1. Data Minimization Promise
We only collect information strictly required to operate your workshop:
- Owner Details: Mobile phone number (used solely for OTP authentication) and optional workshop name/address.
- Payment Identifiers: UPI ID and QR code to display on your invoices for customer settlement.
- Job Records: Vehicle number plate, vehicle model type (2W/4W), customer contact phone, and complaint notes.
- Billing Items: Parts and Labour descriptions with pricing.
We never collect location tracking, device telemetry, contact books, or browsing activity.
2. We Never Sell or Monetize Your Data
Your workshop data belongs entirely to you. We do not sell, rent, or share your data or your customers' phone numbers with advertisers or data brokers.
3. Multi-Tenant Data Isolation
Every workshop's data is stored in isolated partitions enforced by PostgreSQL Row Level Security (RLS). No other workshop owner or unauthorized user can view or alter your records.
4. Secure OTP Handling
Authentication OTP codes are short-lived (5-minute expiry), strictly rate-limited, and never logged in plaintext.
5. Right to Export & Right to Delete
Upon request, you have the right to receive an export of all your workshop data in standard format, or have all records permanently erased from our databases.
6. Privacy Inquiries
To request a data export or deletion, please email our data privacy administrator at: privacy@workshopapp.local