Privacy Policy

1.1 Data Fiduciary. QuVikme decides why and how your personal data is processed. We are the “Data Fiduciary” under the DPDP Act and the “body corporate” under the SPDI Rules.

Entity: [Registered company name] · CIN: [CIN] · Registered office: [Address]

1.2 Who this Policy covers.

1.3 Independent vendors. Vendors are independent professionals and not our employees. When we share your data with a vendor to complete a booking, that vendor also handles it. We require vendors to use customer data only to fulfil the booking and to keep it confidential.

2.1 Customers.

2.2 Vendors.

2.3 Collected automatically. Device model, operating system, unique device and advertising identifiers, app version, language, IP address, access times, screens and features used, crash reports, push-notification tokens, and identifiers set by cookies or software development kits (“SDKs”).

2.4 From third parties. Google (when you use Google sign-in), Razorpay (payment status and masked payment-instrument details), [identity and bank verification providers], and other users (for example, a friend who refers you).

2.5 Sensitive personal data. Under the SPDI Rules, passwords, financial information (bank account, card and UPI details) and [biometric data, if any] are sensitive personal data. We collect these only with your consent and only for the purposes in this Policy. We do not store full Aadhaar numbers unless the law requires it, and we handle any Aadhaar-related data in line with the Aadhaar Act, 2016 and UIDAI directions [confirm].

2.6 Data about other people. If you give us another person’s data, for example an address for a booking or a friend’s referral, you confirm that you are entitled to do so.

2.7 Mandatory and optional data. Some data is needed to create an account, take a booking or verify a vendor. If you do not provide it, we may not be able to offer those parts of the Platform. Guest browsing needs little or no personal data.

We use your personal data only for the specified purposes below. Where the basis is consent, you can withdraw it at any time (see Section 12). “Legitimate use” means a use that the DPDP Act permits without separate consent, for example where you voluntarily give us data for a service you requested, or where the law requires it.

4.1 What we collect and why.

4.2 Consent and control. We ask for device location permission before collecting it. You can turn it off in your device settings at any time. Some features, such as nearby-vendor matching and live tracking, may then stop working.

4.3 Limits. We do not track customers continuously when no booking is active. Live tracking of a vendor starts only after the vendor is assigned and ends when the service is completed or cancelled. Vendor location is refreshed frequently (about every 30 seconds) while a vendor is Online or on a job, and a vendor can stop collection by going Offline. Location is shared only with the people who need it for the booking.

4.4 Vendor notice. Vendors are told that their location is visible to the booked customer during an active booking and to QuVikme at other times while Online.

5.1 Payment processor. Payments are processed by Razorpay and other payment partners we may add. They collect your card, UPI, net-banking or wallet details directly. We receive only a payment reference, status, amount and masked instrument details. We do not store full card numbers.

5.2 Vendor deposit, subscription and payouts. Vendors pay a one-time deposit and a subscription fee through the payment partner. We keep a ledger of deposits, earnings, commissions, taxes, penalties and withdrawals, and we use verified bank details to pay out. The terms on which a deposit is refunded or forfeited are set out in the Vendor Terms [confirm].

5.3 Cancellations and rescheduling. When you cancel or reschedule a booking, we record the booking ID, your action, the new date and time slot (for a reschedule) and the time of the change, update the booking status, and notify you and the assigned vendor, if any. We use this data to manage the booking, prevent misuse and resolve disputes. The rules, fees and timelines for cancelling and rescheduling are set out in our Refund and Cancellation Policy [link].

5.4 Refund requests. When you ask for a refund, we collect the reason you select. We use it with the booking details and status history, the payment record and, where needed, chat messages and vendor arrival and location records, to review your request and to process any refund through our payment partner. We keep these records as described in Section 11. The conditions, amounts and timelines for refunds are set out in our Refund and Cancellation Policy [link].

5.5 Invoices and tax records. We create invoices and keep transaction records as required by tax and accounting law, including GST rules.

6.1 In-app chat. Customers and vendors can exchange messages tied to a booking. Chat is stored so that both sides can coordinate, and so that we can handle complaints and disputes. We do not read chats routinely. We may review them to investigate fraud, abuse, safety reports or disputes.

6.2 Phone numbers. A vendor assigned to your booking may see your name, address and contact number to carry out the service. [We mask phone numbers where possible — confirm.] You must not use contact details received through the Platform for any purpose unconnected with the booking.

6.3 Chatbot and support. Messages you send to the chatbot, help centre or support tickets, and any calls with our support team [which may be recorded for quality and training — confirm], are used to answer your query and improve support.

7.1 Ratings and reviews. Reviews you post may be shown to other users in connection with the vendor and service reviewed, and are used to calculate the vendor’s score.

7.2 Automated processing. We use automated rules to match bookings to vendors and to apply penalties or availability limits that are set out in the Vendor Terms. We may combine ratings, acceptance and cancellation history to assess vendor performance. You may ask for human review of a decision that significantly affects you by contacting us under Section 16.

If you share your referral code, we record when a friend signs up with it, and both of you may earn QVK points as shown in the app. The referrer sees counts of friends referred and points earned, shown on the Refer & Earn screen. Coupons and points are tracked against your account to prevent misuse.

We send booking updates, alerts about vendor assignment, payments and security, and, with your consent, offers. You can switch off promotional notifications in the app settings or follow the opt-out link in any promotional message. We may still send service and legal messages that you cannot opt out of while you hold an account.

We do not sell your personal data. We share it only as follows, and only to the extent needed for the stated purpose.

We keep personal data only for as long as needed for the purposes in this Policy or as the law requires. After that we delete it or anonymise it. The periods below are our standard approach [confirm each period].

12.1 Your rights. Under the DPDP Act, the SPDI Rules and other applicable law, you may:

• Access a summary of the personal data we hold about you and the processing we do, and the names of those we have shared it with.
• Correct, complete or update inaccurate or incomplete data.
• Erase your data, unless we must keep it by law or for a legitimate use that continues.
• Withdraw consent at any time. Withdrawal does not affect processing done before it, and it may mean we can no longer provide some services.
• Seek grievance redressal from us, and the Data Protection Board of India if you remain unsatisfied.
• Nominate another person to exercise these rights if you die or become unable to do so.

12.2 How to use them. Use the profile and account settings in the app, or write to our Grievance Officer in Section 16. We may ask you to verify your identity first. We aim to respond within [30] days, and in any case within the period the law sets.

12.3 Deleting your account. Customers can delete their account in the app. Vendors can request deletion by contacting support. Before deletion we may need to settle pending bookings, payments, wallet balance or disputes. We keep records we are legally required to keep, and delete or anonymise the rest.

12.4 Marketing and permissions. You can opt out of promotional messages, and switch off location, notification, camera, photo and contacts permissions in your device settings.

12.5 Complaints to the Board. You may complain to the Data Protection Board of India once it is operational for complaints and you have first raised the matter with us and not had a satisfactory response.

We use reasonable security practices consistent with the SPDI Rules and the DPDP Act. These include encryption in transit and, where appropriate, at rest; hashed passwords; single-use OTPs that expire; role-based access controls; restricted access to vendor KYC documents; secure server infrastructure; and regular security reviews. We require our service providers to apply equivalent safeguards.

No system is completely secure, and we cannot guarantee absolute security. Please keep your password and OTPs confidential and do not share them. Share your booking start OTP only with the vendor assigned to your booking.

If a personal data breach occurs, we will notify the Data Protection Board of India and the affected people, in the manner and time the law requires.

The Platform is for people aged 18 and above. We do not knowingly collect personal data from children, and we do not track or target advertising at them. If we learn that we hold a child’s data without verifiable consent of a parent or lawful guardian, we will delete it promptly. If you believe a child has given us data, please contact us.

The Platform may link to or integrate services of third parties, such as payment gateways, maps or Google sign-in. Their privacy practices are their own, and we are not responsible for them. Please read their policies.

For questions, requests or complaints about this Policy or your data, please contact:

We will acknowledge your complaint within 48 hours and aim to resolve it within [30] days, and in any case within the period the law sets.

We may update this Policy from time to time to reflect changes in our services or the law. We will change the “Last Updated” date and, for material changes, tell you through the app, by email or by notice before the change takes effect, and ask for fresh consent where the law requires it. If you keep using the Platform after the effective date, the updated Policy applies to you.

This Policy is governed by the laws of India. Subject to any rights you have under law, the courts at [Pune, Maharashtra] have exclusive jurisdiction over disputes arising from it.