Privacy Policy
Last updated: 8 August 2026
This Privacy Policy explains how GarageSol collects, uses, shares, and protects personal information in connection with the GarageSol mobile application and website (together, the "Service"). Please read it alongside our Terms of Service.
Who we are. The Service is provided by GarageSol, operated by the GarageSol Indian Operations Team ("GarageSol", "we", "us", or "our"). You can reach us about privacy at abhishek1990bisht@gmail.com.
1. Information we collect
From garage businesses and their staff (our account holders)
- Business details: business and legal name, address, city, state/province, postal code, country, and tax identifiers.
- Contact details: business phone and email, and contact person phone/email.
- Staff details: staff member name, phone number, and role.
- Login information: the mobile phone number used to sign in. We sign users in with a one-time password (OTP) sent by SMS — we do not use passwords, and OTPs are stored only in a hashed form.
- Subscription and billing records: chosen plan, price, currency, invoices, and payment status (see Section 4).
Entered by garages about their customers (vehicle owners)
- Customer details: name, phone number, email, and address.
- Vehicle details: number plate, type, make, model, year, colour, and ownership notes.
- Service records: job details, mileage, notes, appointment times, and invoices.
- Photos and videos of vehicles captured before, during, and after service. These images can show the vehicle's number plate and, incidentally, its surroundings.
Collected automatically
- Technical and security data such as IP address (used for rate-limiting and abuse prevention) and basic device/log information needed to operate and secure the Service.
2. Who controls the data (roles)
For a garage's own account information (business, staff, login, and billing data), GarageSol acts as the controller / data fiduciary.
For information a garage enters about its own customers and their vehicles (including service photos), the garage decides what to collect and why, and is the controller of that data. GarageSol processes it on the garage's behalf to provide the Service. If you are a vehicle owner and want to access or delete your information, please contact the garage that served you; you may also contact us and we will assist and route the request appropriately.
3. How we use information
- To provide and operate the Service: creating and managing service jobs, customers, vehicles, invoices, and staff.
- To generate and share proof-of-service records, and to send service reminders and appointment messages by SMS.
- To analyse service photos using artificial intelligence, so we can support features such as image handling and service records (see Section 5).
- To process subscriptions and payments, and to send billing notices required before automatic charges.
- To secure the Service, prevent fraud and abuse, and enforce our terms.
- To comply with legal, tax, and regulatory obligations.
We do not sell personal information, and we do not use it for third-party advertising.
4. Payments
Subscription payments are processed by our payment provider, Razorpay (for customers in India). Payment credentials such as card or bank details are handled by the payment provider under its own terms; GarageSol does not store full card numbers or bank credentials. We retain subscription and invoice records (plan, amount, currency, dates, and payment status) to run your account and meet tax obligations. Before any automatic renewal charge, a pre-debit notification is sent as required by applicable rules.
5. Artificial intelligence (image processing)
6. How information is shared
We share information only as needed to run the Service:
| Service provider | Purpose | Location |
|---|---|---|
| Supabase | Database and file storage | India (Mumbai) |
| Amazon S3-compatible storage | Storage of service photos and videos | India |
| Google Cloud Run | Application hosting | India (Mumbai) |
| Google Gemini | AI image processing | Processed by Google |
| Razorpay | Payment processing (India) | India |
| StartMessaging | SMS delivery (India) | India |
| Twilio | SMS delivery (Canada) | Outside India |
We may also disclose information where required by law, to protect our rights or users' safety, or in connection with a business transfer. Garages can share a service record with the relevant vehicle owner through a private share link generated by the app.
7. Where your information is stored and processed
The Service's primary database and file storage are located in India (Mumbai). Some providers listed above may process limited data outside India (for example, SMS delivery in Canada, or AI image processing by Google). Where information is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.
8. How long we keep information
- Service photos and videos: retained for up to 12 months, after which they are deleted.
- Account, customer, vehicle, service, and billing records: retained for up to 8 years, to support your service history, warranty/return visits, and legal and tax obligations.
- Login and security data (such as OTP records): retained only for a short period needed for authentication and security.
We delete or anonymise information when it is no longer needed for these purposes, or earlier on a valid deletion request (Section 9).
9. Your rights and choices
Subject to applicable law, you may request to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your account and associated personal information.
- Withdraw consent or object to certain processing.
To make a request, email abhishek1990bisht@gmail.com, or use our account & data deletion page. We may need to verify your identity before acting. Some records may be retained where the law requires (for example, tax invoices). Vehicle owners should also see Section 2.
10. Security
We use reasonable technical and organisational measures to protect information, including encryption of data in transit, access controls, and storing authentication codes only in hashed form. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.
11. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect means you accept the updated policy.
13. Contact and grievances
For any privacy question, request, or complaint, contact the GarageSol Indian Operations Team at abhishek1990bisht@gmail.com. We aim to acknowledge and respond within a reasonable time and in accordance with applicable law.