Privacy Policy

Last updated: December 2025

1. Introduction

Quko ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

2. Information We Collect

2.1 Personal Information

• Google Account Data: When you sign in with Google, we collect your name, email address, and profile picture to create and manage your account.
• Account Information: Name, email address, phone number, password (for non-Google sign-ups).
• Storefront Information: Name, address, category, description, photos.
• Location Data: We collect your location (city, district, state, pincode, and GPS coordinates with your consent) to help you discover and connect with nearby service professionals in your area.

2.2 Identity Verification Documents

For service providers, we collect government-issued identification documents to verify identity:

• Government ID: Identity Card (such as Driving License or Passport) — front and back images.
• Live Selfie: A timestamped photograph for facial verification.

2.3 Usage Information

• Device information (browser type, IP address, device type).
• Usage patterns and preferences.
• Search queries and browsing history on our platform.

2.4 Financial Data

For freelancers using our Work Manager feature, we store transaction titles and amounts to help you track profit and loss for your work. This data is stored securely and is only accessible by you.

3. How We Use Your Information

• To provide and maintain our services.
• To facilitate connections between customers and local freelancers.
• To verify your identity and prevent fraud.
• To connect customers with verified service providers.
• To process payments and subscriptions.
• To send important notifications about your account.
• To improve our platform and user experience.
• To comply with legal obligations.

Email Privacy: Your account email is kept private and used only for security, authentication, and essential account-related communications. We will never share your email publicly.

4. Data Storage and Security

• Encryption: All sensitive data is encrypted at rest (256-bit AES) and in transit (TLS 1.3).
• Secure Storage: Identity documents are stored in private, encrypted buckets with access controls.
• Access Control: Only authorized personnel can access verification documents, with all access logged for audit.
• No Third-Party Sharing: We do not sell or share your personal data with third parties for marketing purposes.

4.1 Document Retention Policy

We follow a tiered document retention policy for identity verification documents:

• Active Period (0–90 days): Documents are accessible for verification review and any immediate follow-up requirements.
• Archive Period (90 days – 2 years): Documents are moved to secure archive storage with restricted access. Only accessed for emergency cases such as fraud investigation, legal disputes, or safety concerns. All emergency access is logged for audit purposes.
• Permanent Deletion (after 2 years): Documents are permanently and irrecoverably deleted from all systems.

Note: Account data (name, email, verification status) is retained until you delete your account. Only identity documents follow this retention schedule.

5. Your Rights Under DPDP Act 2023

As a data principal, you have the right to:

• Access: Request a summary of your personal data and how it's being processed.
• Correction: Request correction or completion of inaccurate personal data.
• Erasure: Request deletion of your personal data (subject to legal requirements).
• Grievance Redressal: Lodge complaints about data processing.
• Nominate: Nominate another person to exercise your rights in case of death or incapacity.
• Data Deletion: You can permanently delete your account and all associated data at any time through your Account Settings. This action is irreversible and will remove all your personal information from our systems.

6. Data Sharing

We do not sell your personal data. We may share your information only in the following circumstances:

• Message-Initiated Sharing: Your contact information is only shared with a service provider once you initiate a conversation with them through our messaging system.
• With Your Consent: When you explicitly agree to share information.
• Service Providers: With trusted vendors who assist in platform operations (bound by confidentiality).
• Legal Requirements: When required by law, court order, or government request.
• Business Transfer: In case of merger, acquisition, or sale of assets.

7. Cookies and Tracking

We use essential cookies for platform functionality, authentication, and session management. We do not use third-party tracking cookies for advertising purposes.

8. Children's Privacy

Our platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification.

10. Contact Us

For privacy-related queries or to exercise your rights, please contact us at: