GarageBook — workshop management for Indian garages. Last updated 2 November 2026.
This policy explains what information the GarageBook mobile app and web dashboard (together, “GarageBook”) collect, how we use it, and your choices. GarageBook is operated by Zymbia Interactive Technologies Private Limited (“we”, “us”), which also operates the CaRPM and GaragePro products. By using GarageBook you agree to this policy and to our Terms of Service.
GarageBook is a tool garages use to run their own business. A garage (“you”) records its customers, vehicles, job cards, parts and invoices. That business data belongs to the garage; we process it on the garage’s behalf to provide the service.
Samsung SM-A155F), never the
name you gave the phone. When a web browser signs in, we store its user
agent, the text a browser sends to describe itself, which names the
browser and system. The garage’s owner sees these, with the app
version, who is signed in and when each was last used, in the garage’s
list of signed-in phones and browsers, where a browser is shown as, for
example, “Chrome on Windows”, and can sign one out.
We do not collect your location or contacts.We do not use your data, your customers’ data or your vehicle diagnostics for advertising or profiling, and we do not sell it.
GarageBook, CaRPM and GaragePro are products of the same company, Zymbia Interactive Technologies Private Limited. When you run an OBD scan, the scan data described above is sent from your phone to our servers and processed on our CaRPM platform, which holds the fault-code database and generates the diagnostic report. This is processing within our own group companies — the data is not passed to an outside organisation, and it is not sold, rented or used for advertising.
The finished report is produced as a PDF and held in our cloud storage. Opening it from a job card fetches that file over an encrypted connection. Treat a report link like the report itself: anyone you forward it to can read it.
Because GarageBook signs you in by phone number and has no email field, a
scan is labelled inside CaRPM using an address we generate from the mobile
number of the person who created your garage (for example
919845010001@thegaragebook.com). It is a label, not a mailbox
— nothing is ever delivered to it, and we do not create an email account
for you.
This label never changes, so all of the garage’s scans stay together in CaRPM. It is kept for as long as the garage exists, even if that person later leaves the garage or deletes their own data. It is used only to label scans inside CaRPM. GarageBook’s own screens never show it. CaRPM’s scan report, which you can open or share, may include it.
We share only what is needed, with providers that process data on our behalf:
We do not sell your personal information or share it for advertising.
When you choose to message a customer, GarageBook opens WhatsApp with a
pre-filled message using a wa.me link. The conversation
happens in your own WhatsApp account; GarageBook does not read your
WhatsApp messages.
We keep your garage’s data for as long as your account is active. The history of who changed what in your garage’s records is deleted month by month, once it is more than 12 months old. This does not cover attendance corrections, which stay with the attendance register, or the short record of a deleted job card described below. You can request permanent deletion at thegaragebook.com/delete_data — we verify it’s you with a one-time code, then delete your account and your logins. If you are the only owner of a garage, we also delete that garage and its operational records, including its customers, vehicles, job cards, photos, staff attendance and OBD scan history. Final invoices are retained as issued because tax/invoicing records must be kept as required by law.
If your garage has another owner, it is not deleted: it stays with them, with its records, and only your account and your access to it are deleted. If you work at a garage you do not own, it is not deleted either: deleting your data removes your account and your login there, and the garage keeps its customers, vehicles, job cards, invoices and photos, including the work you recorded there, and any entry it made for you in its staff list. It also keeps the attendance it recorded for you, including the times you pressed Start day and End day. Either way, the garage’s OBD scan label (see “Vehicle diagnostics and our group companies” above) also stays, even when it was made from your number.
CaRPM, our platform that processes OBD scans, keeps its own copy of the scans it processed: the scan data described in “Vehicle diagnostics and our group companies” above, filed under the garage’s scan label. Deleting your data from GarageBook, even when your garage is deleted with it, does not delete CaRPM’s copy.
When a job card is deleted, we keep a short record of it so our support team can see what was deleted: the job card’s number, the customer’s name and mobile number, the vehicle’s registration number and the complaint. It is kept until the garage itself is deleted.
All data is encrypted in transit — every connection between the app, our dashboard, our servers and our cloud storage uses HTTPS/TLS, and the app does not permit unencrypted traffic. Access is restricted, and your login token is stored in the device’s secure storage. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
GarageBook is a business tool and is not directed at children under 18.
You can access, correct, export, or delete your data by contacting us. You can stop providing data by ceasing to use the app and asking us to delete your account.
We may update this policy and will revise the “last updated” date above. Material changes will be communicated in-app or by email.
Questions or requests: fix@carpm.in.