UrbanX Contractor

Effective Date: September 2, 2026

Somish Realty Private Limited ("Company", "we", "us", or "our") operates the UrbanX Contractor mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

When you register or log in to the App, we collect:

• Phone Number — Used for OTP-based authentication and account identification.
• Name — Your display name as provided during profile setup.
• Email Address — If provided during profile update.
• User Role — Your account type (User, Vendor, or Supervisor).

1.2 Location Information

We collect and process your location data to:

• Display relevant services and service providers near you.
• Auto-detect your current address for booking convenience.
• Match your GPS coordinates with saved addresses.
• Enable service providers (Vendors/Supervisors) to locate appointment sites.

Location data collected includes latitude, longitude, and approximate street address derived from your device's GPS. You may deny location access at any time; the App will still function with reduced location-based features.

1.3 Address Information

When you add or save addresses, we store:

• Address text and label (e.g., Home, Office).
• Associated latitude and longitude coordinates.
• Address type and unique identifier.

1.4 Booking and Service Data

When you create or manage bookings, we collect:

• Service category, service type, and selected service details.
• Appointment date, time slot, and scheduling information.
• Booking status, quotations, and pricing details.
• Messages exchanged through the bargaining/negotiation feature.

1.5 Media Uploads

During service appointments, Vendors and Supervisors may upload photos and videos as evidence of completed work. These files are transmitted to our servers and stored for record-keeping, quality assurance, and dispute resolution.

1.6 Device and Usage Information

We automatically collect certain technical information when you use the App:

• Device model, operating system version, and unique device identifiers.
• App version and crash logs.
• Internet connection type and network information.
• Usage patterns within the App (screens visited, features used).

1.7 Stored Local Data

The App stores certain data locally on your device using secure storage mechanisms:

• Authentication tokens (encrypted and stored securely).
• Session and login state.
• Cached preferences and settings.

2. How We Use Your Information

We use the information we collect to:

• Provide services: Process bookings, connect you with service providers, and facilitate appointments.
• Authentication: Verify your identity through OTP-based login.
• Communication: Send booking confirmations, updates, and service-related notifications.
• Location matching: Show relevant services and nearby vendors based on your location.
• Quality assurance: Review uploaded media to ensure service quality and resolve disputes.
• App improvement: Analyze usage patterns to improve features, performance, and user experience.
• Security: Detect and prevent fraud, unauthorized access, and abuse.
• Legal compliance: Meet regulatory and legal obligations.

3. Data Sharing and Disclosure

We may share your information with the following categories of recipients:

3.1 Service Providers (Vendors & Supervisors)

When you book a service, relevant information including your name, phone number, address, and booking details is shared with the assigned Vendor or Supervisor solely for the purpose of fulfilling the service appointment.

3.2 Google Services

We use the following Google services, which may collect data as described in Google's Privacy Policy:

• Google Maps SDK — For map display and location visualization.
• Google Places API — For address search and autocomplete functionality.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

4. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption: All API communication is encrypted using AES-256 encryption. Data payloads are encrypted before transmission and decrypted upon receipt.
• Secure Storage: Authentication tokens are stored using platform-native secure storage (Android Keystore / iOS Keychain).
• HTTPS: All network communication is transmitted over TLS-encrypted connections.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access user data.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

5. Data Retention

We retain your information for as long as:

• Your account is active.
• It is needed to provide you with services.
• Required to comply with legal obligations, resolve disputes, and enforce agreements.

Booking records, work photos, and service history are retained indefinitely for quality assurance and legal purposes. You may request deletion of your account and associated data by contacting us.

6. Your Rights

Under applicable data protection laws (including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Withdraw consent for data processing at any time.
• Object to certain types of data processing.
• Grievance redressal — File a complaint regarding data processing.

To exercise any of these rights, please contact our Grievance Officer using the details below.

7. Children's Privacy

The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

8. Third-Party Links and Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the App.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra, India.

11. Contact Us / Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: