Privacy policy
This policy describes how Orcus ("we", "us") collects, uses, and protects your information when you use our mobile apps and website.
What we collect
- Phone number for OTP-based login and to coordinate service.
- Name and (for service providers) photo, Aadhaar last 4 digits, work samples for identity verification.
- Approximate location while the app is in use, to match you with nearby providers.
- Request and job details you provide in chat (problem description, photos) for matching.
- Device identifiers (Firebase push token, device model) so we can notify you about your bookings.
What we do with it
- Match customers with the right local service provider.
- Coordinate the job via in-app chat or WhatsApp Business messaging.
- Verify worker identity to keep the marketplace safe.
- Improve our matching, pricing, and AI scoping over time using anonymised aggregate signals.
- Prevent fraud and platform abuse.
What we don't do
- Sell your personal data to third parties.
- Share your phone number publicly without your consent.
- Use your data for advertising outside Orcus.
- Train third-party AI models on your data.
Who we share data with
Limited categories of trusted vendors that help us run the service:
- Google Firebase — push notifications, crash reporting
- Supabase — encrypted storage of photos and documents
- Meta WhatsApp Business — only for sending you transactional updates if you opted in
- Google Maps — for showing nearby providers and worker location during service
- Sentry — anonymised error logs to fix bugs
Each vendor is bound by their own privacy commitments and contracts with us. We don't share more than is needed for them to do their job.
WhatsApp messaging
If you choose to receive lead notifications or job updates over WhatsApp, we send messages through the Meta WhatsApp Business Platform under approved utility/transactional templates. You can opt out at any time by replying STOP.
How long we keep data
Active account data is kept while your account exists. Identity verification documents are kept for as long as required by Indian regulations (currently 5 years from the date of last service). Transaction records are kept for 8 years for tax compliance. You can request deletion at any time via delete-account.
Your rights
- Access the data we hold on you.
- Correct inaccurate information.
- Delete your account and associated data.
- Withdraw consent for non-essential processing.
- Receive a copy of your data in a portable format.
Email [email protected] with any request — we respond within 7 business days.
Children
Orcus is not directed at users under 13. We do not knowingly collect data from minors under 13. If you believe we have, write to us and we'll delete it. Users aged 13–17 may use Orcus as customers with a parent or guardian's involvement; provider accounts require the registered owner to be 18+.
Security
We use industry-standard encryption (TLS in transit, AES-256 at rest for sensitive documents), restricted access controls, and audit logs. No system is perfect — if you suspect a security issue, email [email protected].
Changes
If we change this policy, we'll update the "Last updated" date above and, for material changes, notify you in-app or by email.
Contact
Orcus · India · [email protected]