Data Processing Notice

Roles

OORJA MAN LLP acts as Data Fiduciary for customer and user accounts on the Platform. Assigned Partners process visit data as needed to deliver the service (comparable to a processor / service provider for that operational purpose).

Processing purposes

• Identity verification via mobile OTP.
• Booking, routing, fulfilment, and job evidence.
• Payments, invoices, refunds, and Partner settlements.
• Support chat and grievance handling.
• Security, fraud prevention, and service analytics that do not require selling personal data.

Storage & security measures

Production Platform data is hosted with our cloud infrastructure provider (Supabase) in India — Mumbai region (AWS ap-south-1) — using encrypted transport, access-controlled storage buckets (e.g. private job photos), and role-based database policies (RLS). See /legal/data-storage for the dedicated Data Storage Policy. Retention follows the Privacy & Data Protection Policy and Account Deletion rules.

Infrastructure & subprocessors

We require subprocessors to protect data under contract, including contractual, technical, and organisational measures where appropriate. Categories may change as we add providers; material changes will be reflected here.

• Cloud database, authentication, storage, and serverless functions (Supabase) — production hosted in Mumbai, India.
• Maps and geocoding providers when you use location features.
• Push notification delivery (Apple APNs, Google FCM, including through Expo where applicable).
• Payment processors integrated for checkout (when enabled).
• Application monitoring, communication infrastructure, and other technical providers as the Platform develops.

International processing

Primary production database and file storage are in India (Mumbai). Some third-party providers may still process or store limited information in jurisdictions outside India. Where personal data is transferred, stored, or processed outside India, we will take such measures as may be required under applicable Indian law and other applicable legal requirements. Full storage notice: /legal/data-storage.

Requests

Data principal requests: privacy@oorjaman.com. Grievances: /legal/grievance-redressal.