Introduction
OorjaMan (“OorjaMan”, “we”, “us”, or “our”) is a technology-enabled solar rooftop care platform operated by OORJA MAN LLP that connects solar asset owners and property owners with independent service partners and trained technicians for solar panel cleaning, preventive maintenance, after-sales support, and related services.
This Privacy & Data Protection Policy (“Policy”) explains how we collect, use, store, share, protect, and otherwise process personal data when you use our website, customer mobile application, technician mobile application, partner portal, communication channels, and related services (collectively, the “Platform”).
By accessing or using the Platform, you acknowledge that you have read and understood this Policy. Where applicable law requires your consent for a particular processing activity, we will obtain such consent through an appropriate mechanism.
Registered office: House No. 507, Panch Tirtahatti Path, Hengrabari, Guwahati, Kamrup Metropolitan, Assam 781036, India. Privacy: privacy@oorjaman.com. Support: support@oorjaman.com. Formal grievances: /legal/grievance-redressal.
1. Scope of this Policy
This Policy applies to personal data collected through the OorjaMan website; customer mobile application; technician mobile application; partner portal; booking, payment, and service workflows; customer support and communication channels; service visits and related evidence collection; and other OorjaMan-operated digital services that refer to this Policy.
This Policy does not necessarily apply to third-party websites, applications, payment services, map services, or other external services accessed through links or integrations from our Platform. Those parties may have their own privacy policies and terms.
2. Our role in data processing
For customer accounts and the personal data necessary to operate the Platform, OORJA MAN LLP acts as the entity responsible for determining the purposes and means of processing personal data, subject to applicable law (including, as applicable, as Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025).
We may engage third-party service providers and infrastructure providers to process personal data on our behalf. These may include cloud hosting, database, authentication, storage, mapping, notification, payment, and technical service providers.
Independent service partners and technicians may receive limited customer and service information necessary to perform an assigned booking. They must use such information only for legitimate service purposes and in accordance with applicable contractual and legal requirements.
Partners are independent businesses and are responsible for their own personnel, technician conduct, safety compliance, insurance where required, and quality of on-site services.
3. Personal data we collect
We collect only information reasonably necessary to provide, manage, secure, and improve the Platform and our services.
- Account: name; mobile/phone number; email; credentials and authentication information; user role (customer, technician, partner, or support); profile information; account status and preferences. Partner / technician onboarding may also include KYC-style documents and bank details under stricter access controls.
- Property and solar site: service/property address; rooftop details; plant/system capacity; panel and equipment information; site access; service instructions and notes; photographs uploaded by customers or technicians; before-and-after photographs; other evidence required to confirm completion.
- Location and GPS (where you grant device permission): capturing or confirming a service address; helping technicians navigate; dispatch and allocation; live visit tracking during active jobs; confirming attendance; improving safety and operational efficiency. Live location for an active visit is intended for that visit, not unrestricted continuous tracking. You may withdraw location permission in device settings; navigation and visit tracking may then be unavailable.
- Booking and payment: booking history; service type; appointment date and time; pricing; platform fees; surcharges; cancellation records; payment status; refunds; settlements; transaction references. Full card or other sensitive payment credentials may be collected by the payment provider rather than stored by OorjaMan, depending on the integration.
- Communications and support: in-app chats; customer service communications; service-related messages; complaints and feedback; notification preferences; records of support interactions. We may review relevant metadata and, where reasonably necessary, communications themselves to investigate complaints, fraud, abuse, safety issues, or Terms violations.
- Device and technical: device type; operating system; application version; push notification token; authentication/session information; diagnostic logs; crash and error information; technical performance information.
4. How we collect personal data
We may collect personal data directly when you create an account or update your profile; when you book; during scheduling and execution; when you upload photographs or documents; through GPS/location permissions; through customer support; through payment processes; automatically through the Platform and device technologies; from partners and technicians where required to provide services; from third-party providers supporting the Platform; and where otherwise permitted or required by applicable law.
5. Purposes for which we use personal data
We use personal data for legitimate business and service purposes, including:
- Service delivery: schedule and fulfil visits; match customers with partners in their area; assign technicians; provide navigation and location-enabled services; manage AMC plans; track execution; generate records and reports; provide customer support.
- Communications: booking confirmations; appointment reminders; OTPs and service verification / happy codes; technician arrival and visit updates; cancellation and refund notifications; important account and service communications.
- Payments and financial administration: process payments; record transactions; calculate platform fees; manage refunds and cancellation charges; maintain partner settlement records; detect and prevent payment-related fraud.
- Safety, security, and fraud prevention: protect users and the Platform; verify accounts and service activity; investigate suspected fraud or misuse; monitor security incidents; enforce Platform rules; investigate complaints and abuse; maintain service evidence.
- Platform improvement: diagnose technical problems; improve performance, booking, and service workflows; analyse aggregate usage patterns; develop features.
- Legal and regulatory compliance: comply with laws; respond to lawful government requests; maintain tax and accounting records; resolve disputes; establish, exercise, or defend legal claims; prevent fraud and unlawful activity.
6. Legal basis and consent
Depending on the nature of the processing and applicable law, we may process personal data with your consent where required; where processing is necessary to provide a service you requested; to perform contractual or service-related obligations; to comply with legal requirements; for legitimate and lawful operational purposes permitted under applicable law; to protect Platform security; and for other lawful purposes permitted under applicable law.
Where consent is the basis, you may withdraw it where permitted by law. Withdrawal may affect optional or location-dependent features. Withdrawal does not affect processing that was lawfully carried out before withdrawal or that may continue under another lawful basis.
A plain-language summary of mobile app permissions is at /legal/app-permissions. Cookie choices are described in /legal/cookie-policy. Where production data is hosted is described in /legal/data-storage. Detailed subprocessors appear in /legal/data-processing.
7. Location data
Location data is particularly important to OorjaMan service operations. We may use it to locate the customer's service site; help technicians reach the assigned location; support active-job navigation; enable live technician tracking where applicable; confirm service attendance; and improve safety and coordination.
Location access is controlled through your device permissions. If you disable it, certain location-dependent functions may become unavailable. We do not intend to use customer or technician location information for unrelated purposes.
8. Photographs and service evidence
Customers and technicians may upload photographs of solar panels, rooftops, equipment, installation areas, and service conditions. These may be used to assess requirements; prepare quotations or scope; document pre- and post-service conditions; verify completion; prepare digital inspection reports; resolve disputes; investigate damage or complaints; and improve quality and safety.
Service photographs are not automatically treated as marketing content. If we wish to use identifiable photographs for promotional purposes where separate permission is required, we will seek appropriate permission first.
10. Partner and technician access
Partners and technicians may receive customer and site information solely to perform assigned services.
- Partners are responsible for maintaining verified business documents and technician credentials; ensuring appropriate technician conduct; following safety requirements; protecting customer information; accepting or declining bookings within applicable SLA periods; following service checklists; capturing required evidence; and honouring published pricing and AMC visit entitlements.
- Partners must not use customer information obtained through OorjaMan to independently market unrelated services, sell customer information, or use such information for unlawful or unauthorised purposes.
11. Data security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, accidental loss, destruction, alteration, misuse, and unauthorised processing.
- Depending on the system and data involved, safeguards may include authentication and access controls; role-based access; secure storage; encryption where appropriate; access logging; monitoring and diagnostic controls; secure software and infrastructure practices; backup and recovery; vendor and processor controls; and incident response procedures.
- No digital system can be guaranteed completely secure. Users should maintain strong passwords, protect OTPs and credentials, and promptly report suspected unauthorised access.
12. Data security incidents and breaches
If we become aware of a security incident involving personal data, we will take reasonable steps to investigate; contain and mitigate impact; secure affected systems; assess nature and extent; take appropriate corrective measures; and make notifications or disclosures where required under applicable law. Where legally required, affected users and/or relevant authorities will be notified in accordance with applicable requirements.
13. Data retention
We retain personal data only as long as reasonably necessary for the purposes in this Policy or as required or permitted by applicable law. Different categories may be retained for different periods.
- Account information: while the account is active and for a reasonable period thereafter where necessary for legal, security, or dispute purposes.
- Booking and service records: for operational, accounting, tax, dispute-resolution, safety, and legal purposes.
- Payment and transaction records: as required for accounting, tax, fraud prevention, payment reconciliation, and legal obligations.
- Location records: only as reasonably necessary for service execution, safety, dispute resolution, fraud prevention, and legal obligations.
- Photographs and service evidence: for verification, quality control, dispute resolution, safety, and applicable legal or operational requirements.
- Support communications: where necessary to resolve disputes, investigate complaints, maintain service records, and protect users and the Platform.
14. Where we store personal data
Production Platform data — including customer accounts, booking and service records, job evidence stored in our databases and storage buckets, and related operational records — is hosted with our cloud infrastructure provider (Supabase) in India, in the Mumbai region (AWS ap-south-1).
A plain-language Data Storage Policy with provider categories and transfer notes is published at /legal/data-storage. Related processing detail: /legal/data-processing.
Some third-party providers (for example maps, push notification networks, payment rails, or analytics where enabled) may process limited information in other jurisdictions as needed to deliver those services. See Section 26 (International data processing).
15. Account deletion
You may request deletion of your OorjaMan customer account. Deletion generally removes sign-in access and personal profile information associated with the account. We may retain limited information where necessary for tax and accounting; fraud prevention; security; dispute resolution; legal claims; regulatory compliance; or other lawful retention requirements.
In the customer app: Profile → Account → Delete Account, then type DELETE to confirm. Active or upcoming bookings may need to be cancelled or completed first. If you have an active AMC plan, the consequences of account deletion, including cancellation of the plan, will be communicated before deletion is completed. After confirmation, sign-in credentials are removed and you may be signed out.
If you cannot use the app, email support@oorjaman.com with subject “Account Deletion Request” and the mobile number or email associated with the account. We may verify ownership first. We aim to respond within 7 business days and generally complete eligible deletion within 30 days, subject to verification, technical requirements, and lawful retention. Full steps: /legal/account-deletion.
16. Your privacy rights and choices
Subject to applicable law, you may have rights to access information about your personal data; request correction of inaccurate or incomplete information; request deletion where legally applicable; withdraw consent where consent is the applicable legal basis; manage notification permissions; manage location permissions through your device; raise privacy-related complaints; and exercise other rights available under applicable law.
You may update certain profile information in the application. For privacy-related requests, contact privacy@oorjaman.com. We may request reasonable information to verify your identity before processing a request.
Nothing in this Policy limits rights or protections that cannot lawfully be excluded under the DPDP Act, consumer law, or other mandatory Indian law.
17. Privacy grievance redressal
We are committed to addressing privacy and data protection concerns promptly. If you believe your personal data has been processed improperly, or if you have a privacy-related complaint, contact privacy@oorjaman.com. Include sufficient information for us to understand and investigate. We may request additional information to verify identity.
We will handle grievances in accordance with applicable law and our internal procedures. Formal platform grievances (including non-privacy complaints) are described at /legal/grievance-redressal.
19. Marketing and notifications
We may send essential service communications including booking confirmations; appointment reminders; OTPs; service status notifications; payment confirmations; refund notifications; and account and security notifications. These are necessary for operating the Platform and may continue even if you opt out of promotional communications.
Where promotional communications are sent, you may have the option to opt out through the applicable channel or account settings.
20. Children's data
The Platform and services are intended for individuals who are legally capable of entering into applicable service arrangements. Users must be at least 18 years old to create an account or use OorjaMan services as a customer or service provider, unless otherwise permitted by applicable law.
We do not knowingly permit children to create accounts in violation of applicable law or knowingly collect children's personal data for purposes not permitted under applicable law. If you believe a child has provided personal data improperly, contact privacy@oorjaman.com.
21. Acceptable use and responsible conduct
Users are expected to use the Platform responsibly. You must provide accurate contact, property, rooftop, and access information; follow reasonable safety instructions; respect technicians and support personnel; use the Platform only for lawful purposes; and protect your account credentials.
You must not attempt unauthorised access; access another person's account or data; submit false or misleading information; misuse customer, partner, or technician information; interfere with Platform security; use the Platform for unlawful activities; harass, threaten, or abuse technicians, partners, or support staff; use hate speech or threatening language; or circumvent Platform controls or payment mechanisms.
Violations may result in suspension or termination of access, subject to applicable law. Report harassment, threats, abuse, or other misconduct to support@oorjaman.com. We may review relevant communications and metadata to investigate suspected abuse. See also /legal/acceptable-use and /legal/community-guidelines.
22. Customer safety and site information
Customers are responsible for providing accurate information regarding property and rooftop access; known hazards; electrical risks; structural concerns; restricted areas; and special site requirements.
Technicians and service partners may refuse, postpone, or terminate a visit where they reasonably believe conditions are unsafe or that performing the work may create a risk of injury, property damage, or electrical/structural hazard. You may be required to reschedule in accordance with cancellation and service policies.
OorjaMan does not provide structural engineering advice and does not replace manufacturer warranties or technical certifications provided by equipment manufacturers. See /legal/service-disclaimers and /safety.
23. Independent service partners
OorjaMan operates as a technology marketplace connecting customers with independent service partners. Partners are independent businesses responsible for technician conduct and credentials; required licences and documentation; safety compliance; insurance where required; quality of on-site work; and compliance with applicable laws.
We facilitate booking, scheduling, payment workflows, quality processes, and settlement reporting but do not represent that every partner is an employee or agent of OorjaMan. More: /legal/vendor-partner-agreement.
24. Partner data processing
Partners and technicians may process customer information as necessary to perform services through the Platform, including viewing service addresses; contacting customers about appointments; accessing relevant site information and photographs; recording service evidence; updating booking status; and completing service reports.
They must protect such information and must not use it for unrelated or unauthorised purposes. We may require partners and relevant providers to implement appropriate contractual and operational safeguards.
25. Data processors and subprocessors
We may appoint third-party processors and infrastructure providers for cloud infrastructure; database management; authentication; storage; maps and geocoding; push notifications; payment processing; application monitoring; and communication infrastructure. We may update providers as the Platform develops. Where appropriate, processors are required to protect personal data through contractual, technical, and organisational measures. Current categories: /legal/data-processing.
26. International data processing
Our primary production database and file storage for the Platform are located in India (Mumbai), as described in Section 14 and /legal/data-storage.
Some third-party providers may nevertheless process or store limited information in jurisdictions outside India (for example global push-notification networks, mapping services, or other technical providers). Where personal data is transferred, stored, or processed outside India, we will take such measures as may be required under applicable Indian law and other applicable legal requirements.
27. Third-party links and services
The Platform may contain links to or integrations with third-party websites and services. OorjaMan is not responsible for the privacy practices, security, or content of independent third parties. Review their policies and terms before providing personal information to them.
28. Cancellation and refund data
We may collect and retain cancellation and refund information to administer bookings and partner settlements. Customers may cancel a booked visit within the one-hour grace period after booking without a late-cancellation fee, as displayed in the application at the time of booking.
Cancellations after the applicable grace period may result in a late-cancellation fee displayed in the application before you confirm. The fee may be recorded against the booking for settlement and accounting.
Eligible refunds for cancelled or failed visits may be processed to the original payment method where applicable. Processing times depend on the bank, payment processor, or UPI provider and typically take about 5-10 business days, though actual times may vary. Full commercial rules: /legal/refund-cancellation.
29. Data relating to partner settlements
For partners, we may collect and process information relating to booking acceptance; completed visits; cancellation penalties; service payouts; platform fees; settlement records; payment references; partner documentation; technician credentials; and performance and service records. Visit payouts and cancellation penalties are governed by applicable Platform settlement rules and may be displayed in the partner finance dashboard.
30. Changes to this Policy
We may update this Policy from time to time to reflect changes in the Platform, new services, technology, legal or regulatory requirements, or our data processing practices. When material changes are made, we may provide notice through the Platform, website, email, or other appropriate channels where required. The updated Policy will include a revised Last Updated date.
31. Governing law
This Policy shall be interpreted in accordance with the laws of India, subject to applicable data protection, consumer protection, and other mandatory legal requirements. Nothing in this Policy is intended to limit any rights or protections that cannot lawfully be excluded or restricted under applicable law. Subject to those protections, courts in Guwahati, Assam shall have jurisdiction.
32. Contact information
Privacy-related enquiries, data protection requests, complaints, or questions about this Policy: privacy@oorjaman.com.
General customer and service support: support@oorjaman.com.
Account deletion requests: support@oorjaman.com with subject “Account Deletion Request”.
Grievance Officer correspondence: OORJA MAN LLP, House No. 507, Panch Tirtahatti Path, Hengrabari, Guwahati, Kamrup Metropolitan, Assam 781036, India. See /legal/grievance-redressal.
33. Important notice
This Policy is intended to explain OorjaMan's data practices in a clear and transparent manner. Nothing in this Policy creates rights or obligations beyond those required by applicable law, OorjaMan's contractual terms, or the specific consent or permission provided by a user.
Where applicable law provides users with rights or protections greater than those described in this Policy, those legal rights and protections will continue to apply.
This document is provided for transparency and app-store compliance. It does not constitute legal advice. For contractual questions contact legal@oorjaman.com.