Privacy Policy — How Zaruri Hai Protects Your Personal Data

What Data We Collect

We collect only what's actually needed to book and deliver your service. Nothing extra.

When you create an account, we collect your name, mobile number, and email address. That's the basics — so we can set up your profile and send you booking updates.

When you make a booking, we also collect your service address, the type of service you've requested, your preferred time slot, and a record of that booking. We need this to send the right professional to the right place at the right time.

For payments, we work with Razorpay, which is PCI-DSS certified. We never store your full card details ourselves. Razorpay handles all payment data under their own strict security protocols.

If you use our app on your phone, we may collect your device type, OS version, and app version — purely for troubleshooting if something breaks. We also collect your approximate location when you open the app to find professionals near you. But we only use live location during an active booking session. We don't track you in the background.

If you contact our support team, we keep a record of that conversation — so we don't make you explain your issue from scratch every time.

What We Do NOT Collect

We don't ask for your Aadhaar number, PAN card, or any government ID from customers. We don't access your contacts, camera, or microphone beyond what the specific service requires. We don't build ad profiles based on your browsing habits.

How We Use Your Data

We use your data to do one thing well — deliver the service you've booked. Here's the full breakdown:

• Service delivery comes first. We use your name, address, and booking details to assign the right professional and confirm your appointment. Without this, the service simply can't happen.
• Booking confirmations and updates are sent via SMS and app notifications. So you always know when your professional is on the way, when they've arrived, and when the job's done.
• Professional matching uses your location and service type to find the most suitable available pro in your area. Moreover, it helps us route professionals efficiently across Kolkata — from Salt Lake to Behala to New Town.
• Customer support is another use. When you raise a complaint or query, we use your account data and booking history to resolve it faster.
• Service improvement matters to us, too. We analyse aggregated booking patterns — not individual profiles — to understand which services are in demand and where we should expand. For instance, if we notice a surge in AC repair bookings in Garia every May, we make sure we have enough professionals available there before the heat peaks.
• Marketing and offers — but only with your explicit consent. We'll ask before we send you promotional messages. And if you say no, or change your mind later, we respect that immediately. You can manage your marketing preferences anytime in the app under Settings > Notifications.

We don't use your data to make automated decisions that significantly affect you. No algorithm silently blocks or downgrades your account. If anything affects your account status, a human reviews it and you'll hear from us.

Who We Share Your Data With

Your data is not for sale. Full stop.

But to deliver your service, we do share limited information with specific parties. Here's exactly who and why:

• The professional assigned to your booking receives your first name, your service address, and your mobile number. That's all they get. They need it to reach your home and call you if they're delayed. Once the job is done, their access to your data doesn't extend further.
• Razorpay processes your payments. They receive your payment data under their own privacy framework and PCI-DSS compliance standards. We don't control what Razorpay does with data it receives — but they're bound by strict financial data regulations.
• Cloud infrastructure providers (currently AWS and Firebase) store our app data securely. These are industry-standard platforms used by thousands of Indian tech companies. The data remains within secure, access-controlled servers.
• Government or law enforcement authorities, but only when we're legally required to. For example, if a court order demands it, we comply. However, we'll always try to notify you first, unless we're legally prevented from doing so.

We don't share your data with advertising networks, data brokers, marketing agencies, or any other third party for commercial purposes.

Your Data Rights Under DPDPA 2023

India's Digital Personal Data Protection Act 2023 gives you real rights over your personal data. And we've built our systems to honour them properly.

• Right to Access — You can ask us what personal data we hold about you and how we're using it. We'll respond within 72 hours.
• Right to Correction — If something is wrong — wrong address, misspelled name, outdated phone number — you can update it directly in the app. Or email us and we'll fix it for you.
• Right to Erasure — You can ask us to delete your account and all associated personal data. We'll process this within 30 days. Some records, however, must be kept for legal compliance — see our data retention section below.
• Right to Withdraw Consent — Changed your mind about marketing messages? Or want us to stop using your data for a specific purpose? You can withdraw consent at any time. Simply go to Settings > Privacy in the app, or email us at privacy@zrurihai.com.
• Right to Grievance Redressal — If you feel we've mishandled your data, you have the right to raise a complaint. Our Grievance Officer responds within 72 hours. If you're not satisfied with our response, you can escalate to India's Data Protection Board.
• Right to Nominate — Under DPDPA 2023, you can nominate another person to exercise your data rights on your behalf in case of your death or incapacity. Contact us to set this up.

To exercise any of these rights, email privacy@zrurihai.com or write to us at our Newtown, Kolkata office. We don't charge any fee for handling rights requests.

Data Retention Policy

We don't hold onto your data any longer than necessary. Here's how long we keep different types:

• Account data is retained as long as your account is active. After you delete your account, we remove your personal data within 30 days — except where law requires us to keep it longer.
• Service and booking records are kept for 3 years. This helps us resolve any dispute that might come up about a past booking.
• Payment records are retained for 7 years. This is a GST compliance requirement under Indian tax law — not our preference, but a legal obligation.
• Support conversations are kept for 12 months, so we have context if a recurring issue needs review.

After these periods, data is either permanently deleted or anonymised so it can no longer be linked back to you.

Cookies & Analytics

When you visit our website at zarurihai.app, we use a small number of cookies to make the experience work properly.

• Google Analytics helps us understand how visitors use the site — which pages they visit, how long they stay, and where they come from. We use it in anonymised mode, so your individual identity isn't tracked. This data helps us improve the website over time.
• Razorpay places cookies on the payment pages to enable secure transaction processing. These are functional cookies — without them, payments won't work.

We don't use advertising cookies, retargeting pixels, or third-party behavioural tracking tools on our website.

On your first visit, you'll see a cookie consent banner. You can choose to accept all cookies, or decline the non-essential ones. If you later change your mind, clear your browser cookies and your preferences reset on the next visit.

How We Keep Your Data Safe

Security isn't an afterthought for us. We follow CERT-In guidelines for cybersecurity and implement industry-standard protections across our systems.

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Data stored in our databases is encrypted at rest. Access to customer data within our team is role-based — only people who genuinely need it for their job can see it.

We conduct regular internal security reviews. If we ever detect a data breach that could affect you, we'll notify you and report it to India's Data Protection Board without delay — as DPDPA 2023 requires.

That said, no system is 100% foolproof. So we also encourage you to use a strong password on your Zaruri Hai account and not share your OTP with anyone — including people claiming to be from our team. We never ask for your OTP over a call or message.

Children's Privacy

Our app and services are intended for users aged 18 and above. We don't knowingly collect personal data from anyone under 18 without verified parental consent, in line with DPDPA 2023 requirements.

If you're a parent and believe your child has created an account on our platform, please contact us at privacy@zrurihai.com immediately. We'll delete the account and all associated data promptly.

Changes to This Policy

We review and update this policy periodically — especially as regulations change or we add new services. When we make significant changes, we'll notify you via app notification or email at least 7 days in advance.

The "Last Updated" date at the top of this page always reflects the latest version. We recommend checking back occasionally if you're curious about what's changed.

How to Contact Our Privacy Team

Got a question? Want to exercise your data rights? Or just want to understand something better? Reach out — we're a real team, not a bot.

Email: info@zarurihai.app (Response within 72 hours)
WhatsApp / Phone: +91 89615 03222
Postal Address:
Zaruri Hai
Nutan Pukur Rd, Action Area III,
Newtown, Kolkata – 700160
West Bengal, India
🕘 Support Hours: Monday to Saturday, 9 AM – 6 PM IST

Also, feel free to check our customer terms & conditions, refund & cancellation policy, or contact Zaruri Hai directly for any other queries.

Frequently Asked Questions — Zaruri Hai Privacy Policy