Privacy Policy

This Privacy Policy applies to the mobile application Dealer Direct (also referred to as Mahindra Dealer Direct) and the related dealer portal and APIs operated by Mahindra & Mahindra Ltd., Farm Equipment Sector, Farm Division (together, “we”, “us”, or “our”).

This policy identifies the app and legal entity associated with the Google Play store listing for Dealer Direct. If you do not agree with this policy, please do not use the app or portal.

1. Who we are

App name: Dealer Direct
Also known as: Mahindra Dealer Direct
Legal entity / developer: Mahindra & Mahindra Ltd.
Division: Farm Equipment Sector, Farm Division

Mahindra & Mahindra Ltd.
Farm Equipment Sector, Farm Division
1st Floor, Mahindra Towers
Akurli Road, Kandivli (East)
Mumbai 400101, India

Privacy contact: sheth.harsh@mahindra.com

2. Scope

Dealer Direct is a dealer-management application for authorised Mahindra & Mahindra Ltd. dealers and staff. It is used to manage dealer profiles, surveys, helpdesk tickets, merchandise orders, notifications, and related business activity. This policy covers personal data processed through the Android app, the web portal, and the supporting APIs.

3. Information we collect

Depending on your role and the features you use, Dealer Direct may access, collect, use, and store the following categories of data:

• Account and identity data: username, password (stored in hashed form), name, email address, mobile number, role, and account status.
• Dealer and profile data: dealership details, contact information, education, date of birth, languages, marital status, family or partner details, professional information, goals, hobbies, and related profile fields you submit.
• Photos and documents: profile photographs, dealer/showroom images, helpdesk attachments, and payment receipts you upload.
• Survey and helpdesk data: survey answers, ticket content, and communication threads.
• Order and payment data: merchandise/leaflet orders, quantities, order status, and payment confirmation details processed through our payment partner.
• Device data: device token (for push notifications), device platform, device model, and device/OS version.
• Usage and technical data: login timestamps, IP address, and session information for the web portal.

We collect this data when you create or use an account, update your profile, complete a survey, raise a ticket, place an order, upload a file, or otherwise use Dealer Direct.

4. How we use information

We use the data described above to:

• Authenticate users and operate dealer accounts.
• Provide dealer profile, survey, helpdesk, merchandise, and notification features.
• Process orders and payments.
• Send transactional emails and Firebase Cloud Messaging (FCM) push notifications.
• Maintain security, prevent unauthorised access, and keep an audit trail of logins.
• Comply with legal, regulatory, and internal governance requirements.

We do not sell personal data. We do not use personal data from Dealer Direct for third-party advertising.

5. How we share information

We may share data with service providers who process it on our behalf, only as needed to operate Dealer Direct:

• Amazon Web Services (AWS S3): storage of uploaded files and documents.
• Firebase (Google): delivery of push notifications via FCM.
• PayU: payment processing for applicable orders.
• Email delivery providers: transactional messages such as password reset, order, and ticket notifications.

We may also share information with authorised Mahindra & Mahindra Ltd. staff who need it to support dealers, and with authorities when required by law.

6. How we store and protect information

Data is stored on our application servers and, where configured, on AWS S3. Passwords are stored in hashed form. Data in transit is transmitted using HTTPS. Access to the portal and APIs is restricted by authenticated accounts and role-based permissions. Despite these measures, no method of transmission or storage is completely secure.

7. Data retention

We retain account, profile, survey, ticket, order, and device data for as long as the dealer or staff account is active and as needed for business, audit, and legal purposes. When an account is deleted, associated personal data is deleted or anonymised except where we must retain limited records for security, fraud prevention, or legal compliance. Those retention practices will be explained if they apply to a deletion request.

8. Account and data deletion

Dealer Direct accounts are issued to authorised dealers and staff. To request deletion of your app account and associated personal data, email sheth.harsh@mahindra.com with the subject “Dealer Direct account deletion request” and include your username and registered mobile number or email.

We will process verified deletion requests and delete associated user data. Temporarily disabling or freezing an account is not treated as deletion. If limited data must be retained for legal or regulatory reasons, we will tell you.

9. Your choices

Subject to applicable law, you may:

• Review and update profile information in the app or portal.
• Request access, correction, or deletion of your personal data.
• Disable push notifications in device settings (device tokens may still be stored until removed).

To exercise these rights, contact sheth.harsh@mahindra.com.

10. Children’s privacy

Dealer Direct is intended for authorised business users and is not directed at children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. The current version will always be available at this URL.

12. Contact us

For privacy questions about Dealer Direct, operated by Mahindra & Mahindra Ltd., contact:

Mahindra & Mahindra Ltd.
Farm Equipment Sector, Farm Division
1st Floor, Mahindra Towers, Akurli Road, Kandivli (East), Mumbai 400101, India
Email: sheth.harsh@mahindra.com