Privacy Policy
Domexa by Sipra · Last updated: 12 October 2026
Domexa ("we", "us", "our") is a marketplace app that connects clients with contractors and service professionals in India. This policy explains what personal data we collect, why, who we share it with, and the choices you have. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 of India.
1. Data we collect
| Data | Who | Why |
|---|---|---|
| Name, phone number, email address | All users | Create and secure your account, log you in, contact you about your projects |
| City / address, profile photo | All users | Show your profile, match local contractors and projects |
| Business name, business type, business address, portfolio photos | Contractors | Show your business to clients |
| KYC documents: Aadhaar, PAN, cancelled cheque, business documents | Contractors | Verify identity and business before approval. Stored in a private storage area, visible only to you and Domexa administrators |
| Projects you post, bids, chat messages, reviews and ratings | All users | Provide the marketplace service |
| Support tickets and messages | All users | Respond to your support requests |
| Basic technical data (device type, app version, error logs) | All users | Keep the app working and secure |
We do not collect your precise GPS location, contacts, call logs or SMS inbox. We do not sell your personal data.
2. How we use your data
- To create your account and verify your phone number or Google account.
- To verify contractors and keep the marketplace trustworthy.
- To let clients and contractors communicate and complete jobs.
- To prevent fraud, abuse and enforce our Terms of Service.
- To comply with legal obligations.
3. Who sees your data
- Other users: clients can see a contractor's name, photo, business details, portfolio, ratings and reviews. Contractors can see a client's name and the project details the client posts. Phone numbers and KYC documents are not shown to other users.
- Domexa administrators: can view profiles and KYC documents only to verify and moderate accounts.
- Service providers (data processors):
- Supabase: database, authentication and file storage.
- MSG91: sending and verifying one-time passwords (OTP) by SMS.
- Google: "Sign in with Google".
- Expo / EAS: app build and delivery.
- Legal: we may disclose data if required by law, court order or a government authority.
4. Storage, security and retention
- Data is encrypted in transit (HTTPS). Access to every database table is restricted by row-level security so users can read only data they are allowed to see.
- KYC documents are stored in a private bucket and opened only through short-lived signed links.
- We keep your data while your account is active. When you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep by law (for example transaction or dispute records), which are kept only as long as required.
5. Your rights
Under Indian law you may: access the data we hold about you; correct inaccurate data; withdraw consent; request deletion of your account and data; and nominate another person to exercise these rights on your behalf. You can edit most of your data in the app under Edit Profile. To delete your account, open the app and go to Profile → Delete Account, or see how to delete your account.
6. Children
Domexa is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
7. Changes to this policy
We may update this policy. If the changes are significant we will notify you in the app. The date at the top shows the latest version.
8. Contact and grievance officer
For privacy questions, data requests or complaints:
Grievance Officer: Muhammad Mustakim Sipra
Email: siprawork01@gmail.com
Address: HUMERA PARK PATHANWADI MALAD EAST MUMBAI, MAHARASHTRA, 400097 INDIA
We aim to reply within 7 days.