PRIVACY POLICY

PRIVACY POLICY

[The Company] (“we”, “us”, or “our”) values the trust you place in us. This Privacy Policy describes in detail our practices regarding the collection, use, processing, and disclosure of personal data through [The Platform].

By using our Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

1. CATEGORIES OF DATA WE COLLECT

We categorize the information we collect into three distinct groups:

A. Information You Provide Directly
  • Onboarding Data - Full name, gender, age, primary and secondary phone numbers, email addresses, and emergency contact details.

  • Service Address Data - Detailed address information including house number, street name, landmarks, and "Saved Addresses" (e.g., "Home" or "Office").

  • Profile Verification - In certain instances, we may collect government-issued ID details (masked) to verify the identity of users for high-value service security.

B. Information Collected Automatically
  • Precise Geolocation - We collect real-time location data via GPS, IP address, and Wi-Fi signals to:

    • Connect you with the nearest available Service Professional.

    • Provide "Service Professional Tracking" while they are en route to your home.

  • Device Metadata - Device model, Operating System (iOS/Android), unique device identifiers (IMEI), mobile network information, and app version.

  • Transaction History - A granular log of every service requested, completed, or cancelled, including the date, time, duration of service, and feedback provided.

C. Communication & Support Data
  • Call & Chat Logs - To protect both users and professionals, we use a third-party call-masking service. We log and record these calls and in-app chats to investigate claims of theft, misconduct, or quality disputes.

2. SENSITIVE PERSONAL DATA OR INFORMATION (SPDI)

We do not store "Sensitive Personal Data" such as biometric information or full bank passwords. All financial transactions are processed via PCI-DSS compliant third-party gateways. We only store the last four digits of cards or UPI IDs to help you identify your preferred payment methods.

3. LEGAL BASIS AND PURPOSES OF PROCESSING

We process your data only when we have a legal basis to do so:

  • Performance of Contract: To fulfill our obligation to deliver the service you booked.

  • Legitimate Interest: To detect and prevent fraud, conduct internal research to improve service algorithms, and ensure the safety of our Service Professionals.

  • Legal Obligation: To comply with tax reporting (GST), law enforcement requests, and consumer protection regulations.

  • Consent: For marketing communications, which you can withdraw at any time via the "Communication Preferences" in your account settings.

4. DATA SHARING AND DISCLOSURES

We do not sell your personal data to "Data Brokers." Disclosure is strictly limited to:

  • To Service Professionals: We share your name, phone number, and address. Professionals are contractually bound to use this data only for service fulfillment and must delete it after the job is completed.

  • To Group Companies/Affiliates: For internal administrative purposes and integrated service offerings.

  • To Legal/Regulatory Bodies: When we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5. DATA SECURITY ARCHITECTURE

We employ a multi-layered security approach:

  • Encryption: Data is encrypted at rest (AES-256) and in transit (SSL/TLS)

  • Access Control: Only authorized employees with a "need-to-know" basis have access to user data, protected by Multi-Factor Authentication (MFA).

  • Anonymization: For analytical purposes, we remove personal identifiers to create "De-identified Data" that cannot be traced back to you.

6. RETENTION AND ERASURE

  • Retention: We retain your data for as long as your account is active. If you do not use the Platform for [Insert Period, e.g., 24 months], we may archive or anonymize your data.

  • rasure: You may request account deletion. Upon such a request, we will delete your data within [Insert Days, e.g., 30 days], except for data we are legally mandated to keep (e.g., invoices for GST compliance).

7. YOUR RIGHTS UNDER DPDP ACT

You have the right to:

  • Correction: Rectify inaccurate or incomplete data.

  • Withdrawal: Withdraw consent for marketing or optional data collection.

  • Grievance: Lodge a complaint with our Grievance Officer or the Data Protection Board of India.

  • Nomination: Nominate an individual to exercise your rights in the event of death or incapacity.

8. GRIEVANCE REDRESSAL MECHANISM

If you have a concern regarding your privacy, please contact our designated officer. We are committed to resolving your query within the statutory period.

  • Attention: Grievance Officer - Privacy & Data

  • Company Name: [Insert Company Name]

  • Email: [Insert Email Address]

  • Address: [Insert Office Address]

  • Resolution Timeline Acknowledgment within 24 hours; Resolution within 15-30 days.