Privacy Policy

GarageBook — workshop management for Indian garages. Last updated 11 August 2026.

This policy explains what information the GarageBook mobile app and web dashboard (together, “GarageBook”) collect, how we use it, and your choices. GarageBook is operated by Zymbia Interactive Technologies Private Limited (“we”, “us”), which also operates the CaRPM and GaragePro products. By using GarageBook you agree to this policy and to our Terms of Service.

Who the data belongs to

GarageBook is a tool garages use to run their own business. A garage (“you”) records its customers, vehicles, job cards, parts and invoices. That business data belongs to the garage; we process it on the garage’s behalf to provide the service.

Information we collect

Account & login — your mobile number, used to send a one-time password (OTP) to sign you in, plus your name and chosen language.
Business records you enter — customer names and phone numbers, vehicle details, job cards, complaints, parts, invoices and payment status.
Photos — vehicle/job photos you capture or upload, stored to document work.
Vehicle diagnostics (OBD scans) — if you use the OBD module, we collect the vehicle’s VIN/chassis number and registration number, the fault codes (DTCs) read from its ECUs, odometer and live sensor readings (engine, fuel, emissions and related parameters), the vehicle’s make and model, and a record of each scan and code-clear you run — including when it ran, which module it targeted and whether it succeeded. This is collected only when you choose to run a scan.
Subscription & purchase records — which plan or add-on your garage holds and when it expires. Card and UPI details are handled by the payment provider and never reach us.
Device & diagnostic data — a generated device identifier (to sync your data), app version, and crash/error reports to keep the app reliable. We do not collect your location or contacts.

How we use it

To provide the service: sign-in, syncing your garage’s data across devices, generating job cards and invoices.
To read fault codes from a vehicle and turn them into a diagnostic report you can show your customer.
To process your subscription payment and to check which plan or add-on your garage is entitled to.
To diagnose crashes and improve reliability and performance.

We do not use your data, your customers’ data or your vehicle diagnostics for advertising or profiling, and we do not sell it.

Vehicle diagnostics and our group companies

GarageBook, CaRPM and GaragePro are products of the same company, Zymbia Interactive Technologies Private Limited. When you run an OBD scan, the scan data described above is sent from your phone to our servers and processed on our CaRPM platform, which holds the fault-code database and generates the diagnostic report. This is processing within our own group companies — the data is not passed to an outside organisation, and it is not sold, rented or used for advertising.

The finished report is produced as a PDF and held in our cloud storage. Opening it from a job card fetches that file over an encrypted connection. Treat a report link like the report itself: anyone you forward it to can read it.

Because GarageBook signs you in by phone number and has no email field, a scan is labelled inside CaRPM using an address we generate from your garage’s registered mobile number (for example 919845010001@thegaragebook.com). It is a label, not a mailbox — nothing is ever delivered to it, and we do not create an email account for you.

Service providers we share with

We share only what is needed, with providers that process data on our behalf:

SMS/OTP provider (MSG91) — receives your mobile number to deliver the login OTP.
Payments (Razorpay, and Google Play billing for in-app purchases) — process subscription payments; we do not store your card or UPI details.
Cloud hosting & storage — securely stores your data, photos and diagnostic reports.
Crash reporting (Google Firebase Crashlytics) — receives crash and error diagnostics with a device identifier so we can fix faults.

We do not sell your personal information or share it for advertising.

When you choose to message a customer, GarageBook opens WhatsApp with a pre-filled message using a wa.me link. The conversation happens in your own WhatsApp account; GarageBook does not read your WhatsApp messages.

Data retention & deletion

We keep your garage’s data for as long as your account is active. You can request permanent deletion at thegaragebook.com/delete_data — we verify it’s you with a one-time code, then delete your account and your garage’s operational records, including your customers, vehicles, photos and OBD scan history. Final invoices are retained as issued because tax/invoicing records must be kept as required by law.

Security

All data is encrypted in transit — every connection between the app, our dashboard, our servers and our cloud storage uses HTTPS/TLS, and the app does not permit unencrypted traffic. Access is restricted, and your login token is stored in the device’s secure storage. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Children

GarageBook is a business tool and is not directed at children under 18.

Your rights

You can access, correct, export, or delete your data by contacting us. You can stop providing data by ceasing to use the app and asking us to delete your account.

Changes

We may update this policy and will revise the “last updated” date above. Material changes will be communicated in-app or by email.

Contact

Questions or requests: fix@carpm.in.