Skip to main content
Server status

Privacy Policy

Last updated: 18 October 2026

This policy explains what personal data Biometric Lead collects, why, and the choices you have. We process personal data in line with India's Digital Personal Data Protection Act, 2023.

1. What we collect

  • Account details: your name, mobile number, optional email, city, pin code and profile photo.
  • Lead details: the work description, address, price range, the customer's available time, and the registration Token Number and Token Password you enter.
  • Work and payment details: proof files, your payment mobile number, UPI ID and UPI QR code, payment amounts and transaction IDs.
  • Usage data: login times, IP addresses for security and rate limiting, and a log of every time a token password is revealed.

2. Why we use it

  • To run the marketplace: show leads, pass requests to Lead Creators, and share private details with the approved Worker only.
  • To keep accounts secure: OTP verification, rate limiting and fraud prevention.
  • To send you notifications about your leads and jobs.

3. Who can see what

  • Everyone: a lead's title, description, city, pin code, price range and urgency; your name, rating and completed jobs.
  • Only the Lead Creator and the approved Worker: the full address, contact numbers, Token Number, Token Password, available time, proof files and payment details. The Worker loses access to the token details once the lead is closed or cancelled.
  • Our support staff: may access records to resolve disputes, but the token password is stored encrypted and is never shown in our admin tools.

4. How we protect it

Passwords are hashed with bcrypt. Token passwords are encrypted. Proof files, QR codes and payment screenshots are stored outside the public website and served only to the people allowed to see them. All traffic uses HTTPS.

5. How long we keep it

We keep lead, payment and status records for as long as your account is active and for up to 3 years after a lead closes, to resolve disputes and meet legal obligations. One-time passwords expire after 10 minutes.

6. Your rights

You can view and correct your profile at any time, and ask us to access, correct or erase your data, or withdraw consent, by contacting us. Some records (such as completed payments) may have to be kept where the law requires.

7. Cookies

We use only essential cookies: a session cookie to keep you logged in and a security (CSRF) cookie. Your light/dark theme choice is stored in your browser. We do not use advertising cookies.

8. Changes

If we change this policy we will update the date above and, for significant changes, notify you in the app.

Questions? Contact us or write to support@biometriclead.tech.