Privacy Policy

Last updated: 30 June 2026

This Privacy Policy explains how Vastoq, operated by Anvaya Solution(GSTIN: 18CXBPG4145EIZS), Dhemaji, Assam, India, collects, uses, and protects your personal data, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information We Collect

Account information

  • Name, phone number, email address
  • Password (stored as a one-way hash — we never store it in plain text)
  • Google account name/email/profile photo, if you sign in with Google

Listing & profile information

  • Property details, photos, and approximate location (for owners)
  • Skills, service areas, rates, and photos (for workers)
  • Aadhaar front/back photo and Aadhaar number, only if you voluntarily submit them for worker verification

Payment information

Payments are processed by Razorpay. We receive and store only the transaction ID, amount, and status — we never receive or store your card number, CVV, or UPI PIN.

Usage data

  • Pages viewed, listings/profiles viewed and unlocked
  • Approximate location (city/locality), derived from your device's GPS if you grant permission, used only to show relevant nearby listings/workers

2. How We Use Your Information

  • To operate the platform — showing listings, processing unlocks, enabling payments
  • To verify worker identity via Aadhaar (reviewed manually by our team; never shared with third parties except as required by law)
  • To prevent fraud and enforce our Terms & Conditions
  • To communicate with you about your account, transactions, or support requests

We do not sell your personal data to third parties.

3. Aadhaar Data — Special Handling

Aadhaar documents submitted for worker verification are stored securely and used solely to confirm identity for the "Verified" badge. Access is restricted to platform administrators performing the review. You may request deletion of your Aadhaar documents at any time by contacting us (see Section 7) — this will reset your verification status to unverified.

4. Sharing of Information

When a contact is unlocked, the relevant phone number is shared with the user who paid to unlock it. Otherwise, we share data only with:

  • Razorpay, for payment processing
  • Google, for sign-in authentication (if you use Google login)
  • Law enforcement, where legally required

5. Data Retention

We retain account and listing data for as long as your account is active. You may request account deletion at any time; we will remove personal data within a reasonable period, except where retention is required for legal, accounting, or fraud-prevention purposes.

6. Your Rights

Under the DPDP Act, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data, subject to legal retention requirements
  • Withdraw consent for optional data collection (e.g. location access)

7. Contact / Grievance Officer

For privacy questions or to exercise your data rights, contact our Grievance Officer:

8. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected by updating the "Last updated" date above.