Privacy Policy

Effective Date: September 2026 | Platform: HandyFabricator Platform

1. Platform Overview & Scope

HandyFabricator ("HandyFabricator Platform", "we", "our", or "us") operates a technology platform connecting fabrication, finishing, and construction trade specialists ("Partners") with project opportunities and clients across India.

This Privacy Policy explains how we collect, process, store, and safeguard your personal information when you visit our website, register as a trade partner, verify credentials, interact with operational WhatsApp or SMS notifications, or access our digital interfaces.

2. Information We Collect

We collect the minimum necessary information required to operate, verify, and secure our partner network:

• Contact & Professional Profile Information: Full name, registered mobile phone number, WhatsApp contact number, preferred trade or specialization, years of experience, crew capacity details, and preferred service localities.
• Verification Evidence: Identity, professional, trade, or other verification evidence may be requested depending on the applicable verification policy in effect at the time of review.
• Authentication & Security Telemetry: One-Time Passwords (OTPs) generated for ownership verification, access timestamps, and technical telemetry (such as IP addresses and browser user-agents) used for fraud prevention and session security.
• Attribution & Referral Data: Referral codes and attribution source parameters used during registration to record one-time referral rewards under our partner referral program (50 HandyCoins awarded once per verified referral registration; no recurring work-based rewards).

3. Operational Messaging & Authentication Separation

HandyFabricator maintains distinct channels for security and operational communications:

• Security Ownership Challenges: Critical account verification and ownership challenge OTPs are delivered via the official WhatsApp Cloud API from Meta or authorized SMS gateways.
• Operational Lifecycle Updates: Onboarding progress, status updates, and service notifications may be delivered through our operational messaging notification bridge or SMS.
• No Commercial Data Reselling: We do not sell, rent, or lease your phone number or personal details to third-party marketing lists.

4. Data Security & Technical Safeguards

We implement industry-standard administrative, physical, and technical safeguards:

• Encryption in Transit: All web traffic is strictly transmitted over HTTPS using secure TLS protocols.
• Access Controls: Administrative and operational access to partner data is restricted on a strict need-to-know basis with authenticated role permissions.
• Cryptographic Verification: Cloud service integrations and incoming webhooks utilize cryptographic signature verification to prevent spoofing and data tampering.

5. Third-Party Infrastructure Processors

We partner with enterprise cloud and communication infrastructure providers to deliver platform services:

• Cloud Infrastructure Providers: Google Cloud / Firebase for hosting, managed database services, and secure media storage.
• Messaging Providers: Meta Platforms, Inc. (WhatsApp Business Platform) and telecommunication SMS gateways for operational message delivery.

6. Your Privacy Rights & Data Deletion

You have the right to request access to, correction of, or deletion of your personal data:

• Profile Access: You can check your registration status directly on the Partner Portal.
• Data Deletion Requests: You may submit a data deletion request by contacting our support desk. Deletion requests are processed manually following identity verification. Detailed steps are provided on our Data Deletion Page.
• Legal & Compliance Record Retention: Certain records may be retained where required for legal, tax, accounting, fraud-prevention, security, dispute, or regulatory obligations.

7. Privacy Contact & Support

For privacy inquiries, rights requests, or feedback regarding our privacy practices: