Privacy Policy

This Privacy Policy explains how Dutyfix Private Limited collects, uses, shares and protects your personal data when you use dutyfix.com, the DutyFix mobile app and related services (together, the "Platform").

1. Who we are

Dutyfix Private Limited ("DutyFix", "we", "us") is a company incorporated in India, CIN U63122KA2026PTC228819, with its registered office at Bhive Platinum, Church Street Campus, 48 Church Street, Ashok Nagar, Bengaluru, Karnataka 560001. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), DutyFix is the Data Fiduciary for the personal data described here.

2. Who this policy covers

• Customers — businesses and individuals who book services. For business customers, this includes the staff members whose details the business gives us.
• Service professionals — independent workers who register to receive and accept jobs.
• Visitors — anyone who browses the Platform or contacts us.

3. Data we collect

We do not knowingly collect data from anyone under 18. The Platform is for adults only.

4. Why we use your data

We process personal data only for the purposes below and for no unrelated purpose without fresh consent.

1. Create and secure your account, including OTP login.
2. Match jobs with professionals, broadcast job requests to eligible professionals and confirm assignments.
3. Share the details needed to perform a job (for example, the address and contact number) with the matched party, and only once a job is accepted.
4. Process payments, platform fees, payouts, invoices and tax records.
5. Verify professionals and keep the Platform safe, including fraud and misuse prevention.
6. Provide support, handle complaints and resolve disputes.
7. Improve the Platform, fix errors and analyse usage.
8. Send service messages, and marketing messages only where you have agreed to receive them.
9. Meet legal, tax, audit and regulatory obligations.

5. Legal basis

We rely on your consent, which you give by accepting this policy and the relevant prompts in the app, and on the "legitimate uses" the DPDP Act allows, such as performing a service you requested, complying with law, responding to emergencies and preventing fraud. You can withdraw consent at any time (see section 9). Withdrawal does not affect processing already done, and it may mean we can no longer provide some services.

6. Who we share data with

We do not sell personal data. We share it only as follows:

• Between customers and professionals — limited details needed to complete a booked job, and only once a job is accepted.
• Service providers acting for us — cloud hosting (Amazon Web Services), SMS and OTP delivery, payment processing (Razorpay), analytics and crash reporting (Firebase). They may use data only to serve us and under contract.
• Authorities — where required by law, court order or a lawful government request, or to protect rights, safety or property.
• Business transfers — in a merger, acquisition or restructuring, subject to this policy continuing to apply.

7. Where data is stored and how long we keep it

Data is stored on servers operated by Amazon Web Services. We keep personal data only as long as needed for the purposes above or as the law requires. Typical periods:

After that, we erase or anonymise the data.

8. Security

We use reasonable safeguards, including encryption in transit, access controls based on role, logging of administrative actions and regular backups. Aadhaar numbers are stored encrypted and only the last four digits are shown to our staff. No system is fully secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

9. Your rights

Under the DPDP Act you may:

• ask for a summary of the personal data we process and who we share it with;
• ask us to correct, complete or update your data;
• ask us to erase your data, subject to legal retention duties;
• withdraw consent;
• nominate another person to exercise these rights if you die or become incapacitated;
• raise a grievance and, if unresolved, complain to the Data Protection Board of India.

To exercise a right, email support@dutyfix.com from your registered email, or write to us at the registered address. We respond within 30 days. We may ask you to verify your identity first.

10. Permissions on the mobile app

The DutyFix customer app may ask for access to location (when in use, to fill in your address), camera (to upload site photos) and notifications. The DutyFix Crew app requests location in the background while a job is active, camera (for check-in selfie and site photos) and notifications. You can change these in your device settings. We request only the permissions the features need.

11. Children

The Platform is not for people under 18. If we learn that we hold data of a child without verifiable parental consent, we will delete it.

12. Third-party links

The Platform may link to other sites. We are not responsible for their privacy practices.

13. Changes to this policy

We may update this policy. We will post the new version with its effective date and, for material changes, notify you in the app or by email.

14. Grievance Officer and contact