This Privacy Policy explains how Bitmoro Technologies Private Limited, with its principal place of business at #151, First Floor, Bharathi Monarch Layout, Martikyathanahalli, Mysore, Karnataka 570026, India (“Bitmoro”, “we”, “us”) collects, uses, shares, and protects personal information when you use the Phataafat customer and partner applications and related services (the “Platform”). Bitmoro operates the Phataafat brand. It applies to users in India and is designed to align with common expectations under the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws.
Bitmoro Technologies Private Limited (https://bitmorotechnologies.com/) operates the Phataafat marketplace platform connecting Customers and Partners from #151, First Floor, Bharathi Monarch Layout, Martikyathanahalli, Mysore, Karnataka 570026, India. For the purposes of this Policy, we act as a data fiduciary with respect to personal data we determine the purposes and means of processing. Contact: contact@bitmorotechnologies.com (privacy and data requests); contact@bitmorotechnologies.com (general support).
We may collect: (a) Identity and account data — mobile number, name, profile photo, account type (e.g. household or business), language preference; (b) Partner profile data — skills, service categories, rates, verification documents or references you submit, work history generated from completed jobs; (c) Job and booking data — descriptions, photos, schedule, budget indications, visit status, door PINs (stored in protected form), assignments, and completion records; (d) Location data — GPS or address you provide, saved addresses, map pins, coarse or precise location during active visits when you enable location features; (e) Communications — in-app chat, support tickets, SOS or safety reports; (f) Payment-related metadata — platform fee records, UPI or payout identifiers Partners provide (we do not store full card data on the Platform for job payments); (g) Device and usage data — app version, device tokens for push notifications, logs, crash diagnostics, and security signals; (h) OTP and SMS delivery metadata from our messaging providers.
We use personal data to: create and secure accounts; match Customers with nearby Partners; display maps, ETAs, and visit status; send OTPs, job alerts, and optional SMS; process platform fees; operate ratings, reliability, and trust features; investigate abuse, fraud, and safety incidents; comply with law; and improve the Platform. We rely on grounds such as performance of a contract with you, legitimate interests (security, product improvement), and consent where required (for example, optional marketing or precise location when prompted by the OS).
We share information only as needed: between Customers and Partners involved in a job (e.g. name, photo, location, chat); with service providers (cloud hosting, SMS/OTP, maps, analytics, identity verification, payment processors for platform fees) under contractual safeguards; with law enforcement or regulators when required by law or to protect safety; and in connection with a merger, acquisition, or asset sale with appropriate notice where required. We do not sell your personal data.
Location is used to show nearby supply and demand, suggest addresses, and — during an active visit — to support features such as en-route status or maps visible to the other party when you use those features. You can control OS-level location permissions; some features will not work without them. We retain location tied to jobs as part of booking records for a limited period described below.
We retain personal data for as long as your account is active and as needed to provide the Platform, resolve disputes, enforce agreements, and meet legal obligations. Job, chat, and verification records may be kept for defined periods after completion for trust, safety, and accounting. When you delete your account, we delete or anonymize personal data except where retention is required by law or legitimate ongoing claims.
We use administrative, technical, and organizational measures appropriate to the sensitivity of the data, including encryption in transit (HTTPS), access controls, and hashed storage for sensitive tokens where applicable. No method of transmission or storage is completely secure; please use strong device locks and do not share OTPs or visit PINs.
Subject to applicable law (including DPDPA), you may have the right to access, correct, or delete personal data; withdraw consent where processing is consent-based; nominate another person to exercise rights in certain circumstances; and lodge a grievance with us. Use in-app settings or email contact@bitmorotechnologies.com. We will verify requests using your registered mobile number or other reasonable means. You may opt out of non-essential push notifications in device or app settings; OTP and critical job SMS may still be sent when necessary for the service.
The Platform is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.
Our primary systems are intended for users in India. If we or our processors process data outside India, we will do so with safeguards consistent with applicable law and this Policy.
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated through the app or other reasonable notice. Continued use after the effective date means you accept the updated Policy.
For privacy questions, access or deletion requests, or complaints, contact contact@bitmorotechnologies.com. We aim to acknowledge grievances within a reasonable time and resolve them per applicable law. You may also have the right to approach the Data Protection Board of India or other forums as provided under DPDPA when in force for your situation.