Gizlilik Politikası

Last Updated: 21 July 2026

1. Introduction

This Privacy Policy explains how Aliyyu Global Private Limited ("Aliyyu Global", "GarageBox", "we", "us", or "our") collects, uses, discloses, stores, and protects personal data when you access or use the GarageBox software platform, mobile applications, APIs, websites, and related services (collectively, the "Services").

GarageBox is a product, brand, and service of Aliyyu Global Private Limited.

We are committed to protecting personal data and handling it responsibly in accordance with applicable data protection and privacy laws, including laws applicable in India and, where relevant, international privacy frameworks such as the EU General Data Protection Regulation (GDPR), UK GDPR, and other regional data protection laws.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Aliyyu Global Private Limited

GarageBox (Product / Brand / Service)

Website: https://www.garagebox.io

Email: [email protected]

Legal Contact: [email protected]

For the purposes of applicable data protection laws, Aliyyu Global may act either as a Data Controller or a Data Processor, depending on the nature of the data and the Services provided.

3. Scope of This Policy

This Privacy Policy applies to:

  • Visitors to our websites;
  • Customers subscribing to GarageBox;
  • Authorized users of customer accounts;
  • Individuals whose data is submitted to the Services by our customers (such as vehicle owners, drivers, employees, suppliers, and service contacts); and
  • Individuals who communicate with us for support, sales, marketing, or other business purposes.

This policy does not apply to third-party websites, applications, or services that are linked from or integrated with GarageBox.

4. Information We Collect

4.1 Information You Provide Directly

We may collect:

  • Name, job title, and company name;
  • Email address and phone number;
  • Billing and payment information;
  • Account credentials and authentication information;
  • Support requests and correspondence;
  • Marketing preferences; and
  • Any other information you choose to provide.

4.2 Information Collected Through the Services

Depending on how the Services are used, we may collect:

  • Vehicle information (VIN, registration number, make, model, year, mileage);
  • Job cards, inspections, estimates, invoices, and service history;
  • Inventory and parts information;
  • Technician assignments and time tracking records;
  • Customer relationship and communication records;
  • Payment and transaction records; and
  • Files, images, videos, and documents uploaded by users.

4.3 Automatically Collected Information

We may automatically collect:

  • IP address and approximate location;
  • Device identifiers;
  • Browser type and operating system;
  • Application version and crash diagnostics;
  • Log files and usage analytics;
  • Date, time, and duration of access; and
  • Security and authentication events.

4.4 Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Keep users signed in;
  • Remember preferences;
  • Analyze website traffic and usage;
  • Improve performance and security; and
  • Measure the effectiveness of marketing campaigns.

You can control cookies through your browser settings, but disabling certain cookies may affect the functionality of the Services.

5. How We Use Information

We use personal data to:

  • Provide, operate, and maintain the Services;
  • Authenticate users and manage accounts;
  • Process payments and subscriptions;
  • Provide customer support and technical assistance;
  • Monitor performance, security, and reliability;
  • Develop new features and improve existing functionality;
  • Send administrative notices, invoices, and service updates;
  • Conduct analytics and reporting;
  • Prevent fraud, abuse, and unauthorized access;
  • Comply with legal obligations; and
  • Communicate with you about products, services, and events, where permitted by law.

We do not sell personal data to third parties.

6. Legal Bases for Processing (Where Applicable)

Where laws such as the GDPR apply, we process personal data on one or more of the following legal bases:

  • Performance of a contract with you or your organization;
  • Legitimate interests in operating and improving our business and Services;
  • Compliance with legal obligations;
  • Consent, where required by law; and
  • Protection of vital interests in limited circumstances.

7. Customer Data and Processor Role

When our customers use GarageBox to store or manage data relating to their own customers, employees, suppliers, or vehicle owners, the customer is the Data Controller and GarageBox acts as a Data Processor.

In that role, we process personal data only on the customer's documented instructions and in accordance with our contractual obligations, including any applicable Data Processing Addendum (DPA).

If you believe your data has been submitted to GarageBox by one of our customers and wish to exercise your rights, please contact that customer directly first.

8. Sharing and Disclosure

We may share personal data with:

8.1 Service Providers

Third-party providers that assist us with:

  • Cloud hosting and infrastructure;
  • Data storage and backup;
  • Payment processing;
  • Email and communication delivery;
  • Analytics and monitoring;
  • Customer support tools; and
  • Security and fraud prevention.

These providers are contractually required to protect personal data and process it only for authorized purposes.

8.2 Legal and Regulatory Authorities

We may disclose personal data when required to:

  • Comply with applicable laws or regulations;
  • Respond to lawful requests from public authorities;
  • Protect our rights, property, or safety;
  • Investigate fraud or security incidents; or
  • Enforce our agreements and policies.

8.3 Corporate Transactions

If Aliyyu Global is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate confidentiality and security safeguards.

9. International Data Transfers

GarageBox serves customers globally. Personal data may be processed in countries other than the country where it was originally collected.

We implement appropriate safeguards for international data transfers, which may include:

  • Contractual data protection clauses;
  • Transfers to countries recognized as providing adequate protection;
  • Technical and organizational security measures; and
  • Other lawful transfer mechanisms recognized by applicable law.

10. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal data, including:

  • Encryption of data in transit using TLS;
  • Access controls and role-based permissions;
  • Multi-factor authentication for administrative access where applicable;
  • Network and infrastructure monitoring;
  • Logging and audit trails;
  • Secure software development practices;
  • Regular backups; and
  • Incident response procedures.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to:

  • Provide the Services;
  • Maintain business and financial records;
  • Resolve disputes;
  • Enforce our agreements; and
  • Comply with legal, tax, accounting, and regulatory obligations.

Customer Data is generally retained for the duration of the subscription and for a limited period thereafter, as specified in the applicable agreement or our data retention procedures.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Access personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Request deletion of your personal data;
  • Restrict or object to certain processing;
  • Request portability of your data;
  • Withdraw consent where processing is based on consent; and
  • Lodge a complaint with a supervisory authority.

To exercise these rights, contact [email protected]. We may request additional information to verify your identity before responding.

13. Marketing Communications

We may send you marketing communications about GarageBox products, services, webinars, events, and updates where permitted by law.

You can opt out at any time by:

Even if you opt out of marketing communications, we may still send important service-related and transactional messages.

14. Children's Privacy

The Services are intended for business use and are not directed to children under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will take reasonable steps to delete it.

15. Automated Decision-Making

GarageBox may use automated processes for functions such as fraud detection, security monitoring, workflow automation, and analytics. We do not use automated decision-making that produces legal or similarly significant effects on individuals without appropriate human oversight where required by law.

16. Third-Party Integrations

GarageBox may integrate with third-party services such as payment gateways, accounting platforms, messaging services, and other business applications.

Your use of those services is governed by their respective privacy policies and terms. We are not responsible for the privacy practices of third-party services.

17. Data Processing Addendum (DPA)

Enterprise customers may request a Data Processing Addendum (DPA) that governs:

  • Processing instructions;
  • Confidentiality obligations;
  • Security measures;
  • Subprocessor requirements;
  • International transfers; and
  • Assistance with data subject rights and security incidents.

Requests may be sent to [email protected].

18. Security Incidents

If we become aware of a confirmed personal data breach affecting Customer Data, we will notify the affected customer without undue delay, provide available information about the incident, and take reasonable steps to mitigate its effects and prevent recurrence, in accordance with applicable law and our contractual obligations.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or business practices.

When we make material changes, we will:

  • Post the updated policy on our website;
  • Update the Last Updated date; and
  • Provide additional notice where required by law.

Your continued use of the Services after the effective date of the updated policy constitutes acceptance of the revised Privacy Policy.

20. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

Privacy Team

Aliyyu Global Private Limited

GarageBox (Product / Brand / Service)

Email: [email protected]

Legal Team

Email: [email protected]

We will respond to privacy requests within the timeframe required by applicable law.