On this page
Encrypted connections
The website, the app and our server only work over HTTPS, so everything between your phone and GaragePulse is encrypted. The connection from our server to the database is encrypted too.
Passwords and sign-in
- Passwords are stored only as a one-way hash (bcrypt). Nobody at GaragePulse can read your password.
- Sign-in attempts are limited, which stops people from guessing passwords.
- Password-reset links are single-use and expire.
- Changing a password, changing someone’s role or removing a staff member signs that person out on every device.
Two-factor sign-in for garage users is not available yet; it is on our roadmap.
Separate data for every garage
Every customer, vehicle, job card, invoice and payment belongs to one garage, and every request is checked against the garage of the person signed in. Our automated tests try to read and change another garage’s data and check that every attempt is refused; they run on every code change.
Staff roles
Each person has their own login and one of four roles — Owner, Manager, Front desk or Mechanic — and sees only what that role needs. Mechanics never see prices, bills, payments or reports. Only the owner can change garage settings, staff roles and the GaragePulse plan. See what each role can do.
Our access to your data
- Our admin console needs a password and a code from an authenticator app (two-factor authentication) every time.
- If we need to look at your account to help you, we use a read-only support view. We have to enter a reason, and every such access is recorded.
- We don’t sell your data or your customers’ data, and we don’t use it for advertising.
Audit trail
Admin actions on our side are logged. In your garage, changes to issued invoices keep a revision history, refunds are recorded as separate entries instead of deleting payments, and cash-drawer expenses are saved with the name of the person who recorded them.
Your data stays yours
Download your customers, vehicles, invoices and payments as Excel-friendly CSV files from Settings at any time — even after your plan has ended. If you stop paying, your account becomes read-only; we don’t delete your data for that reason.
Privacy and Indian law
Our Privacy Policy is written for India’s Digital Personal Data Protection Act, 2023: what we collect and why, your rights, and a Grievance Officer you can contact. It also lists the service providers we use and where they may process data.
Report a problem
If you think you have found a security problem, please contact us straight away. We take every report seriously and will reply.