Visiting Card Privacy Policy

1 Overview & Introduction

This Privacy Policy explains how Visiting Card ("we," "us," or "our"), operated under eDigital Visiting Card / ALTRUIST Technologies, collects, stores, uses, and safeguards information when you use our mobile application (the "App"), website, and associated on-demand services platform (collectively, the "Service").

By downloading, accessing, or using the Visiting Card application, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not access or use our application.

2 Information We Collect

We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you:

A. Personal Information Provided by You

• Account Identifiers: Name, phone number (used for secure SMS OTP authentication), email address, and profile picture.
• Profile Information for Service Providers: Trade certifications, years of experience, trade category, hourly or job rates, and profile bio.
• Customer Addresses: Service delivery addresses (building name, street, locality, pincode) provided to enable home visits.
• Customer Communications: Reviews, ratings, customer service chat messages, and feedback submitted through the platform.

B. Photos and Video Media

• Work Showcase Reels: Short-form portfolio videos recorded or uploaded by service professionals to demonstrate trade expertise.
• Job Assessment Photos: Before/after photos submitted by customers or professionals for job estimation, verification, or dispute resolution.
• Note: The App only accesses photos or videos that you explicitly select or capture using the in-app camera tool. We do not scan or read your full photo library.

C. Location Information

• Foreground Location: When you search for nearby trade professionals or verify service dispatch, we access your device's approximate or precise GPS coordinates while the app is active in the foreground.
• Zero Background Tracking: We do NOT collect or monitor your location in the background when the app is closed. Location data is never sold or shared with data brokers.

D. Transactional and Payment Data

• Booking History: Service booked, booking date/time, price quote, and fulfillment status.
• Payment Processing: Payments are processed directly through certified, PCI-DSS compliant payment gateways (e.g., Razorpay, UPI). Visiting Card does not collect or store full credit card numbers, debit card details, or banking PINs on its platform servers.

E. Technical & Device Diagnostics

• Diagnostics: Device model, operating system version, app version, network state, crash logs, and performance metrics utilized solely for bug diagnostics and stability enhancements.

3 Android Permissions & Purpose

Below is an explicit breakdown of Android device permissions requested by the application and the explicit functional purpose of each:

4 How We Use Your Information

We use the collected information for the following specific purposes:

1. Service Matching & Fulfillment: Matching customers with verified trade professionals based on trade category, radius, and availability.
2. Account Authentication & Security: Authenticating phone numbers via OTP, preventing fraudulent accounts, and protecting user safety.
3. Customer Support: Resolving service issues, responding to inquiries, and facilitating dispute settlement.
4. Quality Assurance: Reviewing uploaded trade portfolio videos to ensure authenticity and community standard compliance.
5. Platform Communications: Sending service confirmations, receipts, and important security updates.

5 Sharing & Disclosure of Information

We prioritize your privacy. Information is disclosed strictly under the following limited scenarios:

• Between Customer and Assigned Professional: When a service booking is confirmed, the customer's name, service address, and contact number are shared with the assigned professional strictly to fulfill the scheduled job.
• Trusted Third-Party Infrastructure Providers:
  • Supabase: Secure cloud authentication and PostgreSQL database storage with Row-Level Security (RLS).
  • Railway: High-reliability cloud application hosting.
  • Razorpay / Payment Partners: PCI-DSS certified payment escrow processing.
• Legal & Regulatory Compliance: We may disclose information if required by applicable Indian or international law, court order, or governmental regulation.
• NO Selling of Data: We do NOT sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances.

6 Data Retention and Account Deletion

7 Data Security

We implement industry-grade security measures to safeguard your personal information:

• All network transmissions are secured with TLS 1.3 / 256-bit SSL encryption.
• Database access is guarded with strict Row Level Security (RLS) policies, ensuring users and professionals can only access data relevant to their authorized sessions.
• Continuous vulnerability scanning and monitoring across our cloud infrastructure.

8 Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal identifiable information from children under 13 (or under 16 in certain jurisdictions). If we become aware that a child has provided us with personal data, we take immediate steps to delete such information from our records.

9 Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect new features or legal requirements. Any modifications will be posted on this page with an updated "Effective Date" at the top. We encourage you to review this Privacy Policy periodically.

10 Contact Information