Privacy Policy

1. Introduction

Workmate4u ("we", "us" or "our") respects your privacy. This Privacy Policy explains what personal information we collect when you use the Workmate4u website at workmate4u.com (the "Platform"), how we use it, who we share it with, and the rights you have over it. It applies to Task Posters, Taskers and visitors.

This policy is published in compliance with Section 43A of the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. Data Controller / Fiduciary

• Operator: Workmate4u, India
• Email: info@workmate4u.com
• Grievance & Data Protection Officer: Workmate4u Grievance Cell, info@workmate4u.com

3. Information We Collect

3.1 Information you provide directly

Data	Why we need it
Full name	Account identity, ratings, communication with the other party of a task
Email address	Login, transactional email (task updates, receipts, password reset) sent via SendGrid
Phone number	Account verification and to enable in-app communication
Date of birth	To verify the 16+ age requirement
Password	Account login (stored only as a salted PBKDF2-SHA256 hash, never in plain text)
Google account profile (if you choose "Sign in with Google")	Email, name, profile picture and a Google sub-id to authenticate you
Profile details, photo, bio, skills	Tasker discoverability and trust
Task details (description, photos, address, price)	To match Posters with Taskers and run the task
Reviews & ratings	Reputation system
Support tickets, chat & voice-call metadata	To provide customer support and resolve disputes
UPI/bank details for payouts (Taskers)	Collected and stored by Razorpay; only a token reference is held by us

3.2 Information collected automatically

• Device & browser data: user-agent, OS, screen size, language;
• Approximate & precise location: only when you grant browser permission, used for nearby task matching, distance display and live tracking while a task is in progress;
• Usage data: pages viewed, features used, error logs, timestamps;
• IP address: for security, fraud prevention, abuse-rate limiting and approximate region;
• Cookies, localStorage and IndexedDB — see our Cookie Policy.

3.3 Information from third parties

• Google (if you use Sign-in with Google) — basic profile claims;
• Razorpay — payment status, last-4 digits / instrument type, refund/chargeback events; we do not receive your full card or bank credentials.

4. How We Use Your Information

We process personal data to:

• Create and operate your account and the marketplace;
• Match Posters and Taskers and enable in-app chat & voice calls;
• Process wallet top-ups, task payments, service charges, platform commission deductions and Tasker payouts via Razorpay;
• Calculate and apply service charges (for Delivery & Pick/Drop tasks) and deduct platform commission (15% for Delivery/Pickup/Transport/Moving; 17% for all other categories) from Tasker payouts on task completion;
• Send essential transactional email (e.g. task accepted, payment receipt, commission statement, password reset) via SendGrid;
• Show approximate distance and (with your consent) live tracking during a task;
• Maintain ratings, reviews and trust signals;
• Detect and prevent fraud, abuse, security incidents and IT-Rules violations;
• Provide customer support and handle grievances;
• Improve performance, fix bugs and develop new features;
• Comply with legal obligations (tax, anti-money-laundering, court orders, lawful government requests).

Lawful basis (DPDP Act, 2023): primarily your consent and the necessity of processing for performance of the contract you enter into with us by using the Platform; for fraud prevention and legal compliance, we rely on legitimate uses recognised under the Act.

5. Who We Share Information With

5.1 With other users

Your display name, profile photo, ratings, reviews and approximate location are visible on the Platform. After a Tasker accepts a Poster's task, the two parties' phone numbers and exact task location may be shared between them to enable the task.

5.2 With service providers (processors)

• Razorpay Software Pvt. Ltd. — payment gateway, KYC for payouts, fraud screening;
• Google LLC — Google Sign-In authentication and Google Maps navigation links;
• Twilio SendGrid — transactional email delivery;
• Netlify — frontend hosting & CDN;
• Railway — backend hosting and managed PostgreSQL database.

Each provider processes data only as instructed by us and under their own published security commitments.

5.3 With law enforcement / regulators

When required by a valid Indian court order, statutory notice or to comply with applicable law (including the IT Act and IT Rules, 2021), or where necessary to investigate fraud, prevent harm or enforce our Terms.

6. International Transfers

Some of our service providers (e.g. Google, SendGrid) operate servers outside India. Where personal data is transferred outside India, we rely on the providers' contractual safeguards and on transfers permitted under the DPDP Act and applicable Government of India notifications.

7. Data Security

• All traffic between your device and our servers is encrypted via HTTPS / TLS;
• Passwords are stored only as salted PBKDF2-SHA256 hashes;
• Authentication uses signed JWT tokens stored on the user's device;
• The database is hosted in a managed environment with access restricted to authorised personnel;
• Payment card and bank details are never stored on our servers — they are handled directly by Razorpay (PCI-DSS compliant);
• We monitor for abuse and apply rate-limiting and audit logging.

No system can be guaranteed 100% secure. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India in line with the DPDP Act.

8. Data Retention

Data Type	Retention Period
Account profile	Until account deletion + up to 30 days in backups
Task records, chat & reviews	Up to 5 years (dispute & tax records)
Wallet ledger & payment records	Up to 8 years (Income-tax & financial regulations)
Voice-call signalling metadata	Up to 90 days (no audio is recorded by Workmate4u)
Server access logs	Up to 12 months
Support tickets	Up to 3 years
Cookies / localStorage	See Cookie Policy

9. Your Rights (DPDP Act, 2023)

As a Data Principal you have the right to:

• Access a summary of the personal data we hold about you;
• Correct or update inaccurate or incomplete data;
• Erase your data and delete your account;
• Withdraw consent for any processing based on consent (this may limit your ability to use the Platform);
• Nominate another person to exercise your rights in case of death or incapacity;
• Lodge a grievance with our Grievance Officer and, if unresolved within 15 days, with the Data Protection Board of India.

To exercise any of these rights, email info@workmate4u.com from the email address registered with your account. We will respond within statutory timelines.

10. Children's Privacy

The Platform is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Cookies & Local Storage

We use cookies, browser localStorage, IndexedDB and a service worker for login sessions, theme preferences, offline caching of pages and remembering your cookie-consent choice. We do not use third-party advertising or cross-site tracking cookies. Full details are in our Cookie Policy.

12. Push Notifications

Workmate4u does not send web-push notifications. Status updates are delivered through the Platform itself and through transactional email.

13. Third-Party Links

The Platform may contain links to third-party sites (e.g. Google Maps directions). We are not responsible for the privacy practices of those sites; please review their own policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or via an in-app notice at least 7 days before they take effect. The "Last Updated" date at the bottom indicates when the policy was last revised.

15. Contact

• Email / Grievance Officer: info@workmate4u.com
• Website: https://workmate4u.com
• Operator: Workmate4u, India