Privacy Policy

1. Overview and Scope

This Privacy Policy applies to the services offered by GarageDesk CRM ("GarageDesk", "we", "us", or "our") via our website at garagedeskcrm.com and all associated applications.

GarageDesk operates primarily as a software-as-a-service (SaaS) provider for automotive repair shops and garages ("Tenants" or "Workshops"). In processing vehicle repair records and customer data entered by garages, GarageDesk functions as a data processor on behalf of the workshop.

2. Information We Collect

We collect information in the following categories:

A. Account and Profile Information

When you register for a GarageDesk CRM account or configure your garage profile, we collect:

• Garage owner and staff names, email addresses, and phone numbers
• Workshop business name, logo, branch addresses, and contact details
• Goods and Services Tax Identification Number (GSTIN) and State Code for tax invoicing
• Bank/UPI details for displaying payment QR codes on invoices
• Login credentials and authentication identifiers

B. Workshop Operations and Service Records

During the operation of your garage on GarageDesk CRM, you input operational data, including:

• Customer contact details (name, phone number, address)
• Vehicle information (registration number plate, make, model, year, VIN/chassis number, fuel type)
• Service records, job cards, customer complaints, and technician inspection notes
• Spare parts inventory catalogues, purchase costs, and retail prices
• Invoice amounts, tax breakdowns (CGST/SGST), payment modes, and outstanding balances

C. Billing and Payment Information

When subscribing to a paid GarageDesk plan, subscription payments are handled directly by our certified payment processor, Razorpay. We store transaction references, plan tiers, and billing periods; we never collect, store, or process raw credit card or debit card numbers on our servers.

D. Technical and Usage Data

We automatically collect basic technical logs when you use the service, such as IP addresses, browser types, device information, and audit event timestamps to guarantee system security and troubleshoot technical issues.

3. How We Use Information

We use collected data solely for legitimate business and operational purposes:

• To provide, operate, and maintain the GarageDesk CRM platform
• To generate GST-compliant invoices, job cards, and service estimates for your customers
• To enable multi-branch workshop filtering and team collaboration with role-based access
• To facilitate customer communication (e.g., sending invoice PDFs or WhatsApp service notifications on your instruction)
• To process subscription billing and maintain accounting records
• To investigate security events, prevent unauthorized access, and ensure software reliability

4. Multi-Tenant Data Isolation and Security

Security and confidentiality are foundational to GarageDesk CRM:

• Strict Tenant Isolation: We implement Row-Level Security (RLS) in our database architecture to guarantee that no workshop can ever view or access another garage's data.
• Role-Based Access: Permissions within a garage (Owner, Admin, Manager, Receptionist, Technician) are enforced on the server to prevent internal data leaks (e.g., technicians are blocked from seeing garage revenue totals).
• Encryption: All data is encrypted in transit using Transport Layer Security (TLS 1.3) and encrypted at rest on secure cloud infrastructure.

5. Sharing of Information

We do not sell, rent, or monetize your workshop or customer data. We only share information with trusted third-party service providers who assist us in operating our platform:

• Cloud Database Hosting: Supabase (enterprise-grade database and authentication infrastructure).
• Payment Processing: Razorpay (for PCI-DSS compliant subscription billing).
• Communication Services: Email and messaging gateways for delivery of invoices and verification links.

All service providers are bound by strict confidentiality and data protection obligations.

6. Data Ownership and Export Rights

Your garage maintains full ownership of your customer list and repair history. Workshop owners have the right to export their complete data at any time in Excel (.xlsx) and CSV formats through the settings panel.

7. Cookies and Local Storage

GarageDesk CRM uses essential session cookies and local storage exclusively for user authentication, security verification, and maintaining user preferences (such as selected branch view). We do not use third-party tracking or advertising cookies.

8. Data Retention and Deletion

We retain your workshop data for as long as your account is active. If you choose to close your account or request data deletion, we will securely remove your operational data in accordance with our retention policy and applicable legal requirements.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations. Any revisions will be posted on this page with an updated Effective Date. Continued use of GarageDesk CRM after any updates constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data privacy rights, please reach out to:

GarageDesk CRM Privacy Team
Email: privacy@garagedeskcrm.com
Website: garagedeskcrm.com