Privacy Policy

1. Introduction

We respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data when you use our marketplace app ("Inchaa"). By using our services, you agree to the collection and use of information in accordance with this policy. Definition: "Service Provider" refers to Main Contractors, Sub-Contractors, and Consultants listed on the Inchaa platform.

2. Information We Collect

We collect and store the following information to provide a seamless user experience:

• Profile Information: When you create an account, we collect details such as your name, email address, phone number, and address.
• Location Information: We may collect your location based on the address you provide (or device location if enabled) to recommend relevant Service Providers near you.
• Service Provider Details: We collect and store information about Service Providers, such as their name, contact details, services offered, profile details, business details (if applicable), and user reviews/ratings.
• Request for Quote (RFQ) Information: When a customer submits a request for quote, we collect request details such as service category, requirements/notes, location/site details, and attachments (if applicable).
• Usage Information: We may collect data about your interaction with the app to improve performance and user experience.

3. How We Use Your Information

We use your information for the following purposes:

• Personalization: To recommend Service Providers based on your location and preferences.
• Communication: To send you account-related notifications, including updates on RFQs, quotations, approvals, status changes, and reviews.
• Platform Operations: To enable quotation workflows, improve user experience, maintain safety, and prevent misuse/fraud.
• Feedback: To allow you to leave reviews for Service Providers and rate their services.

4. Analytics and Third-Party Services

We use third-party analytics providers, such as [Google Analytics, Firebase Analytics, etc.], to help us understand how users interact with our app and improve the user experience. These providers may collect information such as device type, IP address, usage patterns, and other usage data. We may also use third-party services to support platform functionality. These providers may process certain personal data on our behalf strictly for delivering their services. Examples include:

• Google Maps Platform / Google Maps API (map display, location search, geocoding, and distance calculations)
• Twilio (OTP/SMS verification and notifications)
• SendGrid (email notifications)
• Google Firebase / Google Analytics (analytics and performance monitoring)
• Cloud hosting providers (hosting, storage, and infrastructure services)

These third parties are contractually required to protect your data and use it only for delivering services to Inchaa.

5. How We Protect Your Data

We implement appropriate technical, administrative, and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our safeguards include:

• Technical Safeguards: Encryption of sensitive data at rest using industry-standard encryption (AES-256 or equivalent), encryption of data in transit using secure communication protocols (TLS 1.2 or higher), secure and encrypted database connections, token-based authentication for APIs and system integrations, and secure API communications with authentication keys and access controls.
• Access Controls: Role-based access control (RBAC) based on the principle of least privilege, multi-factor authentication (MFA) for administrative access, restricted access to production systems, and logging and monitoring of access activities.
• Operational Safeguards: Regular security reviews and vulnerability assessments, periodic penetration testing (annually or bi-annually), secure backup, retention, and disaster recovery procedures, and internal security awareness and training for employees.

Access to Personally Identifiable Information (PII) such as name, phone number, email address, and address is restricted to authorized personnel only. Admin portal access is controlled through role-based permissions. While we strive to use commercially acceptable means to protect personal data, no method of transmission over the Internet or method of electronic storage is completely secure. Therefore, we cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and should notify us immediately of any suspected unauthorized activity.

6. Sharing Your Information

We do not sell or rent your personal data. However, we may share your data with trusted third-party providers who assist us in delivering services such as hosting, email communication, notifications, analytics, and reviews. Specific sharing scenarios include:

• Sharing with Service Providers (RFQ Visibility): When a customer submits a Request for Quote (RFQ), Inchaa may share required request details with relevant Service Providers so they can review the request and submit quotations. This may include customer name (or profile name), contact details (phone/email as applicable), address/location, service requirements and notes, and attachments (if provided).
• Admin Portal Access (Operational Use): Authorized Inchaa admin users may access customer and Service Provider details through the admin portal for verification, approvals, and account review processes, platform operations and support activities, dispute handling and fraud prevention, and compliance, monitoring, and enforcement of platform policies. Admin access is restricted to authorized roles only.

These third parties are contractually required to protect your data and use it only for delivering services to Inchaa.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our app. You can manage your cookie preferences through your device settings.

8. Your Rights

You have the right to access, update, or delete the personal information we hold about you. For any data-related requests, please contact us at support@inchaa.com.

9. Data Retention

We retain personal information only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with the updated "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at: support@inchaa.com