Table of Contents
This Privacy Policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and all applicable Indian data protection laws. Hoodex acts as a Data Fiduciary under the DPDP Act.
1. Introduction
Skyhood ("Hoodex", "We") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Hoodex Platform. By using the Platform, you provide free, specific, informed, and unambiguous consent to data processing as described herein.
2. Data We Collect
2.1 Identity Data
Full name, date of birth, gender, photograph.
Government ID numbers (Aadhaar, PAN, Voter ID, Passport, Driving Licence).
Biometric data for facial verification (with explicit consent).
2.2 Contact Data
Mobile number, email address, residential and work address.
2.3 Professional Data
Skills, qualifications, certifications, work history, education.
Platform ratings, reviews, completion rates, job history.
2.4 Financial Data
Bank account number, IFSC, UPI ID, wallet balance and transaction history.
Payment card details - tokenized only; full card data NOT stored by Hoodex.
TDS, tax-related information.
2.5 Location Data
Real-time GPS location during active jobs.
Historical location data for fraud detection and analytics.
IP address, device location.
2.6 Device & Technical Data
Device ID (IMEI), OS, app version, IP address, browser type, session data, cookies.
App usage patterns, feature interactions, log files.
2.7 Communications Data
In-app messages, notifications, customer support interactions, call logs (if in-app calling used).
2.8 Behavioural & Analytics Data
Job preferences, browsing patterns, fraud risk scores generated by automated systems.
3. Purposes of Data Processing
Account registration, KYC verification, and user authentication.
Matching Workers and Employers using our proprietary algorithm.
Processing payments, calculating commissions, managing payouts.
Complying with legal obligations including TDS deduction and GST compliance.
Fraud detection, security monitoring, and Platform abuse prevention.
Customer support, dispute resolution, and grievance handling.
Safety monitoring, incident investigation, and emergency response.
Sending transactional, service, safety, and promotional communications.
Analytics, research, and Platform improvement.
Complying with law enforcement, regulatory, and court orders.
4. Data Sharing
4.1 With Other Users
Limited profile information (name, photo, skills, ratings) is shared with matched Employers or Workers for job completion. Location is shared in real-time during a confirmed job session.
4.2 With Service Providers
Third-party processors (payment gateways, KYC providers, cloud services, analytics) operate under data processing agreements with appropriate safeguards.
4.3 With Authorities
Hoodex will share personal data with law enforcement, courts, and regulators when required by applicable law, court order, or valid government request. In cases involving national security or criminal investigations, Hoodex may proactively share information without a formal request.
4.4 Business Transfers
In a merger or acquisition, personal data may transfer to the acquiring entity subject to equivalent data protection obligations.
5. Data Security
Industry-standard security measures including AES-256 encryption, access controls, firewalls, and intrusion detection.
Regular security audits, vulnerability assessments, and penetration testing.
In the event of a data breach, Hoodex will notify the Data Protection Board of India and affected users as required under the DPDP Act.
Security Limitation
Despite best efforts, no data transmission or storage can be 100% secure. Hoodex cannot guarantee absolute data security.
6. Data Retention
Category | Retention Period |
|---|---|
Account & Profile Data | Duration of account + 7 years after deletion |
KYC / Identity Documents | 7 years from collection (or as required by law) |
Financial Transactions | 8 years (Income Tax, GST compliance) |
Location Data | 90 days, then anonymized |
In-App Communications | 2 years |
Incident & Safety Records | 10 years or duration of legal proceedings |
Fraud & Abuse Logs | 7 years |
7. Your Rights (DPDP Act)
Right of Access: Request a summary of personal data held by Hoodex.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion subject to legal retention obligations.
Right to Grievance Redressal: Lodge a complaint with the Grievance Officer or the Data Protection Board.
Right to Nominate: Nominate another individual to exercise rights in case of incapacity or death.
To exercise rights, contact legal@hoodex.work. Requests processed within 30 days.
8. International Data Transfers
Hoodex primarily processes data within India. To the extent data is transferred outside India (e.g., to cloud providers with servers outside India), such transfers are made subject to Standard Contractual Clauses or equivalent safeguards as prescribed under the DPDP Act.
9. Children's Privacy
The Platform is strictly for users aged 18 and above. We do not knowingly collect personal data of minors. Discovery of a minor's account results in immediate deletion.
10. Live Location Tracking
When a worker accepts or is assigned a job, Hoodex may collect the worker’s precise geographic location through the worker’s mobile device. Depending on the worker’s permission settings and device configuration, location collection may continue while the application runs in the background or the screen is locked.
When tracking occurs: Live location tracking begins no earlier than 30 minutes before the scheduled start time of an assigned job. Tracking automatically stops when the worker arrives, the job is completed / the job is cancelled / the employer is not on the tracking screen, etc. We do not use this feature to track workers outside the disclosed job-related tracking period.
Information collected: We may collect precise GPS coordinates, location timestamps, movement or route information derived from successive location updates, job and worker identifiers, device or application status needed to operate tracking, and records indicating when tracking started and stopped.
How we use location information: We use this information to:
Show the assigned worker’s live or most recently available location to the employer or customer associated with that job;
Provide estimated arrival information and coordinate job attendance;
Confirm arrival at the job location;
Support worker safety, customer support, and investigation of location-related complaints or disputes;
Detect misuse, fraud, or technical problems; and
Comply with applicable legal obligations.
We do not use a worker’s precise location for advertising or sell it to data brokers or other third parties.
Who can see or receive it: During the active tracking period, the worker’s live or most recently available location may be visible to the employer or authorized employer personnel associated with the assigned job. It is not made available to unrelated employers or members of the public. Location information may also be processed by service providers that help us provide mapping, hosting, analytics, security, and technical-support services, such as Google Maps actually used. These providers may process information according to their own terms and privacy policies and our contractual arrangements with them.
Worker notice and control: Before tracking starts, the application informs the worker that their precise location will be collected and shown to the employer assigned to the relevant job. The worker must grant the applicable device-location permission before live tracking can begin. While live tracking is active, the application displays a persistent notification, tracking banner, status indicator, or similar visible notice.
The worker may stop live tracking using the available in-app control or withdraw location permission through their device settings. Disabling location will prevent the live arrival-tracking feature from working. Where permitted for the assigned job, the worker may instead verify their arrival by scanning the job-site QR code or entering a one-time password (OTP) provided by the employer.
When the worker uses QR-code or OTP verification, the application records the job identifier, worker identifier, check-in date and time, verification method, and verification result. Scanning the QR code or entering the OTP does not itself collect or transmit the worker’s continuous GPS location. Upon successful verification, the worker’s job status will be marked as “Arrived.”
Retention: During active live tracking, the worker’s travelling location coordinates may be transmitted and temporarily processed to display the worker’s current or most recently available location to the assigned employer. We do not permanently store or retain the worker’s travelling latitude and longitude coordinates or route history on our servers after the live-tracking session ends.
We retain only the final arrival latitude and longitude recorded when the worker is marked as “Arrived,” together with the related job identifier, worker identifier, and arrival date and time. The arrival coordinates are retained for 365 days for attendance verification, job administration, dispute resolution, fraud prevention, safety, and compliance purposes. After this period, the arrival coordinates are deleted or de-identified unless longer retention is reasonably necessary for an active dispute, fraud or safety investigation, legal obligation, or legal claim.
If arrival is verified solely by scanning a QR code or entering an OTP without location access, we do not collect arrival latitude or longitude through that verification process.
Security and access: We use reasonable technical and organizational safeguards to protect location information. Access is limited to authorized persons who need it for the purposes described above. Employers must not use worker location information for unrelated monitoring, harassment, discrimination, or any purpose outside the assigned job.
Worker rights and requests: Subject to applicable law, workers may request access to, correction of, or deletion of their stored location information, withdraw consent where consent is the applicable basis, or submit a privacy complaint by contacting support@hoodex.work. Withdrawal does not affect processing that occurred before withdrawal.
Legal basis: Where applicable, we process this information with the worker’s consent and/or because processing is necessary to provide the assigned-job tracking service, protect legitimate safety and operational interests, or comply with law. The lawful basis used may differ by jurisdiction.
11. Cookies
We use cookies and similar tracking technologies. Please refer to our Cookie Policy for details.
12. Contact & DPO
Data Protection Officer: Sandeep Kumar | legal@hoodex.work
You may also escalate unresolved data complaints to the Data Protection Board of India at dpboard.gov.in.
Contact Us
Company: Skyhood
Registered Office: Basement, 21C, Block E, Sector 8, Noida, GAUTAM BUDDHA NAGAR - 201301
Support Email: support@hoodex.work
Grievance Officer: Sandeep Kumar
Grievance Email: legal@hoodex.work
Helpline: WhatsApp +91 98772 70320 (Mon-Sat, 9 AM - 6 PM IST)