Privacy Policy

This Privacy Policy governs the manner in which ToolBelt, operated by Sarvasv Technologies Private Limited (“we”, “us”, or “our”), collects, uses, maintains, protects, and discloses information collected from users (“you” or “user”) of our website (https://www.toolbelt.in), web application, and related software platforms designed for automobile workshop and showroom management.

Section 1 - Information We Collect

We may collect, or process on behalf of our customers, the following categories of personal data when you use or interact with our products and services:

• Account and Contact Information: Name, business name, phone number, email address, physical business address, and billing details provided during registration or subscription.
• Business Operational Data: Job cards, inventory records, billing invoices, GST details, customer records, and vehicle service logs created or managed within the application by you.
• Technical and Usage Information: Internet Protocol (IP) address, browser type, operating system, device identifiers, and session timestamps collected automatically to ensure system stability, session continuity, and security.

Section 2 - Google User Data and OAuth Authentication

Section 3 - How We Use Your Information

We use personal and operational data for the following specific purposes:

• Providing, operating, and maintaining our workshop and showroom management platform.
• Authenticating users, verifying identity, and preventing unauthorized account access.
• Processing subscription transactions, invoicing, and service-related notifications.
• Responding to customer service, technical assistance, and operational inquiries.
• Fulfilling legal, statutory, and accounting compliance obligations.

Section 4 - Data Sharing, Transfer, and Disclosure

We do not transfer or disclose your information to third parties for purposes other than the ones explicitly provided herein. We do not sell, rent, or trade your personal or business data to external marketers or unauthorized entities.

Information is disclosed only under the following limited circumstances:

• Essential Service Providers: Specialized partners providing critical infrastructure (such as payment processing) who are bound by strict confidentiality and data protection agreements to process data solely on our behalf.
• Legal and Regulatory Mandates: Where disclosure is strictly required by applicable law, court order, or authorized governmental authority.

Section 5 - Payment Processing

We use Razorpay for processing subscription and billing transactions. We and Razorpay do not store your full payment card details on our local servers. Payment data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS) when processing payments.

Your purchase transaction data is used only as long as necessary to complete your purchase transaction, after which your payment transaction information is not retained beyond standard accounting records. For further details, you may review Razorpay's terms and privacy disclosures at https://razorpay.com.

Section 6 - Data Protection and Security

Security procedures are in place to protect the confidentiality, integrity, and availability of your data. We use modern industry-standard encryption protocols to protect your information in transit (TLS 1.3 / 1.2) and at rest.

Our application and operational infrastructure incorporate defense-in-depth protections, including perimeter network isolation behind a private virtual network, strict ingress filtering, parameterized database queries to eliminate injection risks, anti-forgery request verification, and encrypted session management. For a comprehensive overview of our technical controls, please refer to our dedicated Security Policy.

Section 7 - Cookies and Session Management

We use secure, HTTP-only session cookies strictly to maintain user authentication and active application sessions. These cookies are essential for the operation of the application, are cryptographically signed and encrypted to prevent tampering, and are never used to track your behavior across third-party websites or services.

Section 8 - Data Retention and Account Deletion

We retain your information only for as long as your account remains active or as needed to provide you with services. If you terminate your subscription or request account closure, we securely remove or anonymize your data from production systems according to standard deletion cycles, unless retention is required to comply with statutory accounting or tax regulations.

You may request permanent deletion of your account and associated personal data at any time by contacting our Privacy Officer through our contact us.

Section 9 - Age of Consent

Our service is intended exclusively for commercial business use by authorized personnel who are at least the age of majority in their jurisdiction. We do not knowingly collect or solicit personal information from individuals under the age of majority.

Section 10 - Policy Updates and Notifications

We reserve the right to modify this Privacy Policy at any time to reflect operational, legal, or regulatory requirements. We will keep this policy current and notify users if we change how our application uses Google user data or other personal information by updating the “Last Updated” date at the top of this page or by displaying a prominent notice within the application interface. Continued use of ToolBelt following notification constitutes acceptance of the revised terms.

Section 11 - Grievance Officer and Contact Information

If you have questions, wish to exercise your data access or deletion rights, register a complaint, or inquire further about our privacy practices, you may reach our Privacy Officer by contact us or by postal mail at: