Privacy
GarageSol
Privacy Policy

Privacy Policy

Last updated: 8 August 2026

This Privacy Policy explains how GarageSol collects, uses, shares, and protects personal information in connection with the GarageSol mobile application and website (together, the "Service"). Please read it alongside our Terms of Service.

Who we are. The Service is provided by GarageSol, operated by the GarageSol Indian Operations Team ("GarageSol", "we", "us", or "our"). You can reach us about privacy at support@garagesol.in.

Two kinds of people are described in this policy. GarageSol is used by garage businesses (our customers) to manage their work. Those garages also enter information about their own customers — vehicle owners who do not sign up for GarageSol themselves. Section 2 explains who controls which data.

1. Information we collect

From garage businesses and their staff (our account holders)

  • Business details: business and legal name, address, city, state/province, postal code, country, and tax identifiers.
  • Contact details: business phone and email, and contact person phone/email.
  • Staff details: staff member name, phone number, and role.
  • Login information: the mobile phone number used to sign in. We sign users in with a one-time password (OTP) sent by SMS — we do not use passwords, and OTPs are stored only in a hashed form.
  • Subscription and billing records: chosen plan, price, currency, invoices, and payment status (see Section 4).

Entered by garages about their customers (vehicle owners)

  • Customer details: name, phone number, email, and address.
  • Vehicle details: number plate, type, make, model, year, colour, and ownership notes.
  • Service records: job details, mileage, notes, appointment times, and invoices.
  • Photos and videos of vehicles captured before, during, and after service. These images can show the vehicle's number plate and, incidentally, its surroundings.

Collected automatically

  • Technical and security data such as IP address (used for rate-limiting and abuse prevention) and basic device/log information needed to operate and secure the Service.

2. Who controls the data (roles)

For a garage's own account information (business, staff, login, and billing data), GarageSol acts as the controller / data fiduciary.

For information a garage enters about its own customers and their vehicles (including service photos), the garage decides what to collect and why, and is the controller of that data. GarageSol processes it on the garage's behalf to provide the Service. If you are a vehicle owner and want to access or delete your information, please contact the garage that served you; you may also contact us and we will assist and route the request appropriately.

3. How we use information

  • To provide and operate the Service: creating and managing service jobs, customers, vehicles, invoices, and staff.
  • To generate and share proof-of-service records, and to send service reminders and appointment messages by SMS.
  • To analyse service photos using artificial intelligence, so we can support features such as image handling and service records (see Section 5).
  • To process subscriptions and payments, and to send billing notices required before automatic charges.
  • To secure the Service, prevent fraud and abuse, and enforce our terms.
  • To comply with legal, tax, and regulatory obligations.

We do not sell personal information, and we do not use it for third-party advertising.

4. Payments

Subscription payments are processed by our payment provider, Razorpay (for customers in India). Payment credentials such as card or bank details are handled by the payment provider under its own terms; GarageSol does not store full card numbers or bank credentials. We retain subscription and invoice records (plan, amount, currency, dates, and payment status) to run your account and meet tax obligations. Before any automatic renewal charge, a pre-debit notification is sent as required by applicable rules.

5. Artificial intelligence (image processing)

Service photos may be sent to Google's Gemini AI to provide image-related features of the Service. In that process, Google acts as our service provider and handles the images under its applicable API terms. These images can include vehicle number plates. We use this processing only to operate features of the Service, not to identify individuals for unrelated purposes.

6. How information is shared

We share information only as needed to run the Service:

Service providerPurposeLocation
SupabaseDatabase and file storageIndia (Mumbai)
Amazon S3-compatible storageStorage of service photos and videosIndia
Google Cloud RunApplication hostingIndia (Mumbai)
Google GeminiAI image processingProcessed by Google
RazorpayPayment processing (India)India
StartMessagingSMS delivery (India)India
TwilioSMS delivery (Canada)Outside India

We may also disclose information where required by law, to protect our rights or users' safety, or in connection with a business transfer. Garages can share a service record with the relevant vehicle owner through a private share link generated by the app.

7. Where your information is stored and processed

The Service's primary database and file storage are located in India (Mumbai). Some providers listed above may process limited data outside India (for example, SMS delivery in Canada, or AI image processing by Google). Where information is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

8. How long we keep information

  • Service photos and videos: retained for up to 12 months, after which they are deleted.
  • Account, customer, vehicle, service, and billing records: retained for up to 8 years, to support your service history, warranty/return visits, and legal and tax obligations.
  • Login and security data (such as OTP records): retained only for a short period needed for authentication and security.

We delete or anonymise information when it is no longer needed for these purposes, or earlier on a valid deletion request (Section 9).

9. Your rights and choices

Subject to applicable law, you may request to:

  • Access the personal information we hold about you.
  • Correct information that is inaccurate or incomplete.
  • Delete your account and associated personal information.
  • Withdraw consent or object to certain processing.

To make a request, email support@garagesol.in, or use our account & data deletion page. We may need to verify your identity before acting. Some records may be retained where the law requires (for example, tax invoices). Vehicle owners should also see Section 2.

10. Security

We use reasonable technical and organisational measures to protect information, including encryption of data in transit, access controls, and storing authentication codes only in hashed form. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.

11. Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect means you accept the updated policy.

13. Contact and grievances

For any privacy question, request, or complaint, contact the GarageSol Indian Operations Team at support@garagesol.in. We aim to acknowledge and respond within a reasonable time and in accordance with applicable law.