Privacy Policy

1. Introduction

Skyhood ("Hoodex", "We") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Hoodex Platform. By using the Platform, you provide free, specific, informed, and unambiguous consent to data processing as described herein.

2. Data We Collect

2.1 Identity Data

• Full name, date of birth, gender, photograph.
• Government ID numbers (Aadhaar, PAN, Voter ID, Passport, Driving Licence).
• Biometric data for facial verification (with explicit consent).

2.2 Contact Data

• Mobile number, email address, residential and work address.

2.3 Professional Data

• Skills, qualifications, certifications, work history, education.
• Platform ratings, reviews, completion rates, job history.

2.4 Financial Data

• Bank account number, IFSC, UPI ID, wallet balance and transaction history.
• Payment card details — tokenized only; full card data NOT stored by Hoodex.
• TDS, tax-related information.

2.5 Location Data

• Real-time GPS location during active jobs.
• Historical location data for fraud detection and analytics.
• IP address, device location.

2.6 Device & Technical Data

• Device ID (IMEI), OS, app version, IP address, browser type, session data, cookies.
• App usage patterns, feature interactions, log files.

2.7 Communications Data

• In-app messages, notifications, customer support interactions, call logs (if in-app calling used).

2.8 Behavioural & Analytics Data

• Job preferences, browsing patterns, fraud risk scores generated by automated systems.

3. Purposes of Data Processing

• Account registration, KYC verification, and user authentication.
• Matching Workers and Employers using our proprietary algorithm.
• Processing payments, calculating commissions, managing payouts.
• Complying with legal obligations including TDS deduction and GST compliance.
• Fraud detection, security monitoring, and Platform abuse prevention.
• Customer support, dispute resolution, and grievance handling.
• Safety monitoring, incident investigation, and emergency response.
• Sending transactional, service, safety, and promotional communications.
• Analytics, research, and Platform improvement.
• Complying with law enforcement, regulatory, and court orders.

4. Data Sharing

4.1 With Other Users

Limited profile information (name, photo, skills, ratings) is shared with matched Employers or Workers for job completion. Location is shared in real-time during a confirmed job session.

4.2 With Service Providers

Third-party processors (payment gateways, KYC providers, cloud services, analytics) operate under data processing agreements with appropriate safeguards.

4.3 With Authorities

Hoodex will share personal data with law enforcement, courts, and regulators when required by applicable law, court order, or valid government request. In cases involving national security or criminal investigations, Hoodex may proactively share information without a formal request.

4.4 Business Transfers

In a merger or acquisition, personal data may transfer to the acquiring entity subject to equivalent data protection obligations.

5. Data Security

• Industry-standard security measures including AES-256 encryption, access controls, firewalls, and intrusion detection.
• Regular security audits, vulnerability assessments, and penetration testing.
• In the event of a data breach, Hoodex will notify the Data Protection Board of India and affected users as required under the DPDP Act.

6. Data Retention

Category	Retention Period
Account & Profile Data	Duration of account + 7 years after deletion
KYC / Identity Documents	7 years from collection (or as required by law)
Financial Transactions	8 years (Income Tax, GST compliance)
Location Data	90 days, then anonymized
In-App Communications	2 years
Incident & Safety Records	10 years or duration of legal proceedings
Fraud & Abuse Logs	7 years

7. Your Rights (DPDP Act)

• Right of Access: Request a summary of personal data held by Hoodex.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion subject to legal retention obligations.
• Right to Grievance Redressal: Lodge a complaint with the Grievance Officer or the Data Protection Board.
• Right to Nominate: Nominate another individual to exercise rights in case of incapacity or death.

To exercise rights, contact legal@hoodex.work. Requests processed within 30 days.

8. International Data Transfers

Hoodex primarily processes data within India. To the extent data is transferred outside India (e.g., to cloud providers with servers outside India), such transfers are made subject to Standard Contractual Clauses or equivalent safeguards as prescribed under the DPDP Act.

9. Children's Privacy

The Platform is strictly for users aged 18 and above. We do not knowingly collect personal data of minors. Discovery of a minor's account results in immediate deletion.

10. Cookies

We use cookies and similar tracking technologies. Please refer to our Cookie Policy for details.

11. Contact & DPO

Data Protection Officer: Sandeep Kumar  |  legal@hoodex.work

You may also escalate unresolved data complaints to the Data Protection Board of India at dpboard.gov.in.