This Privacy Policy explains how QuickFix("we", "us") processes personal data of customers, service providers, store partners, and visitors on the QuickFix Platform. We aim to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and other applicable Indian laws. By using the Platform, you acknowledge this Policy and our Terms & Conditions.
1. Data fiduciary / controller
QuickFix
Address: Anand, Gujarat, India
Privacy contact: privacy@quickfix.com
Support: support@quickfix.com · +91 8000 555 0123
2. Personal data we collect
- Account data: name, email, phone, password (hashed), profile and banner images, addresses, city, pincode, and optional location coordinates.
- Provider / store business data: business name, bank / UPI details, KYC documents (e.g. Aadhaar, PAN — as uploaded), store images, service/product catalogue, availability, and online status.
- Transaction data: orders, bookings, schedules, OTPs (for fulfilment), payments, invoices, coupons, wallets, withdrawals, strikes, and penalties.
- Location & tracking: customer service address; provider live GPS during an active journey (when the provider starts travel), destination coordinates, and related ETA metadata.
- Device & usage: IP address, browser/app type, pages viewed, and push notification device tokens (FCM) if you enable notifications.
- Communications: support messages, reviews, testimonials, custom service request text/media, and emails we send you.
3. Purposes of processing
- Create and manage accounts; authenticate users; apply role-based permissions.
- Enable marketplace browsing, booking, checkout, escrow, fulfilment, tracking, and warranties.
- Verify KYC, prevent fraud, enforce strikes/penalties, and process withdrawals.
- Send transactional emails/SMS/push (orders, OTPs, booking updates, KYC status).
- Improve Platform performance, security, and customer support.
- Comply with legal obligations (tax, accounting, law-enforcement requests that are valid under law).
- With consent where required: marketing communications (you may opt out).
4. Lawful basis (DPDP)
We process personal data based on: (a) your consent where required; (b) performance of a contract / provision of the requested service; (c) employment-like or legitimate uses permitted under the DPDP Act for employment is not generally applicable to independent partners — for partners we rely on contract and consent for KYC; (d) compliance with law; and (e) other grounds recognised under the DPDP Act and rules as notified.
6. Retention
We retain account and transaction data for as long as your account is active and thereafter as needed for legal, tax, dispute, and audit purposes (typically aligned with Indian limitation and tax record periods). KYC documents are retained while required for compliance and payout eligibility. Live GPS points are kept for the booking journey and related support/audit needs, not as continuous background tracking when a journey is not active.
7. Security
We use reasonable technical and organisational measures (access controls, hashed passwords, HTTPS in production, role permissions). No method of transmission or storage is 100% secure; please use a strong unique password.
8. Your rights
Subject to the DPDP Act and applicable rules, you may request:
- Access to your personal data and correction of inaccurate data
- Erasure / withdrawal of consent where processing is consent-based (subject to legal retention)
- Grievance redressal via our designated officer
Contact privacy@quickfix.com or see Grievance Redressal.
9. Children
The Platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have, contact us for deletion.
11. Cross-border transfers
Primary operations and databases are intended for India. If any processor stores data outside India, we will take steps consistent with applicable DPDP rules and contracts.
12. Changes
We may update this Policy; the "Last updated" date will change. Significant changes may be notified by email or in-app notice.