Privacy Policy

1Who we are and how to reach us

ChronoSpark Solutions operates Hi Partner from India. For anything about your personal data write to privacy@hipartner.online. Our Grievance Officer, required by the IT Rules, 2021 and the DPDP Act, 2023, can be reached at grievance@hipartner.online; full details are on the Grievance Redressal page.

2Data we collect

We collect only what each feature needs. Nothing is collected in the background for advertising profiles.

Account: phone number or email, name, chosen language, role (customer, worker, seller, equipment owner), profile photo, and the device token used to deliver notifications.
Identity verification, when you choose it: the ID document you upload, hashed identifiers, and the verification result. The raw document is stored encrypted and is not shown to other users.
Location: your approximate zone for search and the precise location you share for a booking, an SOS alert or a delivery radius. Precise location is used for the feature you triggered and is not kept as a history.
Listings and profiles: skills, rates, service area, working hours, photos of past work, goods and equipment you list, and the text you write.
Bookings, orders and rentals: what was booked, when, the agreed price, start codes, completion confirmations, cancellations and disputes.
Messages, calls and voice notes exchanged inside the app, including files you attach. Calls are connected through masked numbers and are not recorded by us.
Payments: the amounts, the payment mode, escrow status, wallet ledger entries, tips and income statements. Card and bank details are entered on the payment gateway and never reach our servers.
Reviews, badges, referrals and support tickets.
Partner assistant: what you say or type to Partner, the actions it takes with your confirmation, and a memory you can view and delete.
Technical data: device model, operating system, app version, crash reports, IP address for security and fraud checks, and the network type used to decide when to download voices or fonts.

3Why we use it and the legal basis

Under the DPDP Act we process personal data with your consent or for the legitimate uses the Act allows. Under the GDPR each purpose rests on one of these bases:

Providing the service you asked for: matching, chat, bookings, payments, reviews (contract, Article 6(1)(b)).
Safety and fraud prevention: verification, moderation of uploads, SOS, masked calls, rate limits (legitimate interest, Article 6(1)(f), and legal obligation).
Legal obligations: tax invoices and GST records, responding to lawful requests, retaining records the law requires (Article 6(1)(c)).
Location-based search, marketing notifications and personalised advertising: only with your explicit, revocable consent (Article 6(1)(a)). Contextual ads by zone and language need no profile and use none.
Improving the product with aggregated, de-identified statistics that cannot be traced to you.

4Consent, notice and how to withdraw

Each consent in the app is asked for separately, in your language, with a plain notice of what it enables, as the DPDP Act requires. You can withdraw any consent from Profile → Privacy at any time; withdrawal takes effect immediately for future processing and does not affect what was lawfully done before. Refusing an optional consent never blocks the core service: you can still search, chat, book and be paid.

5What stays private between users

Your phone number, email and address are never shown in search results, on your public profile or in chat before a booking is accepted. After acceptance both parties see the contact details needed for the job. Calls inside the app are masked. Workers' share pages (hipartner.online/w/…) show name, skills, rates, badges and approved photos only.

6Who we share data with

We do not sell personal data and we do not share it with data brokers. We share it only with:

The other party to a booking, order or rental, to the extent needed to complete it.
Processors acting on our instructions under written contracts: cloud hosting in India, the payment gateway for online payments, SMS and email delivery, push notification delivery, and map tiles. Each receives only the data its task needs.
Verification providers, when you choose ID verification.
Authorities and courts when the law requires it, including requests under the IT Act and IT Rules, 2021, which we answer within the statutory time and log.
A successor if the business is transferred, with the same protections and notice to you.

7Cross-border transfers

Personal data is stored in India. Where a processor operates outside India we transfer only what is needed, to countries not restricted by the Central Government under section 16 of the DPDP Act, under contracts with appropriate safeguards. For EU/EEA and UK visitors, transfers rely on adequacy decisions or the standard contractual clauses.

8Security

Data is encrypted in transit and at rest. Personal identifiers are stored with field-level encryption and blind indexes so that even our own database queries do not see raw values. Access inside the company is role-based and audited; every administrative action is written to an append-only audit log. We test backups and rehearse incident response. If a breach affects you, we will notify you and the Data Protection Board of India as the DPDP Act requires, and EU/UK supervisory authorities within 72 hours where the GDPR applies.

9Your rights

Under the DPDP Act, and where applicable the GDPR, you can:

Access a summary of the personal data we hold about you and the processing we carry out (Profile → Privacy → Download my data).
Correct or complete inaccurate data (edit your profile, or write to us).
Erase your account and data (in-app, or through the account deletion page on this site), subject to the retention the law requires.
Nominate a person to exercise your rights if you are unable to.
Withdraw consent, object to processing based on legitimate interest, and opt out of marketing.
Receive your data in a portable format and, where the GDPR applies, restrict processing.
Raise a grievance with our Grievance Officer and, if unresolved, approach the Data Protection Board of India, or your supervisory authority in the EU/EEA or the ICO in the UK.

We answer rights requests within 30 days, or sooner where the law sets a shorter period, and we never charge for them.

10Children

Hi Partner is for adults. You must be 18 or older to create an account. We do not knowingly process the personal data of children and we do not track or advertise to them, in line with section 9 of the DPDP Act. If you believe a child has created an account, write to us and we will delete it.

11Retention

We keep personal data only as long as the purpose requires, then delete or anonymise it. The full schedule is in the Data Retention & Deletion policy. In summary: your account for as long as it is active and 30 days after you delete it (the grace period in which you can change your mind); booking, payment and invoice records for the period tax and company law require; chat for twelve months after a conversation ends unless a dispute is open; audit and security logs for one year; and registration records for 180 days after withdrawal as the IT Rules require.

12Cookies and tracking

Neither the app nor this website uses third-party trackers or advertising cookies. The website stores only your theme and language preference in your browser. Details are in the Cookie & Tracking Policy.

13Automated decisions

Search ranking uses distance, price, availability and a smoothed rating; sponsored slots are labelled and never mixed into that order. Badges and the Trusted tier are calculated from verification, ratings, completed jobs and dispute rate, and you can ask a person to review any such decision through the Grievance Officer. We do not make legal or similarly significant decisions about you by fully automated means.

14Changes to this policy

We will announce material changes inside the app and on this page at least 15 days before they take effect, and ask again for consent where a change needs it. The effective date at the top is the version that applies.