Home › Privacy Policy
Privacy Policy
Effective date: 15 June 2026 · Last updated: 6 July 2026 · Applicable law: DPDP Act 2023 & IT Act 20001. Who We Are
Veltonor ("XpertWorker", "we", "us") operates an online marketplace at xpertworker.com that connects customers with independent home-service professionals in Delhi NCR.
XpertWorker acts as a "Data Fiduciary" as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act") in respect of personal data it processes. We are committed to handling your data transparently, securely, and in full compliance with applicable Indian law.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have over it.
2. Data We Collect
2.1 Data you provide directly
- Mobile number — your primary account identifier, collected via OTP-based registration.
- Name — provided during profile setup.
- Address / location — provided by you or detected via device GPS (with your permission) when searching for services or placing a booking. Used solely to find nearby Professionals.
- Service details — the type of service requested, problem description, and any notes you add to a booking.
2.2 Additional data collected from Professionals
- KYC documents — government-issued photo identity (Aadhaar card, PAN card, or driving licence) and a self-photograph.
- Trade certificates — professional qualifications or licences, where applicable.
- Bank / UPI details — for processing lead-fee payments only.
- Service area and radius — for geolocation-based customer matching.
2.3 Data collected automatically
- Device & browser information — type, OS version, browser; used for technical support and security.
- Usage data — pages visited, features used, session duration; used to improve the Platform.
- IP address — used for security monitoring and fraud prevention.
- Cookies and local storage — session tokens and preferences (see Section 7).
3. How We Use Your Data
| Purpose | Legal basis (DPDP Act 2023) |
|---|---|
| Creating and managing your account | Consent |
| Matching Customers with nearby Professionals | Consent / Contractual necessity |
| Sending OTPs, booking confirmations, and service notifications | Consent |
| Sharing Customer contact details with matched Professionals | Consent (given at booking submission) |
| Processing lead-fee payments (Professionals only) | Contractual necessity |
| Improving Platform features and user experience | Legitimate use |
| Fraud prevention and platform security | Legitimate use / Legal obligation |
| Responding to support queries and complaints | Legitimate use / Legal obligation |
| Compliance with court orders or law-enforcement requests | Legal obligation |
4. How We Share Your Data
4.1 With Professionals: When you submit a Booking, your name, mobile number, approximate location, and service requirements are shared with one or more relevant Professionals in your area. You consent to this disclosure by submitting a Booking.
4.2 With service providers: We share data with trusted third-party technical partners (cloud hosting, SMS gateway, analytics, payment processor) only to the extent necessary to operate the Platform. All partners are contractually bound to protect your data and prohibited from using it for any other purpose.
4.3 For legal compliance: We may disclose personal data to law-enforcement authorities, courts, or regulatory bodies when required by law, court order, or to protect the safety, rights, or property of any person.
WE DO NOT SELL YOUR PERSONAL DATA TO ANY THIRD PARTY. WE DO NOT SHARE YOUR DATA WITH ADVERTISERS. WE DO NOT USE YOUR DATA FOR TARGETED ADVERTISING ON ANY THIRD-PARTY PLATFORM.
5. Data Retention
- Active accounts: Data is retained while your account is active and for a minimum of 2 years after your last activity, or as required by law.
- Booking records: Retained for 5 years for legal and audit purposes.
- KYC documents (Professionals): Retained for 7 years or as required by law.
- OTP and session logs: Deleted after 90 days.
- Data deletion requests: Processed within 30 days of a valid verified request, subject to legal retention obligations that may prevent full deletion.
6. Your Rights Under the DPDP Act 2023
As a "Data Principal" under the Digital Personal Data Protection Act, 2023, you have the following rights:
To exercise any of these rights, email grievance@xpertworker.com with your registered mobile number and the right you wish to exercise. We will respond within 15 working days.
7. Cookies & Local Storage
We use only essential cookies and browser local storage — no advertising or cross-site tracking cookies:
- Login session (JWT token stored in local storage)
- Location and service preferences
- Security tokens (CSRF protection)
You can clear cookies and local storage via your browser settings at any time. Doing so will log you out of the Platform. For full details, see our dedicated Cookie Policy.
8. Children's Privacy
The Platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, please contact grievance@xpertworker.com immediately and we will delete the data promptly.
9. Security
We implement reasonable technical and organisational safeguards, including:
- HTTPS / TLS encryption for all data in transit;
- Access controls and authentication for database and administrative systems;
- Restricted staff access on a need-to-know basis;
- Regular security reviews of the Platform.
No method of electronic transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security of data transmitted to or stored by us.
10. Third-Party Links
The Platform may contain links to external websites. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before submitting any personal data to them.
11. Cross-Border Data Transfers
Your personal data is stored on servers located within India. If we ever transfer personal data outside India, we will do so only in accordance with the DPDP Act, 2023 and applicable government notifications, ensuring appropriate safeguards are in place.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified via the Platform or to your registered mobile number before taking effect. Continued use of the Platform after the effective date of a revised policy constitutes your consent to the revised terms.
13. Grievance Officer
As required under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, we have designated a Grievance Officer for privacy-related complaints:
Grievance Officer: [Name — please update in Admin → Legal & Company]
Email: grievance@xpertworker.com
Address: Veltonor, New Delhi – 110001, India
Acknowledgement: Within 24 hours · Resolution target: Within 15 working days
We have also designated a resident Nodal Officer to coordinate with law-enforcement agencies as required under the Consumer Protection (E-Commerce) Rules, 2020. Full officer details, timelines, and escalation options are set out on our Grievance Redressal page.
If you are dissatisfied with our response, you may escalate to the Data Protection Board of India once constituted under the DPDP Act, 2023.
14. Contact
For general data or privacy queries, email support@xpertworker.com.
Also read: Terms of Service · Refund & Cancellation Policy · Cookie Policy · Grievance Redressal