On this page
This policy explains how [Owner's legal name / business name] ("GaragePulse", "we") handles personal data, in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000.
1. Two kinds of data, two roles
- Account data — about garage owners and their staff who use GaragePulse (name, mobile number, email, garage name, city/state, login activity, payments to us). For this data we are the data fiduciary.
- Garage business data — what a garage enters about its own customers (names, phone numbers, vehicles, invoices, payments). For this data the garage is the data fiduciary and GaragePulse is its data processor: we process it only to provide the Service, on the garage's instructions. Customers of a garage should contact that garage to exercise their rights; we will help the garage respond.
2. What we collect and why
- To create and run your account: name, mobile, email, password (stored only as a one-way hash), garage details.
- To bill you: plan, payment reference (UTR), optional payment screenshot, receipts.
- To keep the Service secure and working: IP address, device/browser type, login times, error reports (without your business data).
- To communicate: email confirmation, password reset, trial and renewal reminders, receipts and important service notices.
We do not sell personal data. We do not use garage business data for advertising, and we do not contact a garage's customers.
3. Consent and legal basis
We process account data based on your consent given at signup and for the legitimate use of providing the Service you requested (DPDP Act s.6 and s.7). You may withdraw consent at any time by closing your account; this does not affect processing already done, and we may keep data where the law requires it (for example, tax records).
4. Service providers we use
We use trusted providers to run the Service, bound to protect the data:
- Hosting and database: [Render (application server), MongoDB Atlas (database, region: [region]), Vercel (website and app delivery)].
- Email delivery: [Resend].
- Error monitoring and uptime checks: [Sentry, UptimeRobot] — configured not to receive your business data.
Some providers may store or process data outside India. We will follow any restrictions notified by the Government of India under the DPDP Act.
5. How long we keep data
- Account and business data: while your account is active. After closure, we keep it for up to [90] days so you can export it, then delete it, except records we must keep by law (e.g. our payment receipts for [8] years under tax law).
- [Once automated backups are live:] Backups are kept for up to [30] days and then overwritten.
6. Security
Encrypted connections (HTTPS), hashed passwords, role-based access for staff, strict separation between garages, two-factor authentication for our administrators and audit logs. [Add “daily encrypted backups” here only once the automated backup workflow is live.] Our staff can view a garage's data only in a read-only support view that is logged, and only to help with support.
7. Your rights
Under the DPDP Act you have the right to: access a summary of your personal data and how it is processed; correct, complete or update it; have it erased (subject to legal retention); nominate another person to exercise your rights in case of death or incapacity; and get your grievances redressed. Most details can be changed directly in the app (Settings), and you can export your data at any time.
8. Personal data breaches
If a breach affects your personal data, we will inform you and the Data Protection Board of India as required by law, and tell you what we are doing about it.
9. Children
GaragePulse is a business service for adults. We do not knowingly collect data of children (under 18) as account holders.
10. Grievance Officer
[Name], Grievance Officer — email: [email address] — phone: [phone]. We will acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
11. Changes
We will notify you of material changes to this policy by email or in the app. See also our Terms of Service.