HustlePatch — Privacy Policy (India)
Effective Date: 01 October 2025
This Privacy Policy explains how HustlePatch collects, uses, stores, shares, and protects personal data of clients and patchers, and outlines available rights and choices under applicable Indian law.
1. Scope and Controller
This Policy applies to HustlePatch's app, website, and related services; HustlePatch acts as data controller for data collected via the platform unless otherwise stated.
If third-party services are used (e.g., maps, communications, identity verification), their privacy terms may also apply to the extent of the integration.
2. Data We Collect
Identity and Contact: name, phone, email, photo, address.
Service/Professional: service categories, work history, availability, licenses/certifications, ratings.
Verification/KYC: PAN, Aadhaar, address proof, bank details, GST registration, licenses (when features require).
Device/Usage: IP, device type, OS, app version, app events/logs, timestamps.
Location: service area and optional geolocation for matching and map features.
Transactions: subscriptions, platform fees, payouts, refunds (when introduced).
Communications: messages, quotes, reviews, support tickets.
3. How We Use Data
Operate and improve matching, listings, notifications, and support; verify identity when KYC is introduced.
Communicate updates, security alerts, policy changes; enforce Terms, detect and prevent fraud/abuse.
Billing, bookkeeping, and compliance for any introduced fees; analytics, research, and optional marketing with opt-out controls.
Legal obligations, audits, and regulatory responses.
4. Legal Bases
Consent: for opt-ins, sensitive KYC submissions, and marketing where required.
Contractual necessity: to deliver the service requested.
Legitimate interests: security, fraud prevention, analytics, product improvement.
Legal obligation: tax, accounting, and compliance requests.
5. Sharing and Disclosures
Service providers: hosting, payments/payouts, analytics, communications, maps/geolocation, identity verification, subject to confidentiality and security obligations.
Clients and patchers: limited profile fields to match and perform services.
Marketing/advertising partners: with consent or anonymization; opt-outs available where applicable.
Authorities and regulators: where required by law, court order, or to protect rights and safety.
6. Cross-Border Transfers
Data may be processed or stored outside India (e.g., cloud infrastructure); HustlePatch will implement legal safeguards compliant with Indian data export norms and provide notices as required.
Where required by law, users will be informed of key transfer mechanisms or material changes in storage location.
7. Retention and Deletion
Data is retained while accounts are active or as required by law; upon account deletion, data is deleted or anonymized except where retention is legally required or for dispute resolution and security logs.
Backups and system logs may persist for a limited time and then be purged or anonymized per internal schedules.
8. Rights and Controls
Rights include access, correction, deletion (where permissible), objection or restriction, data portability (if applicable), and withdrawal of consent (e.g., marketing).
Valid requests will be addressed within a reasonable period (e.g., 30 days), subject to identity verification and legal allowances.
Account settings: Certain preferences (notifications, marketing) may be managed via in‑app controls as introduced.
9. Security Measures
Industry-standard technical and organizational measures, including encryption, secure storage, role-based access, and periodic audits; sensitive documents (PAN/Aadhaar/bank) are restricted to authorized personnel.
Users should keep devices and app versions updated and use strong authentication to reduce risk.
10. Cookies and SDKs
Cookies, SDKs, and similar technologies support functionality, analytics, diagnostics, and optional marketing; controls are available via device/app settings, noting that disabling may affect features.
If ad or analytics SDKs are added in future, an in‑app notice and controls will be provided.
11. Children's Data
Services are not intended for persons under 18 years; accounts of minors may be suspended or removed upon detection.
If a guardian believes a minor's data has been provided, contact the Grievance Officer for prompt action.
12. Changes to this Policy
Updates may occur as features or laws change; in‑app/email notice will be provided; continued use signifies acceptance of updates.
Material changes will indicate the new effective date within the app and/or website.
13. Grievance and Contact
HustlePatch will designate a Grievance Officer/Privacy Officer under applicable IT Rules, with escalation to the appropriate authority if unresolved.
Pending formal designation, contact: contact@hustlepatch.com. Notices may also be sent via in‑app support.