Privacy Policy

Dopza is a home-services marketplace operated by VORKIN PRIVATE LIMITED ("we", "us"). We connect customers with background-verified professionals for cleaning, kitchen, bathroom, car care and hourly local help.

This policy covers the Dopza customer app, the Dopza Partner app used by professionals, and this website.

When you create an account and use Dopza we collect:

• Your mobile number. This is how you sign in — we send a one-time code to it, and an account cannot exist without one.
• Your name and profile photo, if you add them.
• Your email address, if you provide one.
• Your service addresses: house or flat number, street, landmark, area, city, state, pincode, and the map coordinates of the location you pin. You may also save a contact name and phone number for an address, which is useful when a booking is for a family member.
• Your language preference, notification and marketing preferences, and preferred payment method.
• Messages you send in the in-app chat for a booking.
• Ratings and reviews you leave after a job.

• Device information: a device identifier, device name, and platform (Android or iOS). This is how a booking update reaches the right phone.
• A push notification token, so we can notify you about your booking.
• The app version you are running, and the IP address recorded at the moment you accept these terms. Both exist so we can show which version of this policy you agreed to.
• Recently used locations, so the address picker can offer them again.

We do not track your location in the background. The customer app reads your location only while you are choosing an address, and only with your permission.

Once a professional accepts your booking, the Partner app shares their live location with us so you can see them approaching and so we know when they have arrived. This sharing runs only for the duration of that booking and stops when the job is closed.

Professionals can also raise an SOS alert from the Partner app, which sends us their location and the accuracy of that reading so we can respond.

If you work through the Dopza Partner app we additionally collect:

• Identity and address documents, and a photograph, for background verification. These are stored privately and are visible only to our review team.
• Your skills, working hours and service areas.
• Bank account holder name, bank name, account number and IFSC, so earnings can be paid out.
• Your rating, completed job count and verification status.

We use this information to:

• Sign you in and keep your account secure.
• Send a professional to the right address at the right time.
• Let you and your professional contact each other during a booking.
• Take payment and pay professionals their earnings.
• Send booking updates by push notification and SMS.
• Verify that professionals are who they say they are.
• Investigate complaints, disputes, fraud and safety incidents.
• Improve the service — which areas to open next, which services to add.

We use your information for these purposes because it is necessary to provide the service you asked for, to meet our legal obligations, or on the basis of consent you gave and can withdraw.

When a professional accepts your booking, they are shown your name, the service address for that booking, and your booking notes — they cannot do the job otherwise.

While a booking is active, you and the professional can call each other. This discloses your real phone number to them and theirs to you. It is available only between the point a professional is assigned and the point the job is completed, and every such call is logged. We do not currently use number masking, so please treat a professional's number as personal information and do not share it onward.

Professionals cannot see your saved addresses other than the one for their booking, your other bookings, or your payment details.

Some areas have a local manager who supports professionals working there. A professional can see their area manager's name and contact details, and a manager may see bookings and professionals in their area in order to help.

We share information with a small number of processors, only as needed to run the service:

• Supabase — hosting, database and file storage for everything described above.
• Google Firebase Cloud Messaging — delivering push notifications. Receives your push token.
• Google Maps Platform — address search, converting an address to coordinates, and estimating arrival times. Receives the address text or coordinates being looked up.
• Our SMS provider — delivering one-time sign-in codes and booking alerts. Receives your mobile number and the message.
• Razorpay — processing payments and paying professionals. Receives the payment details necessary to settle a transaction.

We do not sell your personal information, and we do not share it for advertising.

We keep your account and booking history for as long as your account is open, because it is what lets you see past bookings and lets us resolve a dispute about one.

One-time sign-in codes are stored hashed and expire within minutes. Live location shared during a booking is retained only as long as needed to complete and support that booking.

When you ask us to delete your account we remove or anonymise your personal information, except where we are required to keep a record — for example transaction records we must retain for tax and accounting purposes.

You can ask us to delete your account and personal data at any time:

• In the app, from Settings, or
• By emailing us from the address or phone number on your account.

Tell us the mobile number the account uses. We will confirm the request, and complete it within 30 days. Deleting your account removes your profile, addresses, saved locations, device tokens and chat history. Records we are legally required to retain are kept for the required period and then deleted.

You can also, at any time, ask us for a copy of your data, ask us to correct something that is wrong, or turn off marketing messages without closing your account.

All traffic between the apps and our servers is encrypted in transit. Your data is stored on managed infrastructure with encryption at rest.

Access is enforced at the database itself through row-level security, so a customer can read only their own bookings, addresses and messages, and a professional only the bookings assigned to them. Identity documents are held in private storage that is not publicly reachable. One-time codes are hashed, never stored in readable form. Administrative access requires a verified account and is limited to staff who need it.

No system is perfectly secure, but if a breach affects your personal information we will tell you and the relevant authority as required by law.

Dopza is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

When we change this policy we update the version and date shown at the top. If a change is significant we will ask you to accept the new version in the app, and we record which version you accepted and when.

For any privacy question, or to ask for your data to be deleted, contact VORKIN PRIVATE LIMITED using the support email and phone number shown on this site and in the app. We answer privacy requests within 30 days.