This Privacy Policy explains how RepairOS (“we,” “our,” or “us”) collects, uses, stores, and protects information when you use our repair shop management platform. By creating an account or using our services, you agree to the practices described in this policy.
1. Who We Are
RepairOS is a multi-tenant Software-as-a-Service (SaaS) platform designed to help repair shop owners manage jobs, customers, invoices, inventory, and more. Our services are provided to businesses (“Subscribers”) operating in India.
For the purposes of this policy, RepairOS acts as a data processor on behalf of Subscribers with respect to the data they enter about their own customers and business operations. RepairOS acts as a data controller for the account and usage information it collects directly from Subscribers.
2. Information We Collect
2.1 Account & Business Information
When you register and set up your shop, we collect:
- Business name, owner name, email address, and phone number
- GSTIN (GST Identification Number) and business address
- Workspace subdomain and login credentials (passwords are stored as salted hashes)
- Payment and billing information (processed via our payment partners — we do not store card details)
2.2 Business Operational Data
Data entered by you or your staff while using RepairOS, including:
- Customer names, phone numbers, email addresses, and device information
- Repair job details, technician assignments, and job status records
- Invoices, payment records, and GST transaction data
- Inventory items, purchase orders, and supplier details
- AMC (Annual Maintenance Contract) records and service schedules
- HR records, staff profiles, and commission data
- Lead and CRM data
This data belongs to your business. We process it only to provide and improve the platform on your behalf.
2.3 Usage & Technical Data
When you access the platform, we automatically collect:
- IP address, browser type, and device identifiers
- Pages visited, features used, and session timestamps
- Error logs and performance metrics
- PWA install status and service worker activity
2.4 Communication Data
When you contact our support team, we retain records of that correspondence, including email content and any attachments you provide.
3. How We Use Your Information
We use the information we collect to:
- Provide the service — operate your account, display your data, and run platform features
- Process transactions — handle subscription payments and send invoices
- Send WhatsApp notifications — deliver job status updates and reminders to your customers on your behalf, using message templates you configure
- Communicate with you — send service announcements, security alerts, and support responses
- Improve the platform — analyse aggregated usage patterns to fix bugs and build new features (individual business data is never used for this)
- Comply with law — respond to legal obligations, court orders, or regulatory requirements under Indian law
- Prevent fraud and abuse — detect and investigate misuse of the platform
We do not use your customers’ personal data for advertising, profiling, or any purpose other than operating your RepairOS account.
4. Data Sharing & Disclosure
We do not sell your data. We share data only in the following circumstances:
4.1 Service Providers
We engage trusted third-party vendors to operate our infrastructure. These include cloud hosting providers, database services, email delivery, and payment processors. All vendors are bound by data processing agreements and are permitted to use your data only to perform services for us.
4.2 WhatsApp / Meta
When you send WhatsApp notifications through RepairOS, your customers’ phone numbers and the message content are transmitted to Meta Platforms (WhatsApp) via the WhatsApp Business API. This transmission is governed by Meta’s Privacy Policy. You are responsible for obtaining any necessary consent from your customers before sending them messages.
4.3 Legal Requirements
We may disclose data if required by law, regulation, or a valid order from an Indian government authority or court. We will notify you where legally permissible.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, data may be transferred as part of that transaction. We will notify affected Subscribers in advance.
5. Data Security
We implement industry-standard safeguards including:
- Encryption in transit (TLS 1.2+) and at rest for all stored data
- Database-per-tenant architecture ensuring strict data isolation between shops
- Role-based access controls limiting staff access within your account
- Regular security testing and dependency auditing
- Secure credential hashing (passwords are never stored in plain text)
While we take every reasonable precaution, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for your staff’s actions within your RepairOS account.
6. Data Retention
We retain your account and business data for as long as your subscription is active. If you cancel your account:
- Your data remains accessible for 30 days from the cancellation date, allowing you to export it.
- After 30 days, your data is permanently deleted from our production systems.
- Backup copies may persist for up to 90 days before being purged from backup storage.
- We retain financial transaction records (invoices paid to RepairOS) for 7 years as required under Indian GST and accounting regulations.
7. Your Rights
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the right to:
- Access — request a summary of the personal data we hold about you
- Correct — request correction of inaccurate or incomplete personal data
- Erase — request deletion of your personal data, subject to legal retention obligations
- Nominate — nominate another individual to exercise these rights on your behalf in the event of death or incapacity
- Withdraw consent — where processing is based on consent, withdraw it at any time (this may affect your ability to use certain features)
- Grievance redress — raise a complaint with our Grievance Officer (see Section 11)
To exercise any of these rights, email us at privacy@repairosapp.com with the subject line “Data Rights Request.” We will respond within 30 days.
As a Subscriber, you are also the data controller for your customers’ personal data. You are responsible for managing their rights requests regarding data you have entered into RepairOS. We will assist you in fulfilling such requests upon written request.
8. Cookies & Tracking
RepairOS uses a minimal set of cookies and local storage:
- Session cookies — maintain your login state; expire when you close the browser
- Preference storage — store UI preferences (e.g., sidebar collapsed state, dark mode) in localStorage; no expiry
- Offline cache — the PWA service worker caches app assets and queued actions for offline use
We do not use advertising cookies, cross-site tracking pixels, or third-party analytics cookies. You can clear all stored data by clearing your browser’s site data for repairosapp.com.
9. Third-Party Services
Our platform integrates with the following third-party services:
- WhatsApp Business API (Meta) — for sending notifications to your customers
- Cloud hosting provider — for secure data storage and compute
- Payment gateway — for processing your subscription payments
Each of these providers has its own privacy policy. We encourage you to review them. We are not responsible for the data practices of third-party services.
10. Children’s Privacy
RepairOS is a business-to-business platform. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us personal data, please contact us immediately at privacy@repairosapp.com and we will delete it promptly.
11. Grievance Officer
In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, we have appointed a Grievance Officer to address data-related concerns:
Grievance Officer — RepairOS
Email: grievance@repairosapp.com
Response time: within 30 days of receipt of complaint
If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India once it is constituted under the DPDP Act, 2023.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email (to the address on your account) and display a notice in the platform at least 14 days before the change takes effect. Continued use of RepairOS after that date constitutes acceptance of the updated policy.
The current effective date is always shown at the top of this page. Archived versions are available upon request.
13. Contact Us
For privacy-related questions or requests, contact us at:
RepairOS — Privacy Team
Email: privacy@repairosapp.com
Subject line: Privacy Inquiry