Privacy Policy

Last updated: 1 January 2025

At CARVO, your privacy matters. This policy explains how we collect, use, and protect your data when you use our vehicle management and repair platform.

About CARVO

CARVO is a comprehensive digital platform for insurance vehicle management in Saudi Arabia. We connect insurers, vehicle owners, and service providers — towing, warehousing, and repair workshops — to streamline the claims lifecycle with transparency and efficiency.

Information We Collect

Personal identification information such as your full name, mobile number, and email address when you register or interact with our platform.
Vehicle information including make, model, year, plate number, and chassis number submitted for repair or towing services.
Location data when you use map features to set pickup or delivery addresses.
Service history and repair records associated with your vehicles.
Device and usage data such as browser type, IP address, and pages visited for platform security and improvement purposes.

How We Use Your Data

To process and manage your vehicle repair, towing, and insurance claim requests through our network of certified service providers.
To send you status updates, notifications, and service confirmations via SMS or email.
To generate service invoices, financial statements, and repair estimates on your behalf.
To verify your identity and ensure the security of your account and transactions.
To improve platform functionality, detect fraud, and comply with applicable Saudi Arabian regulations.

Sharing of Information

We share your information only with service providers directly involved in fulfilling your request — including towing operators, repair workshops, warehouse facilities, and parts suppliers.
Your insurer may receive claim-related data such as repair estimates, vehicle condition reports, and invoice summaries as required to process your insurance claim.
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
We may disclose information when required by law, court order, or Saudi regulatory authority.

Data Security

All data transmitted between your device and CARVO servers is encrypted using industry-standard TLS (Transport Layer Security) protocols.
Access to personal and vehicle data is strictly role-based — only authorized personnel and relevant service providers can view information pertinent to their function.
We perform regular security audits, vulnerability assessments, and penetration testing to safeguard our infrastructure.
Passwords are hashed using bcrypt and are never stored in plain text. Payment data is not stored on our servers.
In the event of a data breach that affects your personal information, we will notify you within the timeframes required by applicable law.

Data Retention

We retain your personal and vehicle data for as long as your account is active or as needed to provide you with our services.
Service records and financial data are retained for a minimum of 7 years to comply with Saudi commercial and financial regulations.
If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law.

Your Rights

You have the right to access the personal data we hold about you and request a copy at any time.
You may request correction of inaccurate or incomplete personal information.
You may request deletion of your personal data subject to legal retention requirements.
You have the right to withdraw consent for optional data processing activities at any time.
To exercise any of these rights, contact us at info@carvo.sa.

If you have any questions about this policy or our data practices, please reach out to our privacy team:

info@carvo.sa

This policy is governed by Saudi Arabian commercial law and applicable data protection regulations issued by the Communications and Information Technology Commission (CITC).

Back to Home