Legal
Privacy Policy
Last Updated: March 2, 2026
lazySantara ("we," "us," or "our") operates a trust-first marketplace for real-world tasks where people post tasks, accept work, and earn money (the "Services"). We are committed to protecting your privacy and being transparent about how we handle your information. We do not sell your personal information and we do not use your data for third-party targeted advertising.
1. Scope
This Privacy Policy applies to lazySantara's mobile apps, websites, and any related services that link to it. It covers information collected from you, from your devices, and from our service providers.
2. Information We Collect
Account & Identity
Phone Number. Required for account creation and verification via one-time password (OTP). Your phone number is stored in E.164 international format.
Profile Information. Full name, display name, city, state, pincode, bio, avatar image, preferred roles (poster and/or worker), and skills you add to your profile.
Identity Verification. To build trust, we offer optional selfie verification. If you choose to verify, we capture a photo via your device camera and store it securely. Your verification status is tracked (unverified, phone verified, selfie submitted, verified).
Task & Work Data
Tasks. When you post a task, we collect the title, description, category, location details (address text, city, state, pincode, and geographic coordinates), budget, estimated duration, deadline, and any tags you add.
Applications. When you apply for a task, we collect your cover message, proposed amount, and estimated completion time.
Proof of Completion. Workers submit photos (up to 5), GPS coordinates (latitude, longitude, accuracy), and notes when completing a task. This helps posters verify that work was done at the right location.
Reviews. Ratings (1-5 stars) and optional comments left by both parties after task completion.
Messages
Private messages exchanged between a task poster and assigned worker are stored to facilitate communication. We store message content, attachments, sender identity, and timestamps.
Payment Information
Payments are processed by Razorpay, our third-party payment provider. We do not store your credit card numbers, bank account details, or UPI credentials. We store limited payment metadata: order IDs, transaction IDs, amounts, commission rates, and payment status for escrow management and audit purposes.
Location Data
Profile Location. City, state, and pincode you provide during onboarding, along with geographic coordinates derived from your address, used to match you with nearby tasks.
Proof-of-Completion GPS. When you submit proof that a task is done, your device's GPS coordinates are captured (with your browser's permission) to verify you were at the task location. This is a one-time capture per submission, not continuous tracking.
Device & Usage Data
We automatically collect device type, operating system, browser type, app version, IP address, and general interaction data (pages visited, features used) to operate, secure, and improve the Services.
Waitlist Data
If you sign up for our waitlist before launch, we collect your email address, interest type (posting, picking, or both), preferred task types, city, and any message you include.
3. How We Use Your Information
We use information to:
- Provide the Services — account creation, task posting and matching, applications, messaging, payments, proof verification, and reviews.
- Verify identity — phone OTP verification and optional selfie verification to build trust between users.
- Process payments — escrow holds, releases, refunds, commission calculation, and payout to workers via Razorpay.
- Content moderation — AI-powered review of task content for safety, fraud, and policy compliance, with human moderator escalation when needed.
- Dispute resolution — investigating disputes between posters and workers, including AI-assisted triage and human review.
- Location matching — showing workers relevant nearby tasks within their preferred radius.
- Notifications — alerts about task updates, applications, payments, messages, and account activity.
- Security & fraud prevention — protecting accounts, detecting abuse, and enforcing our Terms of Service.
- Analytics & improvement — using aggregated, de-identified data to understand usage patterns and improve the platform.
- Legal compliance — responding to lawful requests and meeting regulatory obligations.
4. AI-Powered Features
lazySantara uses AI to help keep the platform safe and fair:
- Content Moderation. Task listings are reviewed by AI to assess risk level and flag potentially unsafe, fraudulent, or policy-violating content. Tasks may be auto-approved, flagged for human review, or rejected.
- Dispute Triage. When a dispute is raised, AI may analyze the evidence, task history, and messages to suggest a resolution. A human moderator makes the final decision.
We do not use your personal data to train third-party AI models. AI processing is performed to deliver features you use within the Services.
5. How We Share Information
We share information only as follows:
- With other users. Your public profile (name, avatar, ratings, reviews, verification status) is visible to other users. Task details are visible to potential workers. Messages are shared between poster and assigned worker.
- Payment processor (Razorpay). Transaction details necessary to process payments, escrow holds, releases, and payouts.
- Infrastructure provider (Supabase). Our database, authentication, and file storage provider. Data is processed according to their data processing agreement.
- Legal & safety. To comply with applicable law, respond to legal process, protect rights and safety, or enforce our Terms.
- Corporate transactions. If lazySantara undergoes a merger, acquisition, or asset sale, data may transfer under this Policy.
- With your consent. When you explicitly choose to share information (e.g., connecting an integration or sharing a task link).
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
6. Data Storage & Security
Your data is stored on Supabase (powered by PostgreSQL) with encryption in transit and at rest. Files (selfies, proof photos, avatars) are stored in Supabase Storage with access controls. API keys are hashed before storage; only key prefixes are retained for identification.
We implement row-level security policies, role-based access controls, input validation, and rate limiting to protect your data. Payment processing is handled entirely by Razorpay, which maintains PCI-DSS compliance — we never store your card or bank details.
No method of transmission or storage is 100% secure. If you discover a vulnerability, please contact us at the address below.
7. Data Retention
- Account data. Retained while your account is active. Deleted when you request account deletion (cascading to associated data).
- Task & transaction history. Retained for the duration of your account for your records and to support dispute resolution.
- Payment ledger. Maintained as an immutable audit trail for financial compliance and is retained even after account deletion where required by law.
- Dispute records. Retained for legal and audit purposes even after resolution.
- Messages. Retained while your account is active. Deleted with your account.
- Proof photos & GPS. Retained as part of the task record for verification and dispute purposes.
8. Your Controls & Rights
You can:
- Access & update your profile information at any time through Settings.
- Delete your account through Settings or by contacting us. This deletes your personal data except where retention is required for legal, financial audit, or safety reasons.
- Control location access — grant or revoke GPS permissions in your browser/device settings at any time.
- Control camera access — grant or revoke camera permissions for selfie verification in your browser/device settings.
- Manage notifications — control which notifications you receive in your account settings.
- Revoke API keys — if you use API access, you can revoke keys at any time.
Depending on your jurisdiction, you may have additional rights including the right to access, correct, delete, port your data, and opt out of certain processing. To exercise these rights, contact us using the information below.
9. Camera, Location & Device Permissions
lazySantara requests device permissions only when needed for specific features:
- Camera. Used only for selfie verification during onboarding. We request front-facing camera access, capture a single photo, and compress it for storage. No video recording, no background access.
- Geolocation. Used only when submitting proof of task completion. We request high-accuracy GPS once per submission. We do not track your location continuously or in the background.
Both permissions are requested through your browser's standard permission dialogs. You can revoke them at any time in your browser or device settings.
10. Children's Privacy
lazySantara is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us for deletion.
11. Third-Party Services
The Services may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We encourage you to review those policies before sharing your information.
| Provider | Purpose | Data Shared |
|---|---|---|
| Razorpay | Payment processing, escrow, payouts | Transaction amounts, phone number, order metadata |
| Supabase | Database, auth, file storage | All user data (processed per our instructions) |
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post updates with a new "Last Updated" date at the top. For material changes, we will notify you via the Services or through other reasonable means.
13. Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise your privacy rights, contact us at:
lazySantara
Email: lazysantara.help@gmail.com