Privacy Policy

1. Information We Collect

We only collect data that is needed to operate the Platform. What we collect depends on whether you are a customer or a Worker.

1.1 Information You Provide

All users

• Phone number — used to create your account and to log you in via a one-time password (OTP) sent by SMS. If you delete your account, see Section 4.4 for how we handle your number afterwards.
• Name and preferred language.

Customers

• Service address and the approximate GPS coordinates (latitude/longitude) of the location where you request a service, so a Worker can reach you.
• Bookings and service requests, including the category of service, notes, quotes, and extensions.
• Ratings and reviews you leave for Workers.

Workers

• Identity and tax details for verification and lawful invoicing — legal name, address, city, state, PIN code, PAN number, the last four digits of your Aadhaar number, and GST registration details where applicable.
• Verification documents you upload (for example, ID or address proof) using your camera or photo library.
• Bank account details — account holder name, account number, and IFSC code — used to pay you. These are stored in encrypted form and used to set up payouts.
• Availability and profile information, including your bio and service categories.

1.2 Information Collected Automatically

• Location data. For Workers, we collect real-time GPS location while you are actively on or travelling to a job, so that customers and our systems can track job progress. Location is collected only while the app has foreground permission and an active tracking session. For customers, we use your device location to pre-fill your service address.
• Device and push notification tokens — a token that lets us send you push notifications about your bookings.
• Diagnostic and crash data — technical logs and error reports that help us keep the app stable and secure.
• Usage and transaction records — booking history, payment status, and an internal audit trail of key actions taken on your account.

1.3 Payment Information

Payments and Worker payouts are processed by our payment gateway, Razorpay. Your card, UPI, netbanking, or wallet details are collected and processed directly by Razorpay under their privacy policy. We do not store your full card or bank credential details on our servers — we retain only transaction references (such as payment and order IDs) needed to confirm and reconcile a payment.

2. How We Use Your Information

We use your personal data to:

• Create and manage your account and verify your identity (including OTP verification).
• Match customers with Workers and enable bookings, quotes, scheduling, and extensions.
• Show a Worker’s location and job progress to the relevant customer.
• Process payments, refunds, and Worker payouts, and issue invoices as required by law.
• Verify Worker identity, tax status, and documents.
• Send you transactional notifications by SMS and push notification (for example, OTPs, booking confirmations, and status updates).
• Provide customer support and resolve disputes.
• Maintain security, prevent fraud and abuse, and keep audit records.
• Comply with applicable legal, tax, and regulatory obligations.

We process your data on the basis of your consent, the performance of our service to you, and where necessary to meet a legal obligation.

3. How We Share Your Information

We do not sell your personal data. We share it only as described below.

• Between customers and Workers. To deliver a service, a customer’s name, service address, and contact are shared with the assigned Worker, and a Worker’s name, profile, ratings, and live location during a job are shared with the customer.
• Service providers who help us run the Platform (“Data Processors”):
  • Razorpay — payment processing and payouts.
  • Firebase Cloud Messaging (Google) and Expo — delivery of push notifications.
  • Google Maps — maps, geocoding, and location features.
  • Our SMS provider — sending OTPs and transactional messages.
  • Amazon Web Services / Cloudflare R2 — secure cloud storage of uploaded documents.
  • Sentry — crash and error diagnostics.
    These providers may only process your data on our instructions for the purposes above.
• Legal and safety. We may disclose data if required by law, court order, or a lawful request from a government authority, or to protect the rights, safety, and property of our users or Dhoop.
• Business transfers. If Dhoop is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this policy.

4. Data Retention and Account Deletion

We keep your personal data only for as long as your account is active or as needed to provide the Platform, and thereafter as required to meet legal, tax, accounting, and dispute-resolution obligations. When data is no longer needed, we delete or anonymise it.

4.1 How to delete your account

You can request deletion of your Dhoop account in any of these ways:

• In the app — go to Profile → Delete account.
• On the web — use the request form at dhoopindia.com/delete-account.
• By email — contact our Grievance Officer using the details in Section 10.

4.2 What happens when you request deletion

• Your account is disabled immediately. You will not be able to book or accept services while a deletion request is open.
• There is a 7-day waiting period. During this time you can cancel the request and restore your account — in the app, simply log in again and choose to cancel; if you requested deletion on the web, contact support.
• After the waiting period, our operations team reviews and completes the deletion. Deletion is not automatic and never happens sooner than 7 days after your request.
• Deletion cannot be completed while you have a booking in progress, or while a payment, refund, or payout is still outstanding. Please complete or cancel these first — we will tell you which one is holding it up.
• Once completed, deletion is permanent and cannot be reversed.

4.3 What we delete

When your deletion is completed we remove:

• Your name, service address, and location coordinates.
• Your phone number from your account record.
• For Workers — your legal name and address, PAN number, the last four digits of your Aadhaar number, GST registration details, bank account details, and all verification documents you uploaded, including copies held in our cloud storage.
• Your device and push notification tokens, notification history, and one-time password records.
• The text of any reviews you wrote.

4.4 What we keep, and why

Some records cannot be deleted because we are required to keep them, or because they are needed to protect other users. After your account is deleted we retain:

• Booking, payment, refund, and payout records — required for tax and accounting, to resolve disputes, and to prevent fraud. These no longer identify you by name.
• Tax invoices and credit notes, including the name and address exactly as they appeared when the document was issued. These are statutory documents under Indian tax law and cannot lawfully be altered or deleted. They are retained for the period required under applicable law.
• Ratings you gave, without your name attached, so other users’ overall ratings stay accurate.
• An internal audit record that the deletion took place, and who completed it.
• A one-way, irreversible fingerprint of your phone number, for up to 90 days. We keep this — and not the number itself — for a single purpose: so that if you try to sign in again, we can tell you your account was deleted rather than silently creating a new one. It cannot be turned back into your phone number. After 90 days it is erased, and the number can be used to open a new account.

5. Data Security

We use technical and organisational measures to protect your data, including encryption of sensitive fields such as bank account details, access controls, and secure cloud storage. No system is completely secure, but we work to protect your information and to promptly address any security incident in accordance with the DPDP Act.

6. Your Rights

Under the DPDP Act, subject to conditions in the law, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correction and updating of inaccurate or incomplete data.
• Erasure of your personal data where it is no longer required. You can delete your account yourself at any time — see Section 4 for how, and for what is removed and what we must keep.
• Grievance redressal — to raise a complaint with us about how your data is handled.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Withdraw consent at any time, where processing is based on consent (this will not affect processing already carried out).

To exercise any of these rights, contact us using the details in Section 10. Note that some data (such as records required for tax or legal compliance) may need to be retained even after a deletion request.

7. Children

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

8. Permissions We Request

The app requests the following device permissions, each used only for the stated purpose:

• Location — to set a customer’s service address and to track a Worker’s live location during an active job.
• Camera — to photograph verification documents (Workers).
• Photos / media — to upload verification documents from your library (Workers).
• Notifications — to send you booking and account updates.

You can manage or revoke these permissions in your device settings; some features may not work without them.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are significant, notify you through the app. Continued use of the Platform after an update means you accept the revised policy.

10. Contact Us and Grievance Officer

If you have questions about this policy or wish to exercise your rights, contact:

• Grievance Officer: Gautam Sahni
• Email: dhooptechnologies@gmail.com
• Postal address: 141, Industrial Area, Kichha Bypass road, Rudrapur, Udham Singh Nagar, Uttarakhand, 263153
• Company: Dhoop India Private Limited

We will acknowledge and respond to grievances within the timelines required by applicable law.