PRIVACY POLICY

1. INFORMATION WE COLLECT

We may collect the following categories of information.

(a) Personal Information

When you register, create an account, make a booking, or otherwise use the Platform, we may collect:

• Full name
• Mobile number
• Email address (if provided)
• Residential or service address
• City and State
• Profile photograph (if uploaded)
• Account credentials
• Government-issued identification documents (for Worker verification, where applicable)
• GST or business details (if applicable)
• Any other information voluntarily provided by you

You may choose not to provide certain information; however, doing so may limit your ability to access certain Platform features.

(b) Booking & Service Information

When using the Platform, we may collect:

• Service requests
• Worker preferences
• Construction site location
• Booking date and time
• Number of Workers requested
• Booking duration
• Service history
• Booking status
• Cancellation history
• Ratings and reviews
• Customer support communications

(c) Payment Information

Payments may be processed through authorized third-party payment service providers.

We may collect limited payment-related information, including:

• Transaction ID
• Payment status
• Payment method
• Payment timestamp
• Refund status

OnBase does not collect or store sensitive payment information such as debit card numbers, credit card numbers, CVV, UPI PIN, banking passwords, or internet banking credentials. Such information is processed directly by authorized third-party payment gateways.

(d) Device & Technical Information

We may automatically collect information including:

• Device model
• Device identifiers
• Operating system
• Browser type
• App version
• IP address
• Mobile network information
• Crash reports
• Diagnostic information
• Usage statistics
• Log files
• Session information

(e) Location Information

To facilitate construction service bookings, we may collect location information including:

• City
• Service address
• Approximate location
• GPS location (only where permission has been granted)

Location information may be used to:

• Assign nearby Workers
• Estimate travel distance
• Improve operational efficiency
• Prevent fraud
• Facilitate customer support

Users may revoke location permission through their device settings; however, certain Platform features may not function properly.

(f) Mobile Application Permissions

Depending on your device and Platform features, OnBase may request access to:

• Location
• Camera
• Photos
• Storage
• Notifications
• Phone (where required for Platform functionality)

These permissions are requested solely for providing Platform features and improving user experience.

2. HOW WE USE YOUR INFORMATION

We use your information for purposes including:

• Creating and managing user accounts
• Processing service bookings
• Connecting Users with Workers and Professionals
• Assigning nearby Workers
• Facilitating payment processing
• Providing customer support
• Verifying Worker identities
• Improving Platform functionality
• Sending booking confirmations
• Sending OTPs and notifications
• Communicating service updates
• Preventing fraud and abuse
• Maintaining Platform security
• Resolving disputes
• Enforcing our Terms of Service
• Complying with legal obligations
• Conducting analytics and service improvements

3. INFORMATION SHARING

We may share information only where reasonably necessary.

(a) With Workers or Professionals

When a booking is confirmed, certain information may be shared with the assigned Worker, including:

• Name
• Contact number
• Service location
• Booking details

This information is necessary to complete the requested service.

(b) With Service Providers

We may share information with trusted third-party service providers, including:

• Payment gateways
• Cloud hosting providers
• SMS and OTP providers
• Customer support tools
• Analytics providers
• Communication platforms
• Mapping and location service providers

These providers are contractually required to protect your information.

(c) Legal Compliance

We may disclose information where required:

• By law
• Court orders
• Government authorities
• Regulatory agencies
• Law enforcement agencies

or where reasonably necessary to:

• Prevent fraud
• Protect legal rights
• Protect public safety
• Enforce our Terms of Service

(d) Business Transfers

If OnBase undergoes a merger, acquisition, investment, restructuring, or transfer of business assets, user information may be transferred as part of such transaction in accordance with applicable law.

(e) No Sale of Personal Information

OnBase does not sell Users' personal information to third parties for their independent marketing purposes.

4. DATA SECURITY

We implement reasonable administrative, technical, and organizational safeguards to protect personal information.

Security measures may include:

• Secure cloud infrastructure
• Encryption where appropriate
• Access controls
• Authentication mechanisms
• Monitoring systems
• Restricted internal access
• Periodic security reviews

While we take reasonable precautions, no electronic transmission or storage system can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their account credentials.

5. DATA RETENTION

We retain personal information only for as long as reasonably necessary to:

• Provide Platform services
• Process bookings
• Comply with legal obligations
• Resolve disputes
• Prevent fraud
• Maintain business records
• Enforce our legal rights

Certain information may be retained even after account deletion where required by applicable law or for legitimate business purposes.

After the applicable retention period, information may be securely deleted, anonymized, or aggregated.

6. USER RIGHTS

Subject to applicable law, Users may request to:

• Access their personal information
• Update inaccurate information
• Correct personal information
• Delete their account
• Request deletion of personal data (subject to legal obligations)
• Withdraw consent where applicable
• Contact us regarding privacy concerns

Requests may be submitted through OnBase Support.

7. COOKIES & TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies to:

• Remember login sessions
• Store user preferences
• Improve website functionality
• Measure Platform performance
• Analyze usage patterns
• Enhance security

Users may disable cookies through browser settings; however, certain features of the Platform may not function properly.

8. THIRD-PARTY SERVICES

The Platform may integrate with or contain links to third-party services including payment gateways, mapping providers, cloud hosting providers, analytics services, or other technology partners.

OnBase is not responsible for the privacy practices of such third-party services.

Users are encouraged to review the privacy policies of those providers.

9. CHILDREN'S PRIVACY

The Platform is intended only for individuals who are at least 18 years of age.

We do not knowingly collect personal information from children.

If we become aware that personal information of a minor has been collected, we will take reasonable steps to delete such information.

10. MARKETING & COMMUNICATIONS

We may send Users:

• Booking confirmations
• OTPs
• Transaction receipts
• Service reminders
• Customer support communications
• Important Platform updates
• Promotional communications (where permitted)

Users may opt out of promotional communications where applicable.

11. ACCOUNT DELETION

Users may request deletion of their account by contacting OnBase Support.

Deletion requests are subject to legal, regulatory, tax, fraud prevention, and dispute resolution requirements.

Certain information may be retained where required by law or to protect the legitimate interests of OnBase.

12. CHANGES TO THIS PRIVACY POLICY

OnBase may update this Privacy Policy from time to time to reflect changes in:

• Applicable laws
• Business operations
• Technology
• Platform features
• Security practices

Updated versions will be published on the Platform with a revised “Last Updated” date.

Continued use of the Platform after any update constitutes acceptance of the revised Privacy Policy.

13. GOVERNING LAW

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (as applicable), and other relevant laws in force from time to time.

14. CONTACT INFORMATION

For any questions, requests, complaints, or privacy-related concerns, please contact: