1Background

PHS Cleaning Company ('PHS', 'Company', 'we', 'our', or 'us') provides premium doorstep home management, cleaning, maintenance, repair, and pest control services. This Privacy Policy explains how we collect, use, store, share, and protect your personal data ('Personal Data') when you visit our website, use our mobile application, book our services, or interact with our customer-care desk.

1.1 Purpose of this Policy

• Describes the categories of Personal Data we collect and the lawful grounds for processing.
• Explains how your data is used, shared, and safeguarded across our Customer, Partner, and Admin portals.
• Sets out your rights, retention timelines, and the procedure to raise requests or grievances.

1.2 Acceptance of this Policy

• By registering an account, creating a profile, completing a payment, or booking a doorstep service, you consent to the collection and processing described in this Policy.
• You may withdraw consent at any time, subject to the limitations described in Section 19.
• If you do not agree with any part of this Policy, please do not use our Platform.

2Personal Data We Collect

We collect only the Personal Data that is necessary to operate the Platform, deliver services, secure payments, and meet our legal obligations.

2.1 Identity & Contact Information

• Full name
• Mobile number (used for OTP verification and service SMS)
• Email address (for invoices, receipts, and support correspondence)
• Profile photograph/avatar (optional)
• Date of birth or government identifiers (only where required for verification)

2.2 Address & Location Information

• Saved delivery/service addresses, including house number, street, landmark, city, and PIN code
• Optional GPS coordinates (latitude/longitude) when you use 'Use my current location'
• Service-area availability preferences

2.3 Account & Device Information

• Login activity and OTP verification events
• Device make, model, and operating system
• Browser type and version
• IP address and approximate region
• In-app notification device tokens used for push notifications
• App version and feature usage

We do not collect sensitive financial credentials such as credit/debit card numbers, CVV codes, or net banking passwords on our servers. Card payments are processed directly by our RBI-authorized payment gateway (Razorpay).

3Professional / Partner Data

If you register as a Professional (Partner), we collect additional data to verify your identity, manage your profile, assign jobs, and ensure compliance with onboarding and audit requirements.

3.1 Identity & KYC Documents

• Full name, mobile number, and email address
• Profile photo
• Government-issued identity documents (e.g., Aadhaar, PAN) and bank account details for payouts
• Self-attested KYC documents uploaded to our secure document store

3.2 Professional Profile & Performance

• Service categories and sub-categories you offer
• Service pincodes/areas you cover
• Completed jobs, ratings, reviews, and service history
• Assignment, rejection, and cancellation metrics used for fair job allocation
• Last assigned timestamp used by our round-robin assignment engine

4Booking & Service Information

Whenever you place a booking, we collect the information required to schedule, price, coordinate, and deliver the service.

• Selected service, subcategory, variants, and add-ons
• Preferred date and time slot
• Booking address and mapping coordinates
• Answers to service-specific booking forms
• Quotations and approvals for inspection-based or extra work
• Pricing breakdown, discounts, wallet credits, and payment status

This information is snapshotted into the booking and order records so it remains accurate for fulfillment, invoicing, audits, and dispute resolution even if you later edit your profile.

5Payments & Wallet

Payments for bookings, wallet recharges, and offer-card purchases are processed through RBI-authorized payment partners such as Razorpay. We process payment-related data but never store raw card credentials.

• Razorpay order IDs, payment IDs, and signature (for transaction verification)
• Payment method used (UPI, card, net banking, or wallet)
• Wallet transaction history, including cash and bonus balances, recharges, and offer purchases
• Refund and reversal records

We comply with applicable payment-card industry standards and RBI guidelines. All payment transactions are encrypted in transit between your device, Razorpay, and our servers.

6Referrals

Our referral program lets you invite friends to join PHS. When a friend registers using your referral code or link, we record the attribution so that wallet rewards can be issued accurately.

• Your unique referral code
• The referred friend's account details and sign-up source (code or link)
• Referral status history and the reward configuration snapshot in effect at sign-up
• Wallet credit events issued to you and your referred friend

Referral rewards are issued only after successful, attributable registration and are subject to the Referral Program terms, including our anti-fraud safeguards.

7Reviews & Ratings

You may write reviews, assign ratings, and upload photos after a completed service. Reviews help other customers choose services and inform our quality programs.

• Rating out of five stars and written feedback
• Photographs of the completed work (optional)
• Professional and admin responses to your review
• Moderation actions taken on your content

Reviews are displayed publicly on service and professional profiles. We moderate content that violates our guidelines and may remove content that exposes the Personal Data of third parties.

8Notifications & Device Data

With your permission, we send transactional and promotional notifications via push notification, SMS, and email.

• Device tokens registered with our push notification (FCM) service
• Opt-in/opt-out preferences
• Read/unread state and delivery status of notifications

Notifications inform you about job assignment, booking status changes, offers, low wallet balance, and support responses.

You can disable push notifications from device settings or in-app preferences. Disabling them may prevent important service updates from reaching you.

9Technical Information, Analytics & Logs

We collect limited technical and usage data to keep the Platform fast, secure, and reliable.

• IP address, browser, device make/model, and operating system
• Pages visited, feature interactions, and approximate region
• Performance and speed metrics via Vercel Analytics and Vercel Speed Insights
• Admin audit logs that capture actor, action, and IP address for accountability

We do not use crash-reporting SDKs or device fingerprinting. Where possible, analytics are aggregated so they cannot be tied back to you individually.

Server and audit logs are retained for security monitoring, fraud prevention, and troubleshooting, consistent with the retention periods in Section 17.

10Search, Interest & Service Availability

We use search and availability data to recommend relevant services and to decide which services to launch in your area.

• Search terms entered on our Platform
• Services viewed and added to cart
• Service-interest and waitlist requests, including 'Coming Soon' services
• PIN-code availability checks run against our service-area engine

Interest and waitlist data helps us plan supply, onboard professionals, and decide when a service should go live in your location.

11How We Collect Personal Data

11.1 Information You Provide

• Account registration and profile completion
• Booking and checkout forms
• Reviews, support tickets, and feedback
• KYC document uploads (Partners)
• Referral sign-ups and waitlist registrations

11.2 Information Collected Automatically

• Browser cookies and platform local storage
• Device and technical identifiers described in Section 2.3
• Server and access logs
• Optional geolocation when you enable current-location features

11.3 Information From Third Parties

• Payment confirmations and status from Razorpay
• OTP delivery confirmations from our SMS gateway (Twilio)
• Referral attribution from your referred friend's registration
• Service-area and pin-code lookups from public postal APIs

12How We Use Personal Data

We process Personal Data for the following purposes, on the lawful grounds of consent, contract performance, and legitimate business interest:

1. Create, manage, and authenticate your account
2. Send and verify OTPs for login and registration
3. Validate service availability at your pincode
4. Process payments, wallet transactions, and refunds
5. Confirm, schedule, and manage bookings
6. Auto-assign professionals using our round-robin assignment engine
7. Coordinate service delivery between customers and professionals
8. Generate and manage quotations for inspection-based services
9. Secure approval for extra work or additional charges
10. Provide customer support and grievance resolution
11. Send push, SMS, and email notifications about your bookings
12. Issue invoices and tax receipts
13. Administer referrals, rewards, and wallet credits
14. Manage offer-card purchases and entitlements
15. Serve and manage waitlist registrations
16. Collect and display reviews and ratings
17. Improve service quality, content, and recommendations
18. Measure and analyze platform performance
19. Detect and prevent fraud, abuse, and security threats
20. Comply with legal, regulatory, and tax obligations
21. Enforce our Terms & Conditions
22. Support internal administration and audits

13How We Share Personal Data

We do not sell, rent, or trade your Personal Data. We share data only as necessary to deliver services and operate the Platform.

13.1 With Assigned Professionals

• Customer name
• Service address, city, and pincode
• Mapped GPS coordinates (where provided) to aid navigation
• Booking date, time, and service requirements
• Relevant form answers needed to perform the task

Professionals require this information to reach your premises and deliver the booked service. Access is limited to bookings assigned to the specific professional and is enforced through row-level access controls.

13.2 With Service Providers

• Cloud database and hosting (Supabase)
• SMS/OTP gateway (Twilio)
• Push notification delivery (Google Firebase Cloud Messaging)
• Payment processing and webhook reconciliation (Razorpay)
• Analytics and performance monitoring (Vercel)

13.3 With Mapping & Utility Partners

• OpenStreetMap and Leaflet tiles for map previews and location picking
• Google Maps (where enabled) for geocoding and navigation
• India Post pincode API for service-area validation

13.4 Legal & Regulatory Disclosures

• To law enforcement, courts, or regulators where required by law, judicial order, or statutory audit
• To our professional advisers and auditors under confidentiality obligations
• To a successor entity in the event of a business transfer (see Section 25)

14Maps & Location Data

Location data is strictly optional. We never require GPS access to register; you can always type your address and pincode manually.

"Use my current location" — we request location access only to pre-fill your address automatically.

• When you grant location permissions, we read your GPS coordinates to pre-fill the address form
• Coordinates are stored on your saved address and snapshotted into bookings/orders at checkout
• Coordinates are shared with the assigned Professional to help them navigate to your home
• Admins have operational access to booking addresses for scheduling and support
• We do not track your location in the background when the app is closed

You can revoke location permissions anytime through your browser or device settings; the Platform continues to function with a manually entered address.

15Cookies, Local Storage & Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and improve the experience.

• Session tokens and cached user/session state (local storage)
• Cart and service selections
• Referral deep-link and offer/wallet intent values
• Notification and booking cache-invalidation keys
• Analytics and performance markers

You can clear or disable cookies/local storage in your browser or app settings. Some features may not work correctly if essential storage is blocked.

16Data Security

We apply a defense-in-depth approach to protect your data:

• Encryption of data in transit (TLS/SSL) over HTTPS
• Row Level Security (RLS) and role-based access across the Customer, Partner, and Admin portals
• Server-side, service-role restricted operations for financial mutations such as wallet credits
• Protected-column triggers that prevent unauthorized profile and balance edits
• Storage-bucket access controls and file-size limits on uploads
• Audit logging of administrative actions

While we take every reasonable precaution, no method of transmission or storage is guaranteed to be 100% secure. Please protect your device and passwords, and never share OTPs with anyone, including callers claiming to be our professionals.

17Data Retention

We keep Personal Data only as long as needed for the purposes described in this Policy or as required by law.

• Account and profile data: while your account remains active
• Booking, order, invoice, and payment records: as required by accounting and tax laws (typically up to 8 years)
• Wallet transaction and recharge records: while your account is active and thereafter as required by statutory records
• Partner KYC documents: while the partner relationship is active and for the statutory audit window afterwards
• Reviews: while the service or professional profile is published
• Audit logs and security data: for a limited security-monitoring window

When data is no longer needed, we delete it or render it unidentifiable in line with our retention schedule. See Section 18 for erasure requests.

18Account Deletion & Data Erasure Requests

You may request deletion of your account and associated Personal Data at any time. Self-serve account deletion is handled through our support team to prevent accidental loss of booking and legal records.

• Email your request to phscustomercare15@gmail.com from your registered email address
• Our team verifies your identity before processing any request
• Routine deletion of active data is processed within 30 days of a verified request
• Certain records (invoices, payments, tax details, dispute records) are retained for the statutory period required by law even after account deletion
• A confirmation is sent to your registered email once processing is complete

Note that deleting your account does not automatically remove public reviews or content you posted; please raise a separate request if you also want those removed.

19Your Privacy Rights

Under the DPDP Act 2023 and this Policy, you have the following rights, exercisable free of charge:

• Right to Access: request a summary of your Personal Data and why it is processed
• Right to Correction: correct or update inaccurate or incomplete data
• Right to Erasure: request deletion when data is no longer needed (see Section 18)
• Right to Withdraw Consent: withdraw consent for processing where consent is the lawful basis
• Right to Nominate: nominate a person to exercise your rights in the event of your incapacity or death
• Right to Grievance Redressal: raise a complaint with our Grievance Officer or the Data Protection Board of India (DPBI)

To exercise any of these rights, contact our Grievance Desk using the details in Section 27. We may ask for identity verification to protect your data.

20Information About Professionals

Our Professionals are verified service providers engaged by PHS. Certain professional data is shown to customers to enable informed choices.

• Professional name and profile photo
• Average rating and number of completed jobs
• Service categories offered and indicative pricing
• Availability and assigned job details

We do not expose professionals' private contact details, KYC documents, or bank information on customer-facing pages. Customer data and professional data are isolated using row-level access controls.

21Public Reviews & Content

Content you post publicly (reviews, ratings, photos) may be visible to other users and used for moderation and quality purposes.

• Reviews appear on the relevant service or professional profile
• Photos attached to reviews may be moderated before display
• We may contact you about your feedback for quality assurance

Content that violates these rules will be removed, and repeated violations may lead to action on your account.

22Children's Privacy

Our Platform and services are directed to adults aged 18 and above who can enter into binding contracts. We do not knowingly collect Personal Data from children.

If you believe a child has provided us Personal Data without parental consent, contact us at the details in Section 27. Upon verification, we will delete such data promptly.

23Third-Party Websites & Links

The Platform may contain links to third-party websites or services (for example, payment pages, mapping services, app stores, and social media).

• Third parties operate under their own privacy policies and terms
• We are not responsible for their data practices or content
• You should review their policies before sharing data with them

Our payment, SMS, and analytics providers are trusted partners; however, they are independent data processors and their practices are governed by their own terms.

24International Data Transfers

Some of our service providers process data on infrastructure that may be located outside India (for example, cloud hosting, analytics, and push-notification infrastructure).

When Personal Data is transferred internationally, we rely on contractual safeguards and the reasonable security standards required under applicable law, including the DPDP Act 2023. By using the Platform, you consent to such transfers to the extent permitted by law.

25Business Transactions

If PHS is involved in a merger, acquisition, reorganization, or sale of assets, Personal Data may be transferred as part of that transaction.

We will notify affected users of such a transfer and of any material change to the processing of their data. This Policy will continue to apply to data transferred to the successor in a manner consistent with this Policy.

26Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law.

• Material changes will be published on this page with the revised 'Last Updated' date
• Where required, we will notify you via email or an in-app notification
• Your continued use of the Platform after changes take effect constitutes acceptance of the revised Policy
• We encourage you to review this Policy periodically

27Contact & Grievance Redressal

If you have questions, concerns, complaints, or requests about this Policy or your Personal Data, please contact our Grievance Desk:

• Official Privacy / Grievance Email: phscustomercare15@gmail.com
• Registered Business Address: C1-40, Gulmohar Vihar, Near Shivaji Pulia, Naubasta, Kanpur, Uttar Pradesh – 208014, India
• Grievance Officer: Pavan Kumar (Sole Proprietor) — reachable at +91 74087 02019
• Response Timeframe: We acknowledge complaints within 72 hours and aim to resolve them within 15 days; complex issues may take up to 30 days
• Payment-Feature Escalation: For payment-related grievances, you may additionally approach your bank or the Reserve Bank of India's ombudsman scheme

28Important Notice

Nothing in this Privacy Policy limits your rights under the Digital Personal Data Protection Act, 2023, or any other applicable Indian law. If any provision of this Policy is held invalid or unenforceable, the remaining provisions remain in full force.

This Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the competent courts at Kanpur Nagar, Uttar Pradesh.