Privacy Policy
Last updated: 2 October 2026
How we protect your personal information.
KEY POINTS
- We collect minimal personal data
- Your card details are never stored
- The site is served over HTTPS, and sign-in links and codes are stored only in hashed form
- We share personal data only with service providers who work for us, and when the law requires it. We do not sell personal data.
Information We Collect
- •Name, email, phone number, and delivery address for orders
- •Device information for compatibility checks
- •No card or bank details. Online payment is not open on the site yet.
Your Account & Sign-In
How you sign in
There are no passwords. You can sign in with:
- •Google. We receive your name, email address and Google account ID.
- •Truecaller, on Android phones. We receive the mobile number Truecaller has verified, and your name.
- •A sign-in link sent to your email address.
- •A code sent to your mobile number, when available.
What your account stores
- •Your name
- •Your verified email address and/or mobile number
- •A WhatsApp number for order updates, if you add one
- •Your delivery addresses
- •Your GSTIN and registered business name, if you add them
- •Your saved devices
- •The delivery location you pick for delivery estimates
- •The items in your cart
- •Your message preferences
Security records
- •The devices you are signed in on: device type and browser (for example, Chrome on Android), when you signed in and when the device was last active. A device stays signed in for 90 days at most. You can see this list and sign devices out under Account → Sign-in & security.
- •Security events, such as sign-ins and changes to your sign-in methods, with the browser and device used. These are kept for 2 years.
These records never contain your full IP address. They keep only part of it, and since 27 September 2026 that part is stored only in one-way hashed form.
Security emails
When a sign-in method is added or removed, or your email address changes, we email the verified email address on your account. If an email address is changed or removed, we also email the old address. Each email has a "This wasn't me" button. It works once, within 7 days, and signs every device out of your account.
Identify My Device Feature
Our device identifier tool:
- •Reads basic device info (brand, model) with your permission
- •Does NOT access contacts, photos, messages, or calls
- •Is session-based — not saved unless you confirm
Use of Information
- •To process and deliver your orders
- •To send order updates and support messages
- •To improve our service and prevent fraud
- •To comply with legal obligations
WhatsApp Messages
- •Order updates: we message you about each order you place (confirmation, dispatch and delivery). We send these because they are part of fulfilling your order.
- •Part alerts: messages when new parts arrive for your saved devices. We send these only if you switch them on in Account → Updates & privacy, and you can switch them off at any time. Part alerts are not being sent yet.
To stop order updates, tell us on WhatsApp.
Data Sharing
Your data is shared only with:
- •Service providers that run the site for us (listed under Who Processes Data for Us)
- •Courier partners (for delivery)
- •Repair partners (if you use repair services)
- •Legal authorities (if required by law)
We do NOT sell, rent, or trade customer data.
Who Processes Data for Us
These companies run parts of the site for us:
- •Google: sign-in with Google, Google Analytics (how the site is used) and Google Maps (delivery location and delivery estimates)
- •Truecaller: sign-in on Android phones
- •Resend: sending our emails, such as sign-in links, codes and security emails
- •MSG91: sending codes to your phone by SMS or WhatsApp, once that is switched on
- •WhatsApp (Meta): messages between you and us, including order updates
- •DigitalOcean: hosting the website
- •Cloudflare: delivering our images and phone model data
- •MongoDB Atlas: our database
Data Security
- •We use secure servers and access-controlled systems
- •All sensitive data is encrypted
- •Standard industry security practices are followed
- •No system guarantees absolute security
Data Retention
Your personal data is retained only as long as necessary for:
- •Order fulfillment
- •Legal compliance
- •Dispute resolution
Data is not retained longer than required.
Account & Data Deletion
You can delete your account yourself. Sign in and go to Account → Delete account. We send a 6-digit code to your verified email or phone, and your account is deleted as soon as you enter it.
When your account is deleted:
- •Your name, email address, phone number, WhatsApp number, addresses, saved devices, business details, delivery location, cart, message preferences and sign-in methods are erased
- •Every device is signed out
- •Order and repair records are kept for as long as tax and accounting law requires, because GST invoices depend on them. They keep the name, phone number, address and any GSTIN given for that order, and are no longer linked to a sign-in.
- •Security event records keep no name, email address or phone number, and expire after 2 years
If you cannot sign in, or cannot get the code, message us on WhatsApp or email [email protected]. We first confirm it is you.
Your Rights
You can:
- •See and correct your details in your account, or ask us on WhatsApp or at [email protected]
- •Delete your account and data (see Account & Data Deletion above)
- •Withdraw consent for optional messages, such as part alerts, at any time
- •Raise a grievance with our Grievance Officer, Arun Saini, at [email protected]. We reply within 7 working days.
Frequently asked questions
No. We never store card details, and online payment is not open on the site yet.
Only authorized RepairFully staff and the service providers listed above (such as couriers) have access to your data.
Sign in and go to Account → Delete account. We send a 6-digit code to your verified email or phone, and your account is deleted as soon as you enter it.
If you cannot sign in, message us on WhatsApp.