Privacy Policy

Introduction

Bookixo Technologies Private Limited ("Bookixo", "we", "us") operates the Bookixo mobile application and website (the "Platform"), a home services booking platform designed for users in India.

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our Platform. It complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and is aligned with the upcoming Digital Personal Data Protection Act, 2023 (DPDPA).

By using Bookixo, you consent to the collection and use of information in accordance with this policy.

Data We Collect

We collect information to provide, improve, and personalise our services. Here's what that includes:

We do not collect sensitive personal data such as Aadhaar number (only used for provider verification, never stored), biometrics, racial/ethnic origin, or health information.

How We Use Your Data

Your data is used solely to deliver and improve the Bookixo experience:

• To create and manage your account
• To match you with available, verified service providers in your area
• To process payments via UPI, cards, or net banking and send booking confirmations
• To send service reminders and booking updates via push notification, SMS, or WhatsApp
• To respond to customer support inquiries in English and Hindi
• To detect, prevent, and address fraud or safety concerns
• To improve our app and develop new features through anonymised analytics
• To comply with applicable Indian laws and regulations

We will never use your data for purposes incompatible with those listed above without seeking your explicit consent first.

Sharing Your Data

We do not sell your personal data. We share it only in limited circumstances:

• Service Providers: We share relevant booking details (name, address, service type) with the professional assigned to your booking.
• Payment Processors: Payments are processed securely by Razorpay (UPI, cards) and PayU. We share only what is required to complete the transaction.
• Analytics Providers: We use anonymised, aggregated data with tools like Firebase Analytics. No personal identifiers are shared.
• Legal Requirements: We may disclose data if required by Indian law, court order, or government authority, or to protect user safety.
• Business Transfers: In the event of a merger or acquisition, user data may be transferred with at least 14 days' advance notice.

Cookies & Tracking

Our website uses cookies and similar tracking technologies to improve your experience:

• Essential cookies: Required for the website to function (login sessions, security tokens).
• Analytics cookies: Help us understand how visitors use our site (e.g. via anonymised Google Analytics).
• Preference cookies: Remember your language (English/Hindi) and region settings.

You can manage or disable non-essential cookies via your browser settings. Our mobile app uses device identifiers (e.g. Android Advertising ID, iOS IDFA) for crash reporting only. These can be reset in your device settings.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services:

• Active account data is retained for the lifetime of your account.
• Booking history is retained for 3 years for customer support and dispute resolution.
• Payment records are retained for 8 years as required under Indian financial and tax regulations.
• Support messages are retained for 2 years.
• Anonymised analytics data may be retained indefinitely.

When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by Indian law.

Your Rights

Under the Information Technology (SPDI) Rules and the upcoming DPDPA, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data and close your account.
• Withdrawal of Consent: Withdraw consent for data processing at any time (may affect service availability).
• Grievance Redressal: Lodge a grievance with our Data Protection Officer (see Section 11).

To exercise any of these rights, contact us at privacy@bookixo.com or visit Privacy Settings in the app. We will respond within 30 days as required by Indian law.

Children's Privacy

Bookixo is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from anyone under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@bookixo.com and we will delete that information promptly.

Security

We implement industry-standard technical and organisational measures as required under Rule 8 of the SPDI Rules:

• All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Payment data is processed exclusively by Razorpay, a PCI DSS Level 1 certified provider. Bookixo never stores full card numbers or UPI credentials.
• Access to personal data within our organisation is role-based, logged, and audited.
• We conduct regular security audits and vulnerability assessments.
• In the event of a data breach, we will notify affected users within 72 hours.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last updated" date at the top of this page.
• Send an in-app notification and/or email/SMS for material changes.
• Give you at least 14 days' notice before any significant changes take effect.

Your continued use of Bookixo after changes take effect constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, requests, or grievances, please contact our Data Protection Officer as required under Indian law: