Last updated: 7 October 2026
This policy explains how personal data is handled in SaralBench, the repair shop software made by Saral Techies. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act). It covers two kinds of data, and our role is different for each:
Your customers' data
Data your shop enters about its own customers and staff. Your shop decides how it is used (the "Data Fiduciary"). We store and process it only on your shop's instructions, to run SaralBench (we are the "Data Processor"). Covered in sections 2–6.
Data about your shop's account
Your business details, your users' logins and how you pay us. We decide how this is used, so we are the Data Fiduciary. Covered in section 7.
For our website, enquiries, demo bookings and our other services, see our main Privacy Policy.
1. Contact and grievance officer
Saral Techies, H. No. 126, Ward 15, Moh. Holi Wala, Hasanpur, Amroha, Uttar Pradesh 244241, India. Email [email protected] for privacy questions or complaints. We aim to reply within 7 days and resolve requests within 30 days.
If you are a customer of a repair shop that uses SaralBench, please contact that shop first. It controls your data and can view, correct or delete it. If you can't reach the shop, write to us and we'll pass your request on.
2. What your shop can store in SaralBench
| About | Data |
|---|---|
| Customers | Name, mobile and WhatsApp number, email, address, GSTIN for business customers, repair and purchase history, payments and dues, loyalty points, tags and notes. |
| Devices and repairs | Brand, model, IMEI and serial number, the problem and condition, accessories received, intake photos, the customer's signature, the screen-lock code (if given), estimates, parts used, status updates, warranty and comments. |
| Used phone trading | Seller's name, contact details and identity proof. |
| Invoices and payments | Invoices, quotations, receipts, payment method and references. Card and UPI payments made through online payment links are handled by the payment provider. SaralBench never sees full card or bank details. |
| Messages | WhatsApp, SMS and email messages sent to customers, and WhatsApp conversations in the shop's inbox. |
| Staff | Staff names, contact details, roles, the jobs they worked on, commission and sign-in history. |
| Customer portal and bookings | When a shop's customer tracks a repair, books online or signs in to the customer portal with an OTP: their mobile number, booking details and sign-in times. |
3. How we handle your customers' data
- We process it only to provide SaralBench to your shop: storing it, showing it to your users, sending the messages your shop sets up, making backups, and giving support when you ask.
- We never sell it, never use it for our own marketing, and never contact your customers except to deliver messages your shop sends through SaralBench.
- Our team accesses a shop's data only to set it up, move data in, fix a problem or answer a support request. Access is limited to people who need it, and SaralBench's activity log records it.
- We may use anonymous, combined statistics (for example the number of jobs created across all shops) to improve SaralBench. These never identify a shop or a person.
4. Your shop's responsibilities
As the Data Fiduciary for your customers' data, your shop should:
- tell customers why their details are taken and how they will be contacted (for example with a short notice on the job sheet or at the counter);
- get their consent before sending automatic WhatsApp or SMS updates, and stop when they ask you to;
- collect only what you need: take a screen-lock code or ID proof only when it is really needed, and remove it when it isn't;
- answer customers who ask to see, correct or delete their data. SaralBench lets you edit, merge and delete customer records;
- give each staff member their own login, with only the access they need.
5. Service providers we use (sub-processors)
To run SaralBench we use these providers, only as needed for their service:
- Hosting and security: our cloud hosting provider, which stores SaralBench and its backups, and Cloudflare (security and fast delivery).
- WhatsApp: Meta's WhatsApp Business Platform, for automatic WhatsApp messages and the WhatsApp inbox.
- SMS: our Indian SMS gateway, for SMS updates and OTPs.
- Email: our email delivery provider, for emails and staff sign-in codes.
- Payments: the payment provider your shop connects (such as Razorpay), for payment links and UPI. It handles payment details under its own terms and PCI-DSS standards.
- Spam protection: Cloudflare Turnstile or Google reCAPTCHA on sign-in and public booking pages.
Some of these providers (for example Meta and Cloudflare) may process data outside India, as the DPDP Act allows. We'll update this list when we add a provider.
6. How we protect data
- HTTPS on every page. Each shop's data is kept separate, and users can only see what their role allows.
- Encryption: screen-lock codes and identity proofs are encrypted when stored, and screen-lock codes are never printed. Passwords are never stored in plain text.
- Sign-in protection: lockout after repeated wrong attempts, email sign-in codes for staff, and CAPTCHA.
- Records: an activity log records changes (who changed what and when), and deleted records go to a trash bin first so mistakes can be undone.
- Backups: daily, kept privately.
- If something goes wrong: if a security incident affects your shop's data, we'll tell you without undue delay, help you understand what happened, and support you with any notices you need to give, including to the Data Protection Board of India.
7. Data about your shop's account
- What we collect: business name, GSTIN, address, the owner's and users' names, phone numbers and emails, plan and number of users, payments and invoices, support requests, and technical sign-in data (IP address, browser, time).
- Why: to provide SaralBench and support under our contract with you, to bill you and keep GST records as tax law requires, to keep SaralBench secure, and to tell you about important changes, such as new features, price changes or maintenance. We send product news only if you agree, with a way to stop it.
- Your rights: you can ask to see, correct or delete this data, and nominate someone to act for you. Email [email protected]. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
8. How long data is kept
- While your subscription is active, your shop's data is kept until your shop deletes it. Deleted records stay in the trash bin until emptied, then go.
- After you cancel, you have 30 days to view and export your data. Then we permanently delete your shop's data from SaralBench, and copies in backups are deleted within a further 30 days.
- Our invoices to you and payment records are kept as long as Indian tax law requires (currently up to 8 years).
9. Children
SaralBench is software for businesses. Shops may need to record a parent's or guardian's details when a device belongs to a child, and should take only what is needed for the repair.
10. Changes to this policy
We update this policy when SaralBench or the law changes. The date at the top shows the latest version. We'll email shops about significant changes before they apply.