Privacy policy

Who is responsible for your data

ServiceMyMobile is operated by e-Mag Solutions, ServiceMyMobile (e-Mag Solutions), 82/2, NVR Complex, Kudlu Gate, Hosur Road, Bengaluru 560068. We decide what is collected on this site and why, which makes us responsible for it. Questions and requests go to support@servicemymobile.com.

What we collect, and why

When you book a repair we ask for:

• Your name, email address and mobile number, plus an alternate number if you give one. We need these to call you with the inspection result, to send the repair request number, and to reach you if the courier cannot.
• Your address: building and street, landmark, city, state and PIN code. The courier cannot collect or return the device without it.
• The device and the fault: brand, model, the type of repair, and whatever you write in the description box. This is what the technician works from and what the price is based on.
• The IMEI, if you give it. It is optional at booking. It matters later, because it is how a warranty claim is matched to the device we actually repaired, and how an unlocking job is checked against your proof of ownership.

If you open an account we also store a password, as a PBKDF2-SHA256 hash with a per-account salt. We cannot read it and we cannot tell you what it is. The 2017 version of this service stored passwords in plain text; that is the single clearest thing this rebuild fixes.

If you write to us through the contact form we keep your name, email, phone number and the message, so that someone can answer it.

What the site collects by itself

One cookie, named smm_session. It is set when you sign in, it holds a random session identifier and nothing about you, it cannot be read by JavaScript, and it expires after thirty days. Your browser's user agent string is stored alongside the session so we can tell one sign-in from another.

Your IP address is recorded when you submit the booking or contact form, purely to count submissions against a rate limit and stop a script hammering the form. Those rows are pruned within a day.

There is no analytics, no advertising pixel and no third-party tracker on this site. Nothing here follows you to another one. The only cookie is the session cookie above, which is why this site does not put a consent banner in your way.

Where it is stored

On Cloudflare D1, a database that runs on Cloudflare's network, reached by the Cloudflare Worker that serves this site. Cloudflare processes the data on our instructions and for no purpose of its own. We have not pinned the database to a single region, so where the rows physically sit is a Cloudflare decision; confirming and stating that is part of the review at the top of this page.

We do not sell your data, and we do not hand it to anyone for marketing. It is shared only where the repair needs it: the courier gets the name, address and phone number required to collect and deliver, and a part supplier may be told the model, never who owns it. A court or a lawful authority can require disclosure, and we would comply with a valid order.

Who can see it

Our staff. Accounts on the admin console carry a role of technician or administrator, and only those roles can open a repair request. Everyone else sees less: signed in to your own account, you see your own bookings and no one else's.

The public tracking page needs two things, the repair request number and the phone number or email address you booked with. The number on its own is not enough, because a sequential number can be guessed. Even then the page shows the phone number masked to its last four digits, enough to recognise, not enough to harvest.

How long we keep it

• Repair records carry an invoice, and GST law requires accounts and invoices to be kept for 72 months from the due date of the annual return for that year. They stay for that period.
• Account details stay while the account is open, and go when you ask us to close it, apart from what is attached to an invoice under the line above.
• Sessions expire after thirty days, and are deleted when you sign out.
• Contact form messages are kept for two years, which is long enough to make sense of a repeat complaint.
• Rate limit rows, which hold an IP address and a timestamp, are pruned within a day.

Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong, including an address on an open booking;
• delete what we hold, except records we are required to keep for tax, which we will identify for you rather than refuse the whole request;
• close your account.

Email support@servicemymobile.com from the address on the booking, or from the one on the account, and say what you want done. We will acknowledge within three working days and complete it within thirty. If we have to keep something, we will tell you which record and why.

India's Digital Personal Data Protection Act, 2023 sets out rights of this kind and requires us to name a grievance officer for complaints. Settling that name and aligning the wording above with the Act is part of the review. Until it is done, support@servicemymobile.com reaches the person who will deal with it.

Changes

When this policy changes, the date at the top of the page changes with it. What we do with a repair record is governed by the policy in force on the day you booked. The terms and conditions cover the repair itself.