We collect only what we need to service your bike and run your account. Payments happen on Zoho Books' hosted payment page — we never see or store card or UPI details. We don't sell your data, run ads, or use advertising trackers.
What we collect
- Account: your email address (this is how you sign in — we email you a one-time code, there are no passwords) and your name and mobile number, collected when you create the account. The workshop uses the mobile to call you about your bike.
- Bike and service: bike make, model, registration plate, year, odometer reading, your booking history, the mechanic's findings and quotes, and your invoices.
- Notes and photos you share with us, or that the mechanic records during service.
- A log of the emails we send you (sign-in codes excluded from long-term storage in readable form — codes are stored hashed and expire in 10 minutes).
- Basic technical logs and anonymous, aggregated usage analytics. No advertising cookies; the only cookies we set are the ones that keep you signed in.
How we use it
- To sign you in (one-time codes to your email).
- To run your service by email — quotes after inspection, progress updates, the invoice and payment link, and the payment receipt. Everything also appears on your booking page when you sign in.
- To call you on your mobile when something about your bike needs a conversation.
- To invoice with GST and meet our tax and accounting obligations.
- To improve the service via aggregated, anonymised analytics.
While you hold an account we'll always send transactional email (sign-in codes, quotes, invoices, receipts) — that's the service working, not marketing. Optional reminder emails can be opted out of at any time.
Where it lives
- Zoho One (CRM, Bookings, Desk, Books — Zoho's India data centres): your customer record, bikes, bookings, service tickets and invoices.
- Our app database (Neon Postgres, AWS Singapore): your account row (email, mobile, name), sign-in security data, and the email audit log.
- Vercel: website hosting, server logs, and anonymous analytics.
- Resend: delivers our emails to you.
These providers act as our processors; some store data outside India as noted above. We share personal data with no one else, except where Indian law requires it (for example, GST records with tax authorities).
How long we keep it
Your account and service history stay while your account is active. Invoices and payment records are retained for as long as Indian tax law requires, even after account deletion. Expired sign-in codes and stale sessions are purged routinely.
Your rights
You can request a copy of your data, correct it, or have your account deleted by emailing privacy@blrpiston.in from your account email. We respond within 30 days. The service is intended for riders aged 18 and over.