Privacy Policy

Last updated: 3 June 2026

This Privacy Policy explains how AffluentPay Technologies Private Limited (AffluentPay Technologies, “we”, “us” or “our”), the company that operates the Affluent-One product, collects, uses, shares, stores and protects your personal data when you use the Affluent-One mobile applications (the Affluent-One customer app and the Affluent-One Provider app), our website, and related services (together, the “Platform”).

Affluent-One is a technology platform that connects customers in India seeking home services — such as cleaning, plumbing, electrician, gardening, pest control, AC service, appliance repair, painting, carpentry, salon-at-home and home security — with independent local service providers. We operate the Platform that facilitates discovery, booking, scheduling, payments, payouts and after-service support.

This policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“IT Rules, 2021”).

By creating an account or otherwise using the Platform, you consent to the collection and use of your personal data as described in this policy. If you do not agree, please do not use the Platform.

1. Who we are and scope

The Platform is owned and operated by AffluentPay Technologies Private Limited, a company incorporated in India (CIN U62099KA2025PTC203698) with its registered office at:

AffluentPay Technologies Pvt. Ltd.
3rd Floor, STARTUP HUTS
27th Main Road, 2nd Sector
HSR Layout, Bengaluru
Karnataka - 560102, India

For the purposes of the DPDP Act, AffluentPay Technologies acts as the Data Fiduciary that determines the purpose and means of processing your personal data, and our service partners listed in Section 6 act as Data Processors who process data on our behalf and under our instructions.

This policy applies to two categories of users:

Customers — individuals who browse, book, pay for and review home services through the Platform.
Service Providers — independent professionals who offer services through the Platform and who are onboarded, identity-verified (KYC) and paid out via the Platform.

Where a provision applies to only one category, it is marked accordingly. The terms “you” and “your” refer to whichever category applies to you.

2. Key terms

Personal data — any data about an individual who is identifiable by or in relation to such data (a “Data Principal” under the DPDP Act).
Processing — any operation performed on personal data, such as collection, storage, use, sharing, disclosure or erasure.
Data Fiduciary — the entity that determines the purpose and means of processing personal data (i.e. AffluentPay Technologies).
Data Processor — an entity that processes personal data on behalf of a Data Fiduciary (our service partners).
KYC — “Know Your Customer” identity and bank verification carried out for Service Providers before they can receive payouts.

3. Personal data we collect

3.1 Information you provide directly

All users (account creation):

Mobile phone number — required. Affluent-One uses OTP-based login only (no passwords). Your phone number is the primary account identifier.
Name — optional but recommended so providers and customers can recognise one another.
Email address — optional; used to send booking confirmations, receipts and service updates.

Customers:

Service address and location — address label, address lines, city, PIN code and, where you choose to pin it, the precise latitude/longitude coordinates of the service location, so a provider can reach the correct address.
Booking details — the service category and specific service requested, your selected date/time slot, special instructions and your booking history.
Reviews and ratings — the 1–5 star rating and any optional comment you leave for a completed booking.
Complaints and support requests — any complaint text, photos and supporting details you submit.

Service Providers (onboarding & KYC):

Profile — display name, a short bio, and the service categories (“skills”) and service area you offer.
Onboarding selfie — a self-captured photograph used for identity verification.
KYC / verification documents — identity and address documents you upload, including Aadhaar details and other government-issued identity information.
Bank and tax details for payouts — payee name, bank account number, IFSC code and PAN number, used to verify your identity and to disburse your earnings. Your bank, PAN, Aadhaar and overall KYC verification status are recorded.
Job evidence — before/after job photographs you capture to record work completed.

Sensitive data. Financial information (bank account, PAN), and government-issued identity details such as Aadhaar are treated as sensitive personal data under the SPDI Rules and as personal data under the DPDP Act. We collect these only from Service Providers, only with your consent, and only to the extent required for KYC, regulatory compliance and payouts. KYC, bank and Aadhaar details are never shared with customers.

3.2 Information collected automatically

Device and app information — device model, operating system version, app version, language and a push-notification token (Expo / Firebase Cloud Messaging) so we can send you alerts.
Usage and log data — bookings created, status changes, in-app actions and basic technical logs used to operate, secure and debug the Platform.

3.3 Location information (Customer app)

The Affluent-One customer app may request access to your device location to help you set a service address accurately — for example, auto-filling or pinning your precise location when creating an address. Location is used only at the moment you choose to use it inside the address flow; the app does not track your location in the background. You can decline this permission and enter your address manually instead. Provider job locations are derived from the customer’s chosen service address, not from continuous tracking.

3.4 Camera and photos / media

Customers may attach photos (for example, to illustrate a request or a complaint) using the camera or by selecting from the photo library. Service Providers capture an onboarding selfie and upload KYC documents and before/after job photos using the camera or photo library. The Platform accesses the camera and photo library only when you actively choose to take or attach a photo; we do not read your photo library otherwise.

3.5 OTP records

For login security we store a short-lived, hashed one-time passcode and its expiry against your phone number. We never store the OTP in plain text, and it is consumed and invalidated after use.

4. How and why we use your data

Consistent with the principle of purpose limitation, we use your personal data only for the purposes for which it was collected, namely to:

Create and manage your account and authenticate you via OTP (delivered through MSG91 SMS).
Match customers with suitable nearby providers and facilitate bookings, scheduling and slot selection.
Enable a provider to reach your service address and complete the requested job.
Process payments and provider payouts, and verify provider KYC (bank/PAN/Aadhaar), through our payment partner SwitchPay.
Calculate platform fees, commissions and provider earnings, in Indian Rupees (INR).
Send transactional communications — OTPs and service notifications by SMS (MSG91), booking confirmations, receipts and status updates by email (TensorData), and push notifications (Expo / FCM).
Handle reviews, ratings, complaints and customer support.
Detect, prevent and investigate fraud, abuse and security incidents.
Comply with legal, tax (including GST) and regulatory obligations.
Maintain, secure and improve the Platform.

We do not use your personal data for purposes that are incompatible with those listed above without obtaining your further consent.

5. Legal basis and consent

Under the DPDP Act and applicable law, we process your personal data on the basis of:

Your consent — given when you sign up and when you use specific features (for example, granting location, camera or notification permissions, or submitting KYC documents). Your consent is sought through a clear, affirmative action and you may withdraw it at any time (see Section 10).
Performance of the service — processing necessary to provide the booking, payment and payout services you request.
Legal obligation — processing required to comply with Indian tax, GST, KYC and IT Rules obligations.
Legitimate uses — operating a safe, functional marketplace, including fraud prevention and security.

Where processing relies on consent, withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and may limit your ability to use certain features.

We do not sell your personal data. We share it only as needed to operate the Platform, with the following categories of recipients who act as Data Processors under appropriate contractual and security obligations:

Between customer and provider for a booking — to fulfil a booking, a matched provider receives the information needed to perform the service (such as customer name, service address and booking details), and the customer sees the provider’s profile and rating. Sensitive provider KYC, bank and Aadhaar details are never shared with customers.
SwitchPay (payments & KYC) — to collect payments, verify provider bank/PAN/Aadhaar identity details, and disburse provider payouts. Relevant payment and KYC fields are shared with SwitchPay for these purposes.
MSG91 (SMS) — your mobile number, to deliver OTPs and service SMS.
TensorData (email) — your email address, to deliver transactional email such as confirmations, receipts and updates.
Geoapify / OpenStreetMap (maps & geocoding) — address text or coordinates, to geocode addresses and display maps.
Cloud hosting and infrastructure providers — to host the Platform, store data securely and deliver push notifications (Expo / Firebase Cloud Messaging).
Legal and safety recipients — authorities, regulators or courts where required by law, or to protect rights, safety and property.
Business transfers — in connection with a merger, acquisition or reorganisation, subject to this policy.

7. Payments and financial data

Payment collection and provider payouts are handled through SwitchPay. Any card, UPI or bank credentials you enter for a payment are processed by the payment gateway; Affluent-One stores only the transaction reference, amount, payment mode and status — not full card numbers. All money values are handled in Indian Rupees (INR), internally in minor units (paise). Tax invoices and receipts are issued in accordance with applicable GST law.

For Service Providers, bank account number, IFSC, PAN and Aadhaar-based identity details are processed to enable KYC verification and payouts, and payout references and status are recorded.

8. Data retention

We retain personal data only for as long as necessary to provide the Platform, to comply with legal, accounting and tax (GST) obligations, to resolve disputes and to enforce our agreements. Transaction, invoice and KYC records are retained for the periods required by Indian tax and financial regulations. OTP records are short-lived and expire automatically. When personal data is no longer required and there is no legal basis to retain it, we delete or anonymise it.

9. Data security

We apply reasonable security practices and procedures consistent with the SPDI Rules and the DPDP Act, including: OTP-based authentication with hashed, expiring codes; JWT-secured API access; transport encryption (HTTPS/TLS); role-based access controls; and restricted, need-to-know handling of sensitive financial and identity data. While no method of transmission or storage is completely secure, we work to protect your information against unauthorised access, alteration, disclosure or destruction, and we will notify the Data Protection Board and affected users of a personal data breach as required by law.

10. Your rights under the DPDP Act

As a Data Principal under the DPDP Act, and subject to applicable law, you have the following rights:

Right to access — obtain a summary of the personal data we process about you and the processing activities undertaken. You can view and access much of your profile information directly within the app.
Right to correction and updating — correct inaccurate or misleading data, and complete or update incomplete data. You can edit your profile and addresses, and manage your bookings, from within the app.
Right to erasure — request deletion of your account and associated personal data, except where we are required to retain certain records for legal, tax or regulatory purposes.
Right to withdraw consent — withdraw consent for optional features (for example, decline location, camera or photo permissions in your device settings, or turn off notifications). Some features may then be limited.
Right to grievance redressal — raise a complaint with our Grievance Officer (see Section 16) about our handling of your data.
Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity, as permitted under the DPDP Act.

To exercise any of these rights, contact us using the details in Section 16. We may ask you to verify your identity (for example, via OTP on your registered number) before acting on a request. If you are dissatisfied with our response, you may escalate your complaint to the Data Protection Board of India.

11. Device permissions summary

The Platform requests the following device permissions, each on demand:

Location (precise / approximate) — Customer app: Set or confirm a service address and show it on a map. Optional — manual entry allowed.
Camera — Customer & Provider apps: Attach request/complaint photos (customers); capture selfie, KYC documents and job photos (providers). Optional, on demand.
Photos / Media (read) — Customer & Provider apps: Select existing photos to attach or upload. Optional, on demand.
Notifications — Customer & Provider apps: Booking, job and payout alerts. Optional.
Internet / Network — both apps: Core app functionality. Required.

12. Cookies and similar technologies

Our website uses only essential cookies and similar local-storage technologies needed for the site to function (for example, to remember your preferences within a session). We do not use the marketing website to run third-party advertising trackers. Our mobile apps do not use browser cookies; instead they use secure tokens (such as JWTs and push-notification tokens) stored on your device to keep you signed in and to deliver notifications. You can clear local storage or revoke notification permissions at any time through your browser or device settings.

13. Children

The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children. In line with the DPDP Act, we do not knowingly process the personal data of a child without verifiable parental or guardian consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us personal data, please contact us using the details in Section 16 and we will delete it.

14. Cross-border transfers

Affluent-One operates in India and primarily processes and stores personal data within India. Some service partners (for example, push-notification and email infrastructure) may process limited data outside India. Where this occurs, we transfer data only to countries not restricted by the Central Government for such transfers, and we take steps to ensure the data is protected in line with this policy and applicable law.

15. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified within the app or by other reasonable means, and the “Last updated” date at the top of this page will be revised. Your continued use of the Platform after changes take effect constitutes your acceptance of the updated policy.

16. Grievance Officer and contact

In accordance with the Information Technology Act, 2000, the IT Rules, 2021 and the DPDP Act, the contact details for privacy queries and grievance redressal are set out below. We acknowledge grievances within 24 hours and aim to resolve them within 15 days of receipt.

Data Fiduciary / Operating company: AffluentPay Technologies Private Limited (CIN U62099KA2025PTC203698)
Grievance Officer: Grievance Officer, AffluentPay Technologies
Email: info@affluentpaytech.com
Registered office: AffluentPay Technologies Pvt. Ltd.
3rd Floor, STARTUP HUTS
27th Main Road, 2nd Sector
HSR Layout, Bengaluru
Karnataka - 560102, India

For any privacy or data-protection query, or to exercise your rights under this policy, please write to info@affluentpaytech.com.