Xtromate

Effective Date: January 1, 2025

Last Updated: December 25, 2025

1. INTRODUCTION

Welcome to Xtromate!

This Privacy Policy explains how Xtromate ("we", "us", "our") collects, uses, stores, shares, and protects your personal information when you use our home services marketplace platform as a technician, including our mobile application, website, and related services (collectively, the "Platform").

We are committed to protecting your privacy and ensuring transparency about how we handle your data. Please read this Privacy Policy carefully to understand our practices regarding your personal information.

Platform Operator:
Xtromate (Sole Proprietorship)
Floor No. 1, Building No. 60, Chopasani Road,
Shyam Nagar, Jodhpur, Rajasthan – 342008, India

GSTIN: 08ODTPK6309G1ZU
Contact: support@xtromate.com | +91 6376500280
Website: www.xtromate.com

By accessing or using the Xtromate Platform as a technician, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

If you do not agree with this Privacy Policy, you must not use the Platform.

2. INFORMATION WE COLLECT

We collect various types of information to provide, maintain, and improve our services. The information we collect falls into the following categories:

2.1 Personal Information You Provide

Account Information:
When you register as a technician, we collect:

Full name
Mobile phone number (required for OTP verification and login)
Email address (optional but recommended)
Gender (optional)
Date of birth (for age verification - must be between 18 and 65)
Profile picture
Years of experience in service provision
Service categories and skills

Service Address Information:
To facilitate service delivery, we collect:

Complete service address (house number, street, area, landmark)
City, state, and postal code
Operational area and service coverage zones
Address type (home, office, other)

Identity Verification Documents (Mandatory):
For verification and compliance purposes, we collect:

Aadhaar card: Number and images (front and back)
PAN card: Number and image
GST registration number: (if applicable)

Bank Account Details (Mandatory for Payouts):
To process your earnings, we collect:

Bank account number
IFSC code
Account holder name (must match your profile)
Bank name and branch
UPI ID (optional)

Communication and Feedback:

Service completion reports
Photos uploaded during service provision
Messages or communications with customers
Complaints or disputes filed by customers
Responses to platform surveys or feedback requests

2.2 Information Automatically Collected

Device Information:
When you access the Platform, we automatically collect:

Device type, model, and manufacturer
Operating system and version
Unique device identifiers (Device ID, Advertising ID)
Mobile network information
App version
IP address
Browser type and version (for web access)

Note: Advertising identifiers are used only for platform analytics and permitted promotional purposes and not for cross-app tracking without consent.

Location Information:

Real-time GPS location when you are online and available for bookings
Location tracking during active service delivery (from "On the Way" to "Completed" status)
Service locations where you provide services
Approximate location based on IP address
Location history for performance analytics and customer matching

Note: Location tracking is essential for connecting you with nearby customers and ensuring service transparency. You can disable location services through device settings, but this will prevent you from receiving bookings.

Usage Information:

Booking acceptance and rejection history
Service completion records and status updates
Response time to booking requests
Time spent on each service
Features used within the app
Wallet transactions and payout requests
Online/offline status and availability patterns

Performance Metrics:

Customer ratings and reviews received
Average rating score
Number of completed bookings
Cancellation rate
Customer complaints and dispute resolution history
Service quality assessments

Cookies and Similar Technologies:
We use cookies, web beacons, and similar tracking technologies to:

Authenticate your login sessions
Remember your preferences and settings
Track performance metrics and platform usage
Analyze technician behavior and improve services

For more details, see Section 9 (Cookies and Tracking Technologies).

2.3 Information from Third Parties

Payment Gateway:
We receive payout transaction confirmation and settlement information from our banking partners and payment processors.

Customers:
We may receive information about your service performance from customers, including:

Ratings and reviews
Photos of completed work
Complaints or commendations
Service verification confirmations (OTP validation)

Admin Verification:
During registration, our admin team verifies your submitted documents (Aadhaar, PAN, bank details) for authenticity and accuracy.

2.4 Sensitive Personal Information

Under applicable Indian law, certain categories of information are considered "sensitive personal data or information" (SPDI). We collect the following SPDI:

Aadhaar number and images (for identity verification)
PAN card details (for tax compliance)
Financial information: Bank account details, wallet balance, transaction history

Biometric Authentication:
Biometric authentication data (fingerprint, Face ID) is processed locally on your device through operating system security features. Xtromate does not collect, store, or process biometric data on its servers.

We collect and process SPDI only with your explicit consent and in accordance with applicable laws.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 Service Provision and Management

Create and manage your technician account: To register, authenticate, and maintain your profile
Verify your identity and credentials: To ensure platform safety and regulatory compliance
Match you with customer bookings: To connect you with service requests based on location, skills, and availability
Process payments and payouts: To manage your wallet, calculate commissions, and transfer earnings to your bank account
Facilitate service delivery: To share customer contact information and service details with you
Track service completion: To monitor booking status, verify OTP-based service commencement, and confirm job completion
Customer support: To respond to your inquiries, resolve issues, and provide assistance

3.2 Performance Evaluation and Quality Assurance

Monitor performance metrics: Track your ratings, completion rate, cancellation rate, and response time
Evaluate service quality: Analyze customer feedback and reviews to ensure quality standards
Ranking and visibility: Determine your placement in customer search results based on performance
Identify training needs: Provide guidance or support to improve service delivery
Enforce platform policies: Monitor compliance with Terms and Conditions and take corrective action when necessary

3.3 Payment and Financial Management

Calculate earnings: Compute your service fees after deducting platform commission
Process payout requests: Transfer available wallet balance to your registered bank account
Manage wallet transactions: Track deposits, deductions, pending amounts, and blocked balances
Tax compliance: Maintain transaction records for regulatory and tax purposes (though we do not deduct taxes)
Dispute resolution: Hold disputed amounts pending investigation and resolution

3.4 Communication

Transactional communications: Booking assignments, status updates, payout confirmations, OTP verification (you cannot opt-out of these)
Platform updates: Important announcements about policy changes, new features, or operational updates
Performance feedback: Notifications about ratings, reviews, or performance issues
Promotional communications: Opportunities to earn more, incentive programs, new service categories (you can opt-out)

3.5 Platform Improvement and Analytics

Improve services: Analyze technician behavior and feedback to enhance platform functionality
Personalization: Customize your dashboard, recommend optimal service areas, and suggest best practices
Research and development: Develop new features, tools, and services for technicians
Analytics: Generate aggregated, anonymized statistics about platform performance and technician activity

3.6 Safety, Security, and Legal Compliance

Fraud prevention: Detect and prevent fraudulent activities, fake accounts, or policy violations
Dispute resolution: Investigate customer complaints and resolve disputes
Legal compliance: Comply with applicable laws, regulations, and legal processes
Enforce policies: Monitor compliance with our Terms and Conditions
Protect rights: Defend our legal rights and interests
Background verification: Verify submitted documents using authorized verification mechanisms and service providers

3.7 Location-Based Services

Customer matching: Connect you with nearby service requests based on real-time location
Route optimization: Provide directions to customer locations
Service verification: Confirm you have arrived at the service location
Performance analytics: Analyze service coverage areas and travel patterns

4. HOW WE SHARE YOUR INFORMATION

Xtromate does not sell technician personal data to third parties.

We share your information with the following categories of recipients:

4.1 Customers

To fulfill service bookings, we share necessary information with customers, including:

Your name and profile picture
Contact phone number (for service coordination)
Average rating and number of completed services
Service category expertise
Estimated arrival time and real-time location (during active bookings)
Service completion photos and reports

Customers are independent users, not employees of Xtromate. We require customers to use technician information only for legitimate service purposes, but we cannot fully control their data practices.

4.2 Payment Service Providers

We share payment-related information with:

Banks and Payment Processors: To process payouts, verify bank account details, and settle transactions
UPI Service Providers: If you use UPI for payouts
Payment information is shared in encrypted form and handled in compliance with banking security standards

4.3 Service Providers and Business Partners

We may share your information with trusted third-party service providers who assist us in operating the Platform, including:

SMS/Email Service Providers (msg91): To send booking notifications, OTPs, and platform updates
Cloud Infrastructure Providers (AWS): To host and store data securely
Analytics Providers: To analyze platform performance (in anonymized/aggregated form)
Background Verification Services: To verify Aadhaar, PAN, and other credentials
Customer Support Tools: To manage and respond to support inquiries

These service providers are bound by confidentiality agreements and are permitted to use your information only to provide services to Xtromate.

4.4 Law Enforcement and Legal Authorities

We may disclose your information to government authorities, law enforcement agencies, or other third parties if:

Required by law, court order, subpoena, or legal process
Necessary to comply with tax, GST, or regulatory requirements
Needed to investigate, prevent, or take action regarding illegal activities, fraud, or safety threats
Required to protect the rights, property, or safety of Xtromate, our users, customers, or the public
Requested in connection with customer disputes, property damage claims, or personal injury incidents

4.5 Business Transfers

If Xtromate is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the successor entity. You will be notified of any such change via email or prominent notice on the Platform.

4.6 With Your Consent

We may share your information with other third parties when you explicitly consent to such sharing, such as:

Featuring your profile or success story in marketing materials
Participating in third-party partnerships or promotional campaigns
Sharing performance data with training or certification programs

4.7 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with:

Business partners for analytics and market research
Industry reports and publications
Academic or research institutions

5. DATA RETENTION

5.1 Active Accounts

We retain your personal information for as long as your technician account is active and for the purposes described in this Privacy Policy.

5.2 After Account Deletion

When you delete your account or terminate your relationship with Xtromate, we retain your personal information for up to 180 days for the following purposes:

Legal and regulatory compliance (tax records, transaction history, GST compliance)
Dispute resolution and fraud prevention
Processing pending payouts and resolving wallet disputes
Defending against legal claims or customer complaints
Enforcing our Terms and Conditions
Business analytics (in anonymized form)

Specific Retention Periods:

Identity documents (Aadhaar, PAN): 180 days after account deletion
Bank account details: 180 days after last payout transaction
Transaction history: 7 years (as required by Indian tax and accounting laws)
Customer ratings and reviews: Retained permanently (but disassociated from your personal profile after deletion)
Location data: 90 days after account deletion
Performance metrics: Aggregated and anonymized for statistical purposes

After the 180-day retention period:

Personal data is either permanently deleted or anonymized such that it cannot be linked back to you
Certain aggregated, anonymized data may be retained indefinitely for statistical analysis

5.3 Legal Obligations

We may retain certain information for longer periods if required by law, regulatory requirements, or to defend legal claims.

5.4 Backup Copies

Data deleted from our active databases may persist in backup systems for a limited period (typically 90 days) before permanent deletion.

6. DATA SECURITY

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

6.1 Security Measures

Technical Safeguards:

Encryption of data in transit (SSL/TLS protocols)
Encryption of sensitive data at rest (Aadhaar, PAN, bank details)
Secure authentication mechanisms (OTP-based login)
Regular security audits and vulnerability assessments
Firewalls and intrusion detection systems
Access controls and multi-factor authentication for admin access

Organizational Safeguards:

Strict access controls limiting employee access to personal data (need-to-know basis)
Confidentiality agreements with employees and contractors
Security awareness training for staff
Incident response and breach notification procedures
Secure document verification processes

Third-Party Security:

We partner only with reputable service providers that maintain robust security practices
Payment processing is handled by secure, certified banking partners
Cloud infrastructure hosted on secure, certified platforms (AWS)
Background verification conducted by licensed agencies

6.2 Your Responsibilities

While we take extensive measures to protect your data, you also play a crucial role in security:

Keep your login credentials (OTP-verified phone number) confidential
Do not share your account with others
Use secure devices and networks when accessing the Platform
Report suspicious activity or unauthorized access immediately
Protect your identity documents (Aadhaar, PAN) from unauthorized copying
Verify customer identity before sharing sensitive information

6.3 Limitations

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You acknowledge and accept this inherent risk when using the Platform.

6.4 Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

Notify affected technicians within 72 hours of discovering the breach (where feasible and legally required)
Inform relevant authorities (CERT-In, data protection authorities) as required by law
Take immediate remedial action to mitigate harm
Provide guidance on protective measures you can take

7. YOUR RIGHTS AND CHOICES

You have certain rights regarding your personal information under applicable Indian laws and our policies.

7.1 Access and Correction

Right to Access:
You have the right to access the personal information we hold about you. You can:

View and update your profile information through the app settings
Review your wallet transactions, booking history, and performance metrics
Request a copy of your personal data by contacting support@xtromate.com

Right to Correction:
You can correct inaccurate or incomplete information by:

Editing your profile details in the app (subject to admin approval for sensitive fields)
Updating your service address and availability settings
Requesting correction of bank details or identity documents through the app
Contacting customer support for assistance

7.2 Data Deletion

Right to Deletion ("Right to be Forgotten"):
You can request deletion of your personal information by:

Deleting your account through the app settings
Contacting support@xtromate.com with a deletion request

Please note:

After deletion, we will retain data for up to 180 days as described in Section 5
You must settle all pending wallet balances and complete ongoing bookings before deletion
We may retain certain information if required by law (e.g., transaction records for tax compliance)
Deletion is irreversible; you will lose access to your account, earnings history, and ratings
Customer reviews may remain visible but will be disassociated from your profile

7.3 Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format (e.g., CSV, JSON). To request data portability, contact support@xtromate.com.

Portable data may include:

Profile information and service categories
Booking history and earnings records
Performance metrics and ratings
Wallet transaction history

7.4 Opt-Out and Communication Preferences

Promotional Communications:
You can opt-out of promotional communications by:

Adjusting notification preferences in the app settings
Clicking "Unsubscribe" links in promotional emails
Replying "STOP" to promotional SMS messages
Contacting support@xtromate.com

Transactional Communications:
You cannot opt-out of essential transactional communications (booking assignments, OTPs, payout confirmations, policy updates) as they are necessary for the Platform to function.

Push Notifications:
You can disable push notifications through your device settings. Note that this may cause you to miss booking opportunities.

Location Tracking:
You can disable location services through your device settings. However, this will prevent you from receiving bookings and providing services, as location tracking is essential for customer matching and service verification.

7.5 Right to Object

You have the right to object to:

Processing of your data for direct marketing purposes (opt-out anytime)
Location tracking when you are offline (set status to offline in the app)
Sharing of performance data with third parties (contact support@xtromate.com)

7.6 Withdrawal of Consent

Where we process your data based on consent (e.g., location tracking, promotional communications), you have the right to withdraw consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

To withdraw consent, contact support@xtromate.com or adjust settings in the app.

7.7 Exercising Your Rights

To exercise any of the above rights, please contact us at:

Email: support@xtromate.com
Phone: +91 6376500280
Subject Line: "Data Privacy Request - Technician - [Your Name]"

We will respond to your request within 30 days. In some cases, we may require additional information to verify your identity (e.g., OTP verification, submission of Aadhaar/PAN for confirmation).

8. LOCATION TRACKING AND PRIVACY

8.1 Why We Track Your Location

Location tracking is a core feature of the Xtromate Platform, enabling us to:

Match you with nearby customer bookings
Provide customers with real-time technician location during service delivery
Verify that you have arrived at the service location
Calculate travel distance and optimize service areas
Analyze service coverage and performance

8.2 When We Track Your Location

We track your location in the following scenarios:

When you are online and available for bookings: To match you with nearby customers
During active service delivery: From "On the Way" status until "Completed" status
When you manually share location: For specific service-related purposes

We do NOT track your location when:

You are offline or unavailable
You have not accepted any bookings
You have disabled location services (though this prevents receiving bookings)

8.3 How Location Data Is Used

Customer visibility: Customers can see your approximate real-time location during active bookings (from "On the Way" until "Completed")
Performance analytics: We analyze location data to understand service areas, response times, and travel patterns
Dispute resolution: Location history may be reviewed in case of customer disputes (e.g., claims of no-show)

8.4 Location Data Retention

Real-time location: Stored for 90 days after service completion
Service location addresses: Retained for 180 days after account deletion
Aggregated location analytics: Anonymized and retained indefinitely for statistical purposes

8.5 Controlling Location Access

You can control location tracking by:

Setting your status to "Offline" in the app when not working
Disabling location permissions in device settings (prevents receiving bookings)
Contacting support if you have concerns about location data usage

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website or use an app. They help us recognize your device and remember certain information about your activity.

9.2 Types of Cookies We Use

Essential Cookies:

Required for the Platform to function properly
Enable core features like login, booking management, and wallet access
Cannot be disabled as the Platform will not work without them

Functional Cookies:

Remember your preferences and settings (service areas, availability status)
Enhance user experience and convenience
Optional, but disabling them may reduce functionality

Analytics Cookies:

Collect usage data (features used, booking patterns, time spent)
Help us understand technician behavior and improve the Platform
Data is aggregated and anonymized

Performance Tracking:

Monitor app performance, crashes, and errors
Help us identify and fix technical issues
Improve app stability and speed

9.3 Managing Cookies

Browser Settings (Web Access):
You can control cookies through your browser settings:

Block all cookies
Delete existing cookies
Receive notifications when cookies are set

App Settings:
You can manage app-level tracking through:

Device privacy settings
App notification and permissions settings

Note: Disabling certain cookies may affect the functionality of the Platform.

9.4 Third-Party Cookies

Third-party service providers (e.g., analytics tools, payment processors) may set cookies on our Platform. We do not control these cookies. Please refer to their respective privacy policies for more information.

10. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites, services, or integrations (e.g., payment gateways, bank portals, government verification services).

We are not responsible for the privacy practices of third-party services. When you click on a third-party link or use a third-party service, you are subject to that party's privacy policy.

We encourage you to review the privacy policies of any third-party services you interact with.

Third-Party Services We Use:

Banks and Payment Processors: For payout processing and account verification
msg91: For SMS and email delivery
AWS (Amazon Web Services): For cloud infrastructure
Government Verification Services: For Aadhaar and PAN validation
Google Maps: For location services and navigation

11. INTERNATIONAL DATA TRANSFERS

11.1 Data Storage Location

Your personal information is primarily stored on servers located in India (Mumbai region).

11.2 Cross-Border Transfers

As our service is currently available only within India, we do not intentionally transfer your data outside of India.

However, some of our third-party service providers (e.g., cloud infrastructure, analytics tools) may have servers or operations in other countries. In such cases:

Data transfers are conducted in accordance with applicable data protection laws
We implement appropriate safeguards to protect your data (e.g., standard contractual clauses, encryption)

11.3 International Access

If you access the Platform from outside India, please note that:

Your data may be transferred to and processed in India
By using the Platform, you consent to such transfer and processing
Data protection laws in India may differ from those in your country

12. UPDATES TO THIS PRIVACY POLICY

12.1 Right to Modify

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect:

Changes in our data practices
New features or services
Legal or regulatory requirements
Industry best practices

12.2 Notification of Changes

When we make material changes to this Privacy Policy, we will notify you by:

Updating the "Last Updated" date at the top of this document
Posting a notice on the Platform
Sending an email or in-app notification (for significant changes)

12.3 Acceptance of Changes

Your continued use of the Platform after changes take effect constitutes your acceptance of the updated Privacy Policy.

If you do not agree to the changes, you must stop using the Platform and may delete your account.

12.4 Version History

We maintain a version history of this Privacy Policy. You may request previous versions by contacting support@xtromate.com.

13. GRIEVANCE REDRESSAL

If you have any concerns, complaints, or grievances regarding the processing of your personal information, you may contact our Grievance Officer:

Grievance Officer: Designated Representative (Founder/Proprietor)
Email: support@xtromate.com
Address:
Floor No. 1, Building No. 60, Chopasani Road,
Shyam Nagar, Jodhpur, Rajasthan – 342008, India

Response Timeline:
We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.

If you are not satisfied with our response, you may escalate the matter to the appropriate regulatory authority in India (e.g., Data Protection Authority, CERT-In).

14. LEGAL BASIS FOR PROCESSING (FOR EU/EEA RESIDENTS)

These provisions are included for transparency and informational purposes only. Xtromate currently operates primarily in India and does not actively target residents of these jurisdictions.

Although our services are currently available only in India, if EU/EEA residents use the Platform, we process personal data based on the following legal grounds:

Consent: When you explicitly agree to processing (e.g., location tracking, promotional communications)
Contract Performance: To fulfill our contractual obligations (e.g., connect you with customers, process payouts)
Legal Obligation: To comply with applicable laws and regulations (e.g., tax compliance, identity verification)
Legitimate Interests: For business purposes such as fraud prevention, analytics, and improving services (where not overridden by your rights)

15. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Xtromate Technician Support

Email: support@xtromate.com
Phone: +91 6376500280
Address:
Floor No. 1, Building No. 60, Chopasani Road,
Shyam Nagar, Jodhpur, Rajasthan – 342008, India

Business Hours: Monday to Saturday, 9:00 AM – 6:00 PM IST

Grievance Officer: support@xtromate.com

We will respond to all inquiries within 48 business hours.

16. CONSENT AND ACKNOWLEDGMENT

BY USING THE XTROMATE PLATFORM AS A TECHNICIAN, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, DISCLOSURE, AND PROCESSING OF YOUR PERSONAL INFORMATION AS DESCRIBED HEREIN.

If you do not agree with this Privacy Policy, please do not use the Platform.

Thank you for trusting Xtromate with your personal information!

Document Version: 1.0
Effective Date: January 1, 2025
Last Updated: December 25, 2025

Your privacy matters to us. We are committed to protecting your personal information and using it responsibly.

Privacy Policy for Technicians