This Privacy Policy explains how Cleanzo Services Private Limited ("Cleanzo", "we", "us") collects, uses, shares, and protects your personal data when you use cleanzo.pro, the Cleanzo app, and any related services (the "Platform"). It is written to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

Scope

This policy applies to all individuals who create an account, book a service, browse our website, or otherwise interact with the Platform. For the purposes of the DPDP Act, you are a Data Principal and Cleanzo is the Data Fiduciary that determines the purpose and means of processing your personal data.

Data we collect

We collect the following categories of personal data, only as needed to deliver the services you request:

• Identity and contact data: your name, mobile number, and email address (if provided). Your mobile number is verified through a one-time password.
• Address data: the service addresses you save in your profile, including flat number, building, locality, pin code, and any landmark or access notes you add. We use Google Places API to help you select and standardise these addresses.
• Location data: precise device location is used only during an active booking, to help you and the Partner locate each other and to enable live tracking. You can revoke location permission at any time from your device settings; some features will be limited if you do.
• Booking and usage data: services you have viewed or booked, ratings and reviews you submit, support conversations, and device information such as model, OS version, and a unique app installation identifier.
• Payment metadata: we do not store full card numbers. Razorpay handles your payment instruments and returns to us a tokenised reference, transaction ID, amount, status, and method (UPI, card, net banking, wallet).
• Communications data: SMS and WhatsApp delivery receipts via our communications partner, in-app chat messages, and call records when calls are placed through our in-app masked-number system.

How we use your data

We use your data to: confirm bookings and dispatch Partners; process payments and issue GST-compliant invoices; communicate with you about bookings, service updates, and important account notices; investigate complaints, damage claims, and refund requests; detect and prevent fraud and abuse; comply with legal and tax obligations; and improve our services through aggregated analytics. We do not sell your personal data, and we do not use it for advertising profiles outside the Platform.

Third parties

We share personal data only with the following categories of recipients, and only to the extent required to deliver the service:

• Razorpay Software Private Limited for payment processing.
• MSG91 Communications for transactional SMS and WhatsApp messages, including OTPs and booking updates.
• Google LLC for Places API and Maps services used to standardise addresses and show service locations.
• Our Partners: the Partner assigned to your booking receives your first name, masked mobile number, service address, and access instructions. They do not see your saved cards, email, or other addresses.
• Cloud and infrastructure providers that host the Platform, all of which are bound by data processing terms consistent with the DPDP Act.
• Law enforcement and regulators where we are legally required to disclose information.

Data retention

We retain your data only for as long as needed to provide the service and meet our legal obligations. Booking records and invoices are retained for at least 8 years to comply with Indian tax law. Support chats and call recordings are retained for 24 months. Closed-account data is anonymised within 90 days of closure, except where retention is legally required.

Your rights under DPDP

As a Data Principal under the DPDP Act, you have the right to: (a) access a summary of the personal data we hold about you and how we process it; (b) request correction of inaccurate or outdated data; (c) request erasure of your data where it is no longer required for the purposes for which it was collected; (d) nominate another individual to exercise these rights in the event of death or incapacity; and (e) withdraw consent for any processing that is based on your consent. To exercise any of these rights, write to privacy@cleanzo.pro from the email or phone number on your account. We will respond within the timelines prescribed under the DPDP Act.

Cookies and local storage

Our website uses a small number of essential cookies and local-storage entries to keep you signed in, remember your preferred city, and prevent fraud. We do not use third-party advertising cookies. You can clear cookies and local storage at any time through your browser settings; if you do, you may need to sign in again.

Children's data

The Platform is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, write to privacy@cleanzo.pro and we will close the account and erase the data.

Security measures

We protect your data with a combination of technical and organisational controls, including TLS encryption in transit, encryption at rest for sensitive fields, role-based access controls for our staff, audit logging, and regular security reviews. Access to production data is restricted to a small number of authorised personnel and is logged.

Breach notification

If a personal data breach occurs that is likely to result in harm to you, we will notify the Data Protection Board of India and affected Data Principals without undue delay and within the timelines prescribed by the DPDP Act. The notification will describe the nature of the breach, the data involved, the likely consequences, and the steps we are taking to address it.

Contact and grievance officer

For any questions about this policy or to exercise your rights as a Data Principal, contact:

Data Protection Officer Email: privacy@cleanzo.pro

Grievance Officer (as required under Indian law) Name: Ms. Priya Ramesh Email: grievance@cleanzo.pro Address: Cleanzo Services Private Limited, Indiranagar, Bengaluru, Karnataka 560038, India

We acknowledge grievances within 24 hours and resolve them within 15 days.