1. Scope
This policy covers the Carustaz website, the Carustaz workshop application, and the messages sent through it. It applies to workshop owners and staff who use Carustaz, and to vehicle owners whose details a workshop records in Carustaz.
2. What we collect
From workshops
- Account details: name, work email, workshop name, city, number of bays and the package chosen.
- Business details entered during setup, such as GSTIN, labour rates, parts lists and supplier names.
- Staff details for logins, such as advisor and mechanic names and their roles.
From website visitors
- Information you submit in the signup or contact forms.
- Basic technical data such as browser type and pages visited, used to keep the site working and secure.
3. Workshop data you control
Customer names, contact numbers, vehicle registration numbers, odometer readings, inspection photos, estimates, invoices and insurance claim documents are entered by the workshop. This data belongs to the workshop. We process it only to provide the service the workshop has asked for.
Customer and vehicle data is never sold, rented or used to market other workshops or products to those customers.
4. How we use information
- To create and run your workshop account and send login credentials.
- To produce job cards, estimates, invoices, reminders, reports and claim files.
- To provide onboarding, support and service announcements.
- To keep the service secure, prevent misuse and fix faults.
- To improve Carustaz using aggregated usage patterns that do not identify any customer or vehicle.
5. WhatsApp and SMS messages
Messages such as job updates, estimate approval links, car-ready notices and service reminders are sent from the workshop's connected business number on the workshop's instruction. Vehicle owners can stop reminders by replying as instructed in the message, and that choice is recorded against their number.
6. AI estimates
The estimate builder reads inspection findings, complaints and vehicle model to draft estimate lines priced from the workshop's own rate card. Drafts are reviewed and editable by the advisor, and no work is started without the vehicle owner's approval. Workshop data is not used to train models for other workshops.
7. Sharing and processors
We use trusted service providers for hosting, email delivery, messaging and payments. They process data only on our instructions and under confidentiality obligations. Insurance claim files are shared with an insurer or surveyor only when the workshop chooses to send them. We may disclose information where required by law.
8. Security
Data is encrypted in transit, access is limited by role within each workshop, and staff logins can be removed by the workshop owner at any time. Inspection photos and documents are stored with access restricted to the workshop that uploaded them.
9. Retention and export
Workshop data is kept while the account is active. Workshops can export customers, vehicles, job history and invoices at any time. After an account is closed, data is deleted within 90 days unless the workshop asks for earlier deletion or the law requires longer retention.
10. Your choices
Workshop users can view and correct their account details in settings. Vehicle owners who want to access or correct their records should contact the workshop that serviced their vehicle, and we will support the workshop in responding.
11. Contact
For privacy questions, use the Contact us page and choose “Help with my account”. We reply within one working day.