction
3.2 Service Providers
We may share your information with third-party service providers who assist us in operating the App:
Firebase (Google LLC):
Backend API Services (api.camorent.co.in):
- Purpose: Core business logic, data storage, authentication
- Data Shared: All user-provided information
- Location: Servers located in India
SMS Service Providers:
- Purpose: Delivery of OTP verification codes
- Data Shared: Phone numbers only
- Retention: Deleted after delivery
GST/PAN Verification Services:
- Purpose: Verify business credentials against government databases
- Data Shared: GST and PAN numbers only
3.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Court orders or legal processes
- Government or regulatory investigations
- Protection of our rights, property, or safety
- Compliance with tax authorities (Income Tax Department, GST Council)
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice in the App before your information becomes subject to a different privacy policy.
4. Data Security
We implement industry-standard security measures to protect your information:
4.1 Encryption
In Transit:
- All data transmitted between the App and our servers uses HTTPS encryption (TLS/SSL)
- API requests are secured with Bearer token authentication
At Rest:
- Authentication tokens are stored in your device's secure keychain using Expo SecureStore
- Passwords are hashed using industry-standard algorithms before storage
- Sensitive data uses device-level encryption (Android Keystore, iOS Keychain)
4.2 Access Controls
- Role-based access control (buyer/owner/admin permissions)
- Multi-factor authentication via OTP for critical operations (pickup/return)
- Token-based session management with automatic expiration
- Refresh token rotation for enhanced security
4.3 Data Storage
On Your Device:
- Secure storage for authentication tokens (encrypted)
- Local cache for non-sensitive user profile data (AsyncStorage)
- Temporary storage for images before upload
On Our Servers:
- Encrypted database storage
- Regular security audits and vulnerability assessments
- Firewall protection and intrusion detection systems
- Access logs and monitoring
4.4 Security Best Practices
- Input validation to prevent injection attacks
- Error boundaries to prevent app crashes from exposing sensitive data
- Rate limiting on API endpoints to prevent abuse
- Automatic logout after extended inactivity
Important Notice: While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
Account Data: Retained for the duration of your active account, plus 7 years after account closure for tax and legal compliance (as per Indian Income Tax Act)
Booking Records: Retained for 7 years from the date of transaction completion for accounting and dispute resolution
Financial Records: Retained for 7 years as required by Indian tax laws (GST Act, Income Tax Act)
Images and Documents: Retained for 3 years after booking completion, unless required for ongoing disputes
Device Tokens: Deleted immediately upon logout or when push notifications are disabled
Deleted Account Data: Upon account deletion request, we will delete or anonymize your personal information within 30 days, except where retention is required by law
To request deletion of your account and data, please contact us at [contact email].
6. Your Rights and Choices
You have the following rights regarding your personal information:
6.1 Access and Correction
- View Your Data: Access your profile information within the App settings
- Update Information: Correct or update your personal and business information at any time
- Download Data: Request a copy of your data in a portable format (data portability)
6.2 Deletion
- Account Deletion: Request permanent deletion of your account and associated data
- Selective Deletion: Request deletion of specific data (subject to legal retention requirements)
6.3 Communication Preferences
- Push Notifications: Enable or disable push notifications in App settings or device settings
- SMS OTP: Cannot be disabled as it is essential for security verification
6.4 Consent Withdrawal
- Business Verification: You may withdraw consent for GST/PAN verification, but this will limit your ability to receive payments
- Camera Access: Revoke camera permissions in device settings (will prevent product scanning functionality)
- Photo Library Access: Revoke photo access in device settings (will prevent image uploads)
6.5 How to Exercise Your Rights
To exercise any of these rights, please:
- Use the in-app settings menu
- Contact our support team via the App's support section
- Email us at [insert contact email]
- Write to us at [insert postal address]
We will respond to your request within 30 days of receipt.
7. Children's Privacy
The App is intended for business use only and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.
8. Third-Party Links and Services
The App may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.
Third-Party Services Used:
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the new Privacy Policy in the App
- Updating the "Last Updated" date at the top of this document
- Sending a push notification or email (for significant changes)
Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.
10. International Data Transfers
Our services are primarily operated in India. If you access the App from outside India, please be aware that your information may be transferred to, stored, and processed in India where our servers are located and our service providers operate.
By using the App, you consent to the transfer of your information to India and other countries where data protection laws may differ from your jurisdiction.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of personal information collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
- Right to Non-Discrimination: Not receive discriminatory treatment for exercising CCPA rights
To exercise these rights, please contact us using the information provided below.
12. European Union Users (GDPR)
If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR):
- Legal Basis for Processing: We process your data based on contract performance, legal obligations, and legitimate business interests
- Right to Access: Obtain confirmation of data processing and access to your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of personal data ("right to be forgotten")
- Right to Restriction: Restrict processing of your personal data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Lodge a Complaint: File a complaint with your local data protection authority
13. Indian Data Protection Laws
We comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
We are committed to protecting "Sensitive Personal Data or Information" (SPDI) as defined under Indian law, which includes:
- Passwords
- Financial information (bank account, credit card, etc.)
- Physical and mental health records
- Biometric information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Camorent Vendor
Company Legal Name: Camorent India Pvt. Ltd.
Registered Address:
H-65, Gautum Nagar, Green Park, South Delhi, Delhi, 110049
India
Support Email: support@camorent.co.in
Website: www.camorent.com
Phone: +91-8882507989
Business Hours: Monday - Friday, 10:00 AM - 6:00 PM IST
We will respond to all inquiries within 30 days of receipt.
Consent
By using the Camorent Vendor App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
For Play Store Compliance:
This Privacy Policy is compliant with:
- Google Play Developer Program Policies
- Indian Information Technology Act, 2000
- Indian IT Rules, 2011
- CCPA (California Consumer Privacy Act)
- GDPR (General Data Protection Regulation)
- Children's Online Privacy Protection Act (COPPA)
Version: 1.0
Policy ID: CRVND-PP-2026-01