Privacy Policy

Last Updated: April 23, 2026

1. Introduction

This Privacy Policy explains how Naipunya AI Labs Private Limited ("ExtraHand", "we", "us", or "our") collects, uses, shares, and protects personal information when you access or use the ExtraHand platform, including our website, mobile application, and related services (collectively, the "Platform").

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. This policy is intended to help Customers, Taskers, and visitors understand what information is collected, why it is collected, and how it supports the safe and reliable functioning of ExtraHand.

2. Information We Collect

We collect information depending on how you use the Platform as a Customer ("Poster"), Tasker, or both. Some information is provided directly by you, while some is collected automatically through your use of the platform.

a. Personal Information

Name, email address, and mobile number
Address and profile details
Account credentials and account-related information

b. Task & Transaction Information

Task details such as location, timing, and requirements
Messages, attachments, and communication shared through the platform
Booking records and transaction history

c. Identity & Verification Data

KYC details where required
Government-issued identification, where applicable
Fraud-prevention and account-risk review information

d. Payment Information

Payment and payout details processed through third-party providers
Limited transaction metadata needed to support payment flow, refunds, and reconciliation
We do not store sensitive financial information such as full card details

e. Technical & Usage Data

IP address, device type, operating environment, and browser type
App interactions, usage patterns, and navigation behavior
Log data and security-related activity

f. Location Information

GPS or approximate location data
Location inputs used for task matching, service delivery, and fraud prevention

3. How We Use Information

We use personal information to operate, improve, and secure the Platform. This includes essential platform functions such as account creation, task coordination, communication, payment handling, verification, and support.

Create and manage user accounts
Enable task posting, booking, communication, payments, and payouts
Match Customers with Taskers
Verify identity and prevent fraud
Provide customer support and resolve disputes
Improve platform performance, reliability, and user experience
Send service-related notifications, updates, and alerts
Comply with legal, tax, and regulatory obligations

Legal Basis

We process personal data based on user consent, contractual necessity, legal obligations, and legitimate business interests. Depending on the context, more than one of these legal bases may apply to the same category of information.

4. Sharing of Information

We do not sell personal data. We may share information only where it is reasonably necessary to operate the Platform, deliver services to users, maintain security, or comply with legal obligations.

Between Customers and Taskers where sharing is necessary to coordinate and complete a task
With payment processors, verification partners, hosting providers, messaging services, analytics providers, and other service providers that help us operate the platform
With affiliates, professional advisors, auditors, and contractors where reasonably necessary for operations or compliance
With law enforcement, courts, regulators, or government authorities where required by law or where necessary to protect rights, safety, and the platform

5. Payments, Verification & Third-Party Services

Certain services on ExtraHand depend on third-party providers such as payment gateways, identity verification services, cloud hosting providers, analytics tools, and communication providers. These services help support task flow, payment operations, fraud prevention, notifications, and platform performance.

Payment gateways such as UPI, cards, net banking, and wallets
Identity verification and KYC providers
Cloud hosting and infrastructure providers
Analytics, messaging, and communication tools

These providers may process your data under their own privacy policies and compliance obligations. We encourage users to review those terms where relevant.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain sessions, remember preferences, support platform security, analyze usage, and improve performance. Some cookies are essential to the working of the Platform, while others may be optional depending on your settings and the features being used.

Optional cookies may be used for analytics, measurement, or integrations where required. For more detail, please see our Cookie Policy.

7. Data Security

We implement industry-standard technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. These safeguards may include access controls, monitoring, encryption practices where appropriate, and internal processes designed to reduce security risk.

While we strive to protect your data, no system is completely secure. Users should also protect their own account credentials and report any suspected unauthorized activity promptly.

8. Data Retention

We retain personal data only as long as necessary to provide services, maintain business and legal records, resolve disputes, prevent fraud, and comply with legal and regulatory obligations.

Provide services and maintain account functionality
Maintain transaction and operational records
Resolve disputes and investigate complaints
Prevent fraud and enforce platform policies
Comply with legal and regulatory obligations

Certain data may be retained even after account deletion where such retention is required by law, necessary for fraud prevention, or needed for dispute resolution and compliance purposes.

9. Your Rights & Choices

Subject to applicable law, you may have rights regarding the personal information we hold about you. We may need to verify your identity before acting on any request.

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your account and data, subject to applicable law
Withdraw consent for certain processing where consent is the basis
Opt out of marketing communications

Account Deletion

You can request account deletion from your Profile by going to Privacy, then opening Advanced Settings, where the Delete Account option will be available.

An account deletion request can only be submitted if there are no ongoing tasks linked to your account. Once a valid deletion request is submitted, the account is scheduled for deletion within 24 to 48 hours.

During that pending period, you may cancel the deletion request through the same privacy settings flow. Once the deletion is completed, your personal data will be deleted or anonymized where reasonably possible, although certain information may still be retained for legal, fraud prevention, dispute resolution, tax, or regulatory purposes.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that such data has been collected, we will take reasonable steps to delete it or otherwise handle it in accordance with applicable law.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services, operations, business needs, or legal requirements. The updated version will be posted on this page with the revised date so users can review the current policy at any time.

12. Contact & Grievance

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

Company: Naipunya AI Labs Private Limited

Email: support@extrahand.in

Website: https://extrahand.in

We will acknowledge complaints within 48 hours and resolve them as per applicable law.