Privacy Policy

Looking to book staff? Open TatkalStaff · view this page in the app

1. Who is responsible for your data

TatkalStaff is operated by Meshak Dayanand, an individual (sole proprietor), Goa, India. For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, TatkalStaff is the Data Fiduciary for the personal data described here. You can reach our Grievance Officer as shown in section 10.

2. Data we collect

Everyone	Name, mobile number (verified by OTP), account type, area, organisation name (clients, optional).
Staff profile	Education details and education certificates / marksheets (images or PDF), other skill certificates, declarations (12th pass, not employed), skills, hourly rate, experience, languages, short bio, payout UPI ID.
Bookings	Work address, dates and hours, Start/End timer records, in-app chat messages, before/after photos of the work, ratings and reviews, disputes, no-show reports and strikes.
Location	Staff GPS check-in when they tap “I’ve arrived” — one location reading, used to confirm they are within about 1 km of the work address. If you tap “Near me” while searching, your location is used on your device only to sort results and is not stored.
Agreements	Each acceptance of our terms: version, date and time, typed name (signature) and a device/browser identifier.
Payments	Amount, status, Razorpay order / payment / refund IDs and payment method type. Card numbers, UPI PINs and bank passwords are entered on Razorpay’s secure checkout — we never see or store them.
Help chat	Questions you type in the Help chat. Phone numbers and e-mail addresses are removed before any question is processed.
Technical	Login session and preferences stored in your browser, and basic security logs (such as time and IP address) kept by our hosting providers.

3. Why we use it

To create and secure your account (OTP login).
To verify staff eligibility and documents before approval.
To show staff profiles to clients — name, education summary, skills, hourly rate, ratings and approximate area. Phone numbers, exact location and certificate files are never shown to other users.
To run bookings: scheduling, chat (with contact details masked), timer, check-in, photos, billing and receipts.
To take payments, pay staff over UPI and issue refunds.
To keep the Platform safe: detect contact-sharing and off-platform deals, handle disputes, strikes and removals.
To answer support requests, and to meet legal, tax and accounting obligations.

We process your data on the basis of the consent you give when you sign up and accept our terms, and for legitimate uses allowed by the DPDP Act, such as complying with law or responding to legal requests. We do not sell your personal data and we do not use it for third-party advertising.

5. Where and how we store it

Data is stored with Supabase (a PostgreSQL database and private file storage); we use their Mumbai, India region. Certificates, photos and signed agreements are kept in private storage and shown only through short-lived links to people allowed to see them.

Encryption in transit (HTTPS) and at rest by our providers.
Row-level security: each user can read only their own records and the bookings they are part of; staff and admin actions go through checked server functions.
Access to personal data within our team is limited to what is needed to run the service.

If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as required by law.

6. How long we keep it

Account and profile	While your account is active. After you close it, we delete or anonymise it within 90 days, except the records below.
Certificates and ID documents	While you are a registered staff member; deleted within 90 days of account closure. Rejected applications: within 6 months.
Chat messages and work photos	1 year after the booking ends (longer only if needed for an open dispute or legal claim).
Bookings, timer records, check-ins, payments, refunds, payouts and signed agreements	Up to 8 years, as required by tax and accounting laws and to handle legal claims.
Removed (banned) phone numbers	Kept to prevent re-registration while the removal applies.

7. Your rights

Under the DPDP Act you have the right to:

Access a summary of the personal data we hold about you and how it is used.
Correct, complete or update your data — most details can be edited in your profile.
Erase your data (account deletion), subject to the legal retention periods above.
Withdraw consent at any time. This will not affect processing already done, but we may no longer be able to provide the service (for example, staff cannot take bookings without verified documents).
Grievance redressal — complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.
Nominate another person to exercise your rights in the event of death or incapacity.

To use any of these rights, e-mail [email protected] from your registered details and include your registered mobile number. We may verify your identity before acting.

8. Children

TatkalStaff is only for people aged 18 or above. We do not knowingly collect personal data of children. If you believe a child has registered, please contact us and we will delete the account.

9. Cookies and local storage

We use your browser’s local storage only to keep you signed in, remember preferences and let the app work offline. We do not use advertising cookies or third-party tracking.

10. Grievance Officer

Name	Meshak Dayanand
E-mail	[email protected]
Phone	to be announced (please e-mail us meanwhile)
Address	TatkalStaff, Goa, India

We acknowledge complaints within 48 hours and aim to resolve them within 15 days.

11. Changes to this policy

If we make important changes, we will show a notice in the app and update the "Last updated" date above.