Privacy Policy

Customer Data. When a customer scans a shop’s QR code and submits the service-request form, we collect:

• full name;
• mobile phone number;
• address;
• equipment (product) model;
• a description of the issue; and
• repair photographs, meaning images of the invoice, product or damage that the customer chooses to upload from the camera or gallery.

We also record ticket details such as the ticket number, status history, timestamps and the notifications sent about the ticket. We do not ask customers for payment card or bank details, passwords, government identity numbers or health information, and customers should not submit them.

Shop account data. For shops that subscribe to Fixou we collect the shop name, the names and email addresses of its users, phone number, business address, GSTIN, Google review link, login credentials (kept in protected form by our authentication provider) and records of account activity.

Billing data. We keep the plan, billing status, invoice details (amounts, GST and dates) and the references that Razorpay gives us for a subscription and its payments. Card, UPI and bank details are collected and stored by Razorpay and the customer’s bank, not by TM808.

Website enquiries. If you use the Contact Us form we collect your name, email address, optional phone number, topic and message.

Technical data. When you use Fixou or this website we automatically receive your IP address, browser and device type, the pages requested, timestamps and error logs. We use them for security, rate limiting, bot detection and fault diagnosis. We use only essential cookies and similar technologies, such as the session cookie that keeps a shop signed in. We do not use advertising or cross-site tracking cookies.

Children. Fixou is intended for business use and for adult customers. We do not knowingly collect the personal data of a child under 18 without the verifiable consent of a parent or lawful guardian.

Customer Data is processed strictly for after-sales repair and ticket tracking, on the shop’s behalf. We use it only to:

• create the ticket and show it to the shop it was submitted to;
• let the shop review the ticket, approve it, contact the customer, carry out the repair and close it;
• keep a history of status changes;
• notify the shop of new tickets by email, and by SMS or WhatsApp once those channels are activated; and
• send the customer a Google review request when the ticket is closed, through the channels enabled for the shop.

We use shop account, billing, enquiry and technical data to create and manage accounts and authenticate users; process subscriptions, issue invoices and meet tax obligations; respond to enquiries and support requests; keep Fixou secure and prevent fraud and abuse, including through rate limiting, bot protection and audit logs; diagnose faults and maintain the service; and comply with the law and enforce our Terms of Service.

We do not use personal data for marketing, advertising, profiling or any purpose unrelated to those described above. Messages sent to customers about their service request are transactional, not promotional.

Where the law requires consent, we rely on the consent given when the form is submitted, and it can be withdrawn at any time (see section 6). Otherwise we process personal data for purposes the law permits without consent, such as performing a contract, responding to a request and meeting legal obligations.

Repair photographs. Photographs submitted with a service request are kept in private cloud storage and are permanently purged from cloud storage as soon as the shop marks the ticket Closed. Once deleted, the images cannot be recovered.

After photographs are deleted we keep only non-image information, such as the fact that photographs were attached and when they were deleted, as part of the ticket’s audit record.

Ticket details. Other ticket details are kept while the shop’s subscription is active and, after that, only for as long as needed for the purposes in section 2, including resolving disputes and meeting legal obligations. They are then deleted or anonymised.

Shop account and billing data are kept while the subscription is active and afterwards for the period that tax, accounting and other laws require, which can be six years or more. They are then deleted or anonymised.

Website enquiries are kept for as long as needed to respond and to keep a record of the correspondence. Technical logs are kept for the limited period needed for security and diagnostics.

Database backups, where we keep them, may hold ticket text records for a limited time until they are rotated out. They never contain photograph files, which are not part of the database.

You may ask us to delete personal data earlier (see section 6). We will do so unless the law requires us to keep it.

We never sell, rent or trade personal data, and we never share it with advertisers, ad networks, data brokers or marketers. Customer names, phone numbers, addresses and photographs are not used by TM808 for advertising, profiling or marketing.

We disclose personal data only:

• to the shop for which a service request was submitted. Customer Data is visible to that shop and to authorised TM808 administrators;
• to service providers that process data for us under contract, solely to run Fixou: database, authentication and file storage (Supabase), application hosting and content delivery (Netlify), email delivery (Resend), SMS (MSG91) and WhatsApp messaging (Meta WhatsApp Cloud API) once those channels are activated, payment processing (Razorpay), and bot protection (Cloudflare Turnstile);
• when the law requires it, for example in response to a court order or a lawful request from a government agency; and
• where necessary to protect the rights, property or safety of TM808, shops, customers or others, or to prevent fraud, abuse or a security incident, to the extent the law permits.

Each service provider is bound by confidentiality and security obligations and may use the data only to provide its service to us.

Our primary database and file storage are located in India (see section 5). Some providers, such as those for hosting and content delivery, email, messaging and bot protection, may process limited data outside India while delivering their service. We transfer data only as applicable law permits.

Personal data is stored in an encrypted PostgreSQL database hosted in the Mumbai, India region, provided by Supabase. Data is encrypted at rest and in transit using HTTPS/TLS.

Repair photographs are kept in private storage and are displayed only through short-lived, signed links. They are never publicly accessible.

Access is controlled by row-level security in the database, so each shop can reach only its own data, together with authenticated sessions and role-based permissions. Access by TM808 administrators is limited to what is necessary, and secret keys are kept on the server and never in the browser.

The public form is protected by input validation, rate limiting and bot detection, and uploads are limited to image files. Payment notifications from Razorpay are verified by signature before they are accepted. Status changes and notifications are logged for audit.

We follow the reasonable security practices and procedures required by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, and you should protect your login credentials.

If a personal data breach occurs we will notify the affected shops or individuals and the relevant authorities as the law requires.

Subject to applicable law, including the DPDP Act when its provisions are in force, you may ask us to:

• give you a summary of the personal data we process about you and how it is processed;
• correct, complete or update inaccurate or incomplete data;
• erase personal data that is no longer needed for the purpose it was collected, unless the law requires us to keep it;
• withdraw a consent you have given (this does not affect processing that has already taken place);
• address an inquiry or concern about how your data is handled; and
• nominate another person to exercise these rights for you if you die or become unable to do so.

To exercise a right, write to Customer Support below from the email address, or using the phone number, that you gave us. We may ask for information to verify your identity before we act on a request.

If you are a customer of a shop, that shop decides how your service-request data is used, so you may also contact the shop directly. You are welcome to write to us as well. We will help and, where appropriate, work with the shop to act on your request.

We acknowledge every request within 24 hours of receipt and aim to resolve it within 15 days. If a request is complex we may need longer, as the law permits, and we will tell you why.

If you are not satisfied with our response, you may approach the Data Protection Board of India, as and when it is empowered under the DPDP Act, after you have contacted our support team.

Customer Support and contact details:

• Entity: TECHME808 IT SOLUTIONS LLP
• Address: House No. 140/1E, EIF-8, 8th Floor, Near Taj SATS Hotel, Near Holy Cross Colony, Dabolim, PO: A.P. Dabolim, South Goa, Goa - 403801
• Email: onboarding@tm808.co.in
• Phone: +91 86699 13808
• Availability: Monday to Saturday, 9:30 AM – 7:30 PM IST

We may update this Privacy Policy from time to time. The latest version, with its “Last updated” date, is always on this page, and we will notify shops of material changes by email or in the dashboard.