Privacy Policy

1. Introduction

AutoDMG ("we", "us", "our") operates the website and mobile application available at autodmg.com and related domains (the "Platform"), offering multi-brand car service, repair, denting & painting, car inspection, battery and tyre sales, and free doorstep pickup & drop in Hyderabad and other cities we serve.

This Privacy Policy explains what personal information we collect when you browse the Platform, create an account, book a service, order products, or contact us — and how we use, share, store and protect it. By using the Platform, you agree to the practices described here. If you do not agree, please stop using our services.

2. Information We Collect

2.1 Information you provide directly

• Account & identity: full name, mobile number (verified by one-time password), and email address.
• Vehicle details: manufacturer, model, fuel type, engine capacity, registration number and colour — including vehicles saved to your My Garage.
• Booking details: selected services and packages, preferred date and time slot, pickup and drop addresses, special instructions, and discount or pay-now preferences.
• Attachments: photos you upload and notes you dictate (voice-to-text) to describe damage or issues with your vehicle.
• Addresses: addresses you search for, select from autocomplete suggestions, or save for future bookings.
• Support requests: messages you send us via phone, WhatsApp, SMS or email.

2.2 Information collected automatically

• Location data: precise GPS coordinates when you tap "Use my current location" (only after your browser or device grants permission), and approximate location when you search addresses or select a city.
• Device & usage data: IP address, browser and device type, operating system, pages visited, features used, timestamps and referring URLs, used for security, analytics and improving the Platform.
• Cookies & storage: session tokens and preferences stored in your browser to keep you signed in and remember your cart and booking progress (see Section 10).

2.3 Information from third parties

• Payment status: transaction IDs, payment method type and payment status from our payment gateway Razorpay. We never see or store your card number, CVV, UPI PIN or net-banking credentials.
• Address lookups: address suggestions and coordinates returned by MapmyIndia (Mappls) when you use address search or current-location features.
• OTP delivery: delivery status of one-time passwords sent to your phone via our SMS/WhatsApp provider.

3. How We Use Your Information

• Fulfil your bookings: confirm appointments, assign technicians and drivers, perform free pickup & drop at your address, and service your vehicle.
• Process payments: create and verify Razorpay payment orders, apply eligible pay-now discounts, and issue GST invoices and receipts.
• Communicate with you: send booking confirmations, status updates, OTPs, invoices and service reminders by SMS, WhatsApp, phone or email.
• Maintain your account: keep your My Garage vehicles, saved addresses, cart and full service history available across devices.
• Operate the workshop: generate job cards, track your vehicle through each service stage, and maintain billing and accounting records.
• Improve the Platform: analyse usage, fix errors, prevent fraud and abuse, and keep our systems secure.
• Marketing (optional): send offers and reminders you can opt out of at any time by replying STOP or contacting us.

4. Legal Basis for Processing

We process your personal data on the following grounds, consistent with the Digital Personal Data Protection Act, 2023 (India) and applicable law:

• Contract performance: to book, service and deliver your vehicle and products you order.
• Consent: for optional features such as precise geolocation, photo uploads, voice notes and marketing messages. You may withdraw consent at any time.
• Legal obligation: to maintain tax, GST and accounting records required under Indian law.
• Legitimate interests: to secure the Platform, prevent fraud and improve our services, balanced against your rights.

5. Payments

Online payments are processed by Razorpay Software Pvt. Ltd., a PCI-DSS compliant payment gateway. When you choose "Pay Now", you complete payment on Razorpay's secure interface using UPI, cards, net-banking or wallets.

We only receive and store a payment reference ID, payment method type, amount and status — never your full card details, CVV, UPI PIN or banking passwords. Razorpay's handling of your payment data is governed by its own privacy policy at razorpay.com/privacy.

6. Sharing & Disclosure

We do not sell, rent or trade your personal information. We share it only as needed with:

• Our workshop team: technicians, drivers and authorised garage-panel staff who need your contact, vehicle and address details to perform pickup, service and delivery. Staff access is role-based and limited to what their job requires.
• Service providers: Razorpay (payments), MapmyIndia/Mappls (address search and geocoding), our OTP/SMS/WhatsApp messaging provider, and cloud hosting & database providers — each bound by contractual confidentiality and data-protection obligations.
• Legal & safety: courts, regulators or law enforcement where required by law, or to protect the rights, safety and property of AutoDMG, our customers or the public.
• Business transfers: in the event of a merger, acquisition or sale of assets, your data may transfer to the successor entity, which will honour this policy.

7. Data Storage & Security

Your data is stored on secure cloud servers with encryption in transit (HTTPS/TLS) and at rest. We apply row-level access controls, role-based permissions for staff, and server-side verification of all payment transactions. API keys and credentials are stored only on our servers — never in the app or website code you can view.

Despite these measures, no method of transmission or storage is 100% secure. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities as required by law.

8. Data Retention

• Account & vehicle data: kept while your account is active, so your service history and garage remain available.
• Booking, invoice & payment records: retained for the periods required by Indian tax and accounting law (typically 8 years).
• Photos & notes attached to bookings: retained with the related service record; you may request earlier deletion.
• Location coordinates: used at the time of booking for pickup/drop and not continuously tracked.
• OTP verification data: retained only for the short period needed to verify your number.

When data is no longer needed, we delete or anonymise it.

9. Your Rights

Subject to applicable law, you can:

• Access the personal information we hold about you.
• Correct or update inaccurate details (many details can be edited yourself in your profile).
• Delete your account and associated data, subject to legal retention requirements for invoices and transactions.
• Withdraw consent for location access (via browser/device settings), marketing messages, or photo/voice features at any time.
• Object to or restrict certain processing, and raise a grievance about how your data is handled.

To exercise any of these rights, contact us using the details in Section 14. We respond within a reasonable time and as required by law.

10. Cookies & Tracking

We use cookies and browser local storage for essential functions — keeping you signed in, remembering your booking progress, cart and city preference — and to understand how the Platform is used so we can improve it. We do not use advertising or cross-site tracking cookies.

You can clear or block cookies in your browser settings, but sign-in and booking features may stop working correctly.

11. Third-Party Services & Links

The Platform integrates Razorpay (payments) and MapmyIndia/Mappls (maps and address search), and may link to third-party sites such as WhatsApp. Their handling of your data is governed by their own privacy policies, which we encourage you to read. We are not responsible for the practices of third-party websites.

12. Children's Privacy

Our services are intended for adults (18+). We do not knowingly collect personal information from minors. If you believe a child has provided us personal data, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy as our services or legal requirements evolve. The latest version will always be published on this page with an updated "Last updated" date. For significant changes, we will make reasonable efforts to notify you. Continued use of the Platform after changes take effect constitutes acceptance.

14. Contact Us / Grievance Officer

For questions, requests or complaints about this policy or your personal data, contact: