Privacy Policy — [GetDone] / [GetDone-Partner]

2. Information We Collect

We collect information to operate and improve the Service. We describe below what we collect, why, and how.

A. Information You Provide Us

• Account Data: name, email address, phone number, profile picture, password.
• Contact Data: billing and service addresses (where applicable).
• Demographic Data (optional): age, gender, preferences. We do not request sensitive categories unless explicitly provided and permitted by law.
• Service Data: details of the service requested (for example: "fix a leaky faucet", "design a website"), photos/videos you upload, date/time preferences, notes and instructions.
• Payment Data: payment instrument identifiers (card token, UPI ID, wallet ID). We use PCI-DSS-compliant third-party payment processors and do not store full sensitive card details on our servers.
• Content: messages, chats, reviews, ratings, and any call-recordings you consent to provide.

B. Information We Collect Automatically

• Location Data: precise GPS location (when you enable it) to match with nearby service providers, and coarse location inferred from IP address.
• Device & Connection: IP address, device identifiers, operating system, app version, IMEI (where available and lawful), mobile network operator, browser type, and connection type.
• Usage Data: pages/screens viewed, features used, search queries, clicks, session duration, errors, and other analytics collected via cookies and similar technologies.

C. Information From Third Parties

• Social Logins: if you sign in via Google, Facebook, or another provider, we may receive basic profile information from those services.
• Partners & Vendors: data from analytics providers, advertising partners, identity verification services, background check vendors, or other service providers.
• Referrals: when referred, we may collect contact information provided by the referrer and the referred person.

3. How We Use Your Information

We use collected data for specific and limited purposes. Examples below map data types to uses.

• To provide and maintain the Service: account, location, and service data let us facilitate bookings, match you with providers, schedule visits, and process payments.
• To improve and personalize: usage data and preferences enable recommendations, personalized search results, and better UI/UX.
• To communicate: transactional messages (booking confirmations, receipts), service status updates, and customer support communications. With consent, we may send promotional messages; you may opt-out at any time.
• For customer support: to troubleshoot, investigate issues, and resolve disputes.
• For safety & security: to verify identities, detect and prevent fraud, spam, and other abusive behavior.
• For legal compliance: to meet legal obligations and enforce our Terms of Service.

4. How We Share Your Information

Sharing is necessary for the core functionality of a two-sided marketplace. We limit sharing to the purposes described below.

• With Service Providers ("Partners"): when you request a service we share the service details, contact info, and location with the matched provider so they can fulfill the job.
• With Other Users: provider names, profiles, ratings, and public reviews are displayed to users who book them.
• With Third-Party Vendors: payment processors, cloud hosting providers, analytics providers, push/SMS/email vendors, identity verification, and fraud-detection services. We require vendors to maintain appropriate security and confidentiality safeguards.
• For Business Transfers: in connection with a merger, acquisition, financing, or sale of assets, user data may be transferred as part of the transaction (with notice where required by law).
• For Legal Reasons: to comply with law, respond to lawful requests (e.g., court orders), or to protect rights, property, or safety.
• With Your Consent: any other sharing that is described to you at collection time or where you have given consent.

Payment note: we share necessary payment information with PCI-DSS-compliant processors. We do not store full card numbers or CVV on our servers.

5. Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or subject to GDPR, our lawful bases include:

• Contractual necessity: processing required to provide services you request (bookings, payments).
• Legitimate interests: to improve services, prevent fraud, and perform analytics (balanced against your rights).
• Consent: for optional processing such as certain marketing emails or precise location tracking; you may withdraw consent at any time.
• Legal obligation: to comply with applicable laws.

6. Data Retention

We retain personal data only as long as necessary for the purposes described or as required by law (for example, tax or accounting records).

Retention periods are determined by the nature of the data and the reason it was collected. For example:

• Account data: retained while account is active and for a limited period after deactivation for legal or business needs.
• Transaction and billing records: retained for statutory periods (e.g., for taxes).
• Support and communication logs: retention varies depending on the inquiry and legal needs.

7. Your Rights & Choices

Subject to local law, you may have the right to:

• Access & Portability: request a copy of your personal data in a machine-readable format.
• Correction: update or correct inaccurate information in your profile.
• Deletion: request deletion of your account and personal data (subject to legal exceptions).
• Objection/Restriction: object to or request restriction of certain processing activities.
• Marketing Preferences: opt-out of promotional communications via the "unsubscribe" link or app settings.
• Location Permissions: control precise location access via your device settings.
• Do Not Sell or Share (California): California residents can opt-out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. To exercise this right contact us at the address below.

How to exercise rights: Email getdone.pvt@gmail.com or use the in-app privacy request form. We will verify identity before fulfilling requests and respond within applicable legal timeframes.

8. Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar technologies for analytics, performance, and advertising purposes. A separate Cookie Policy (or cookie banner) lists the specific cookies and their purposes.

9. Third-Party Links and Integrations

The Service may contain links to third-party websites and services (for example, a provider's own website). We do not control third parties' privacy practices and are not responsible for them. Review the privacy policies of those third parties before providing personal information.

10. Data Security

We implement reasonable technical and organizational measures to protect personal data — for example, TLS/SSL encryption during transmission, access controls, secure servers, and regular security reviews.

However, no method of transmission or storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security.

11. International Data Transfers

We may process or store data in countries other than your country of residence. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect transfers of personal data across borders.

12. Children's Privacy

Our Services are intended for users aged 18 or older. We do not knowingly collect personal data from children under the age of 18 (or the minimum age required in your jurisdiction). If you believe we have collected a child's information, contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this policy periodically. If we make material changes, we will notify you (for example, via email, in-app notification, or a prominent notice on our website) and update the "Last updated" date above.

14. Contact Us

For privacy-specific inquiries, requests to exercise your rights, or complaints:

If you are a resident of the EU/EEA or California and would like to exercise your rights, please include your account details and a clear description of your request.