Privacy Policy

Last updated: 21 July 2026

1. Information we collect

Personal information you provide

• Full name, email address and phone number
• Profile photo, bio, skills and work preferences (optional)
• Your text location and, with permission, your device location
• Past-work showcase photos you choose to publish — these are publicly visible to anyone viewing your applications or profile
• Payout details (your verified bank account) so workers can be paid

Identity verification (KYC) documents

• PAN card image
• A masked Aadhaar image with the first 8 digits hidden, or an alternative government-issued ID
• A selfie/photo used only to match your identity

KYC documents are collected solely for identity verification, fraud prevention and platform safety, and to meet our partners' regulatory requirements.

In line with UIDAI guidance, we do not collect or store your full 12-digit Aadhaar number or an unmasked Aadhaar image. Only the last 4 digits are recorded, together with a one-way cryptographic hash of the number used to detect duplicate accounts — the original number cannot be recovered from this hash.

Location, including background location

When a worker is travelling to an assigned, escrow-funded job and chooses to share their location, WorkMart may collect precise location even while the app is closed or the screen is off, only if the worker grants "Allow all the time" access. This is used solely to show the provider the worker's live position and estimated arrival for that specific job. It stops the moment the worker taps "Stop sharing" or the job completes, and the live location trail is deleted when sharing ends. We also use location at the moment a worker marks a job complete to confirm they were at the job site.

Usage information

• Service requests, offers and interactions
• Payment and payout transaction records
• Chat messages between providers and workers
• Service completion proof (photos, location)
• Device information and app diagnostics / crash reports

2. How we use your information

• Account management — to create, maintain and secure your account
• Identity verification — to verify you via KYC and prevent fraud
• Platform operations — to match jobs, process payments and payouts, and run the escrow flow
• Communication — to send job updates, status changes and important notices
• Safety & trust — to maintain trust scores, detect fraud, power the SOS safety feature and resolve disputes
• Legal compliance — to comply with applicable Indian laws
• Improvement — to improve the Platform using aggregated, anonymised usage patterns

We do not sell your data to advertisers, build advertising profiles, or use your data for any purpose not described in this policy.

3. Legal basis & consent

We process your personal data on the basis of the consent you give when you sign up and use specific features (for example, granting location or camera access), and to perform the service you request (facilitating and settling jobs). You may withdraw consent at any time; doing so may limit or disable parts of the Platform (for example, you cannot be paid without providing payout details).

4. How we protect your data

• Encryption in transit — all data is transmitted over TLS.
• Access-controlled storage — documents are held in private cloud storage protected by row-level-security policies; only authorised admin staff can access KYC documents, and only for verification.
• Aadhaar protection — we never collect your full Aadhaar number or an unmasked Aadhaar image. Only the last 4 digits and a masked image are stored, alongside a one-way hash of the number that cannot be reversed to recover it.
• Credentials — passwords are hashed; session tokens are held in the device's secure storage.

5. Data storage & sharing

Your data is stored on secure cloud infrastructure (Supabase, running on established cloud providers) with industry-standard safeguards. We share data only as follows:

• With other users — your public profile (name, photo, trust score, worker tier, past-work showcase photos, reviews) is visible to the other party on a job. KYC documents are never shared with other users.
• Payment partners — transaction details are shared with our payment service providers (e.g. Razorpay / RazorpayX) to collect escrow and pay workers.
• Service providers — trusted vendors that help operate the Platform (e.g. crash/error reporting), under confidentiality obligations. When you visit this public website, your browser loads fonts from Google Fonts, which technically shares your IP address with Google — the same as visiting almost any modern website.
• Legal — when required by law, court order or a government authority, or to protect the rights and safety of users.

6. Data retention

We keep personal data only as long as needed to provide the service and meet legal, tax and dispute-resolution obligations. Transaction and payment records may be retained for the period required by Indian tax and accounting law. When you delete your account, we delete or irreversibly anonymise your personal data except records we are legally required to keep. Live transit location is deleted as soon as a trip ends.

7. Your rights

Under applicable Indian law you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate personal information
• Request deletion of your account and associated data
• Withdraw consent for processing
• Nominate another person to exercise your rights in the event of death or incapacity
• Raise a grievance with our Grievance Officer

To exercise any right, email workmartjobs@gmail.com.

8. Children

WorkMart is intended for users aged 18 and above. We do not knowingly collect data from children. Accounts are subject to 18+ verification during KYC.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email. Continued use of WorkMart after an update means you accept the revised policy.