Privacy Policy

Draft for legal review. This policy is written with India's Digital Personal Data Protection Act, 2023 in mind and must be reviewed by a qualified lawyer before launch.

What we collect

• Customers: name, email and photo from Google sign-in, phone number, service address and instructions, booking and payment status, chat messages.
• Staff: name, contact details, date of birth, the last 4 digits of Aadhaar and licence numbers, and photos of your face and ID documents, kept in a private vault.
• Technical: sign-in times and basic device information for security.

Why we use it

To run bookings, verify heroes, keep people safe, take payments and pay staff, send service emails, prevent fraud and meet legal duties. We do not sell personal data.

Who sees it

• Your assigned hero and regional manager see what they need for the task, such as address and contact.
• HR can open staff identity documents for verification only. Finance sees payout details. Admins can see everything needed to run the service.
• Service providers: Supabase (database), Stripe (payments), Resend (email), Vercel (hosting) and Google (sign-in).

Your Aadhaar

We never store your full Aadhaar number. Only the last 4 digits are kept, along with a photo you upload, which only HR can view.

How long we keep it

Booking and payment records are kept as required by tax and company law. Chat messages and staff documents are kept only as long as needed for safety, disputes and verification, then deleted or anonymised.

Your rights

You can ask to access, correct or erase your data and to withdraw consent, by writing to helpingshoulders@zopytech.com. We will respond within the time the law allows.

Security

Access is controlled by role in the database itself, documents are stored privately, and connections are encrypted. No system is perfectly secure; tell us at once if you suspect misuse.

Contact

Zopytech Ltd, Andhra Pradesh, India · helpingshoulders@zopytech.com