Your privacy matters to us. This Privacy Policy explains what personal data MistriApp ("we", "us") collects when you use our website and services (the "Platform"), why we collect it, who we share it with and the choices you have. It is written in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and its rules. It should be read together with our Terms of Service.
1. Who we are
MistriApp, based in Rewa, Madhya Pradesh, India, runs an online marketplace that connects Customers with independent home-service professionals ("Mistris"). For the personal data described in this policy, MistriApp is the "data fiduciary".
2. Data we collect
Information you give us
- Account details: name, email address, mobile number, address, password (stored only in encrypted, hashed form), profile photo and preferred language.
- Mistri profile details: trade category, age, years of experience, rates, availability and verification information you submit.
- Labour team details (Mistris only): names, age, identity-proof details and wage arrangements of labourers a Mistri adds. The Mistri must have the labourer's permission to share this.
- Bookings and jobs: job descriptions, service address, preferred date and time, photos you upload, quotes, prices, booking status and completion confirmations.
- Reviews and messages: ratings and reviews, and messages you send us through the contact form or by email.
- Referrals: your referral code, who referred you and points earned.
Information collected automatically
- Device and usage data: IP address, browser and operating system, device type, pages visited and the referring page. For visitors who are not signed in, we record this to understand traffic.
- Sign-in sessions: the IP address and browser of each signed-in session, to keep your account secure.
- Security logs: records of important account and admin actions, used to prevent fraud and misuse.
3. How we use your data
- To create and manage your account and let you sign in securely.
- To run bookings: show requests to relevant Mistris, deliver quotes, notify you about status changes and help both sides complete the job.
- To show Mistri profiles, ratings and reviews so Customers can choose with confidence.
- To review and verify Mistri profiles and keep the Platform safe, including detecting fraud, fake reviews and referral abuse.
- To send service messages such as booking updates, password reset links and welcome emails.
- To answer your support requests and resolve disputes and grievances.
- To understand how the Platform is used and improve it.
- To comply with legal obligations and respond to lawful requests from authorities.
We process your data on the basis of your consent, which you give when you sign up and accept this policy, and for legitimate uses permitted under the DPDP Act, such as complying with law. We do not sell your personal data.
4. What other users can see
- A Mistri's name, photo, trade, experience, rates, ratings and reviews are visible to Customers.
- When you post a booking, relevant Mistris can see the job description, photos, area and schedule so they can quote.
- Phone numbers and full contact details are shared only between a Customer and a Mistri once a booking is accepted, so they can coordinate the job. Please use them only for that booking.
- Reviews you write are shown publicly with your name.
5. Who we share data with
- Service providers who help us run the Platform, such as cloud hosting, file storage and email delivery providers. They may process data only on our instructions and must protect it.
- Authorities, when required by law, court order or to protect the rights, property or safety of our users or the public.
- A successor business, if MistriApp is involved in a merger, acquisition or sale of assets, subject to this policy.
6. Cookies
We use essential cookies to keep you signed in, remember your language choice and protect forms from misuse. The Platform does not work properly without them. We do not use cookies for third-party advertising. Our pages load fonts from Google Fonts, which may receive your IP address when your browser requests them.
7. How long we keep data
We keep your data for as long as your account is active and as needed to provide the services. After you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records for longer to comply with law, resolve disputes or prevent fraud (for example, booking and security logs). Anonymous visitor statistics may be kept for longer.
8. How we protect data
We use reasonable security practices, including encrypted connections (HTTPS), hashed passwords, access controls for staff and logging of administrative actions. No online service is completely secure, so please use a strong password and keep it private. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.
9. Your rights
Under the DPDP Act you have the right to:
- access a summary of the personal data we hold about you and how it is used;
- correct, complete or update your data — most details can be changed directly from your profile;
- ask us to erase your data and close your account;
- withdraw consent at any time (this will not affect processing already done, but we may no longer be able to provide the services);
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if unresolved, with the Data Protection Board of India.
To exercise these rights, email support@mistriapp.com from your registered email address. We may need to verify your identity before acting on a request.
10. Children
The Platform is meant only for people aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
11. Grievance Officer
For questions or complaints about how we handle your personal data, contact our Grievance Officer:
- Grievance Officer, MistriApp
- Email: support@mistriapp.com (subject line: "Privacy")
- Address: Rewa, Madhya Pradesh, India
We will acknowledge your complaint within 48 hours and aim to resolve it within 15 days.
12. Changes to this policy
We may update this policy as the Platform or the law changes. The "Last updated" date at the top shows the latest version. If we make significant changes, we will notify you in the app or by email before they take effect.
13. Language
This policy is available in English and Hindi. If there is any difference between the two versions, the English version will prevail.