MachineBulao Privacy Policy

Effective and last updated: 5 October 2026

This Privacy Policy explains how MachineBulao ("MachineBulao", "we", "our", or "us"), the developer and operator of the MachineBulao mobile and web application, collects, uses, shares, protects, retains, and deletes personal and sensitive user data. It applies to customers, machine owners or suppliers, and operators or drivers who use MachineBulao.

1. Data we collect

• Account and contact information: name, mobile number, email address when provided, account role, profile photo, delivery or work-site address, and saved addresses.
• Identity and business verification: owners and operators may provide Aadhaar, PAN, GST, driving-licence, vehicle-registration, banking, or similar verification details and document images. We use these only for onboarding, verification, payments, fraud prevention, and legal compliance.
• Location data: approximate and precise location when you use location-based search, maps, delivery, machine dispatch, active navigation, arrival confirmation, or live trip tracking. The Android app does not request the restricted background-location permission. During an operator's active trip, Android may display a persistent foreground-service notification while navigation or live trip tracking is running.
• Booking, order, and transaction data: machine bookings, material orders, schedules, addresses, work status, invoices, payment status, Razorpay transaction references, refunds, cancellations, and support history. MachineBulao does not store complete card, bank-account login, or UPI PIN credentials entered in Razorpay.
• User content: listing images, verification documents, work attachments, chat messages, reviews, complaints, and support submissions.
• Device and technical data: Firebase identifiers, push-notification token, device or app version, IP address and security logs, crash or diagnostic information, and basic usage events needed to operate and secure the service.

2. How we use data

We use data to create and secure accounts; authenticate users with Firebase phone verification; show nearby machines, materials, routes, and live trip progress; connect customers with relevant owners, suppliers, operators, and drivers; process bookings, orders, invoices, payments, refunds, notifications, and support; verify providers and equipment; prevent fraud and misuse; meet legal, tax, accounting, and safety obligations; and improve the reliability of the service.

3. Location use and controls

Location permission is requested in context, when a location-based feature is used. Customers may use location for nearby search, site selection, order tracking, and maps. Operators or drivers may use it for navigation, dispatch, arrival confirmation, and live tracking during an accepted job. You can deny or revoke location access in Android settings, although location-dependent features may then be unavailable. We do not use location data for advertising.

4. When data is shared

We share only the data needed for the service:

• with the customer, owner or supplier, and assigned operator or driver participating in the same booking or order;
• with service providers acting for us, including Google Firebase (authentication, notifications, and realtime services), Google Maps Platform (maps, routes, and navigation), Razorpay (payment processing), and our hosting, storage, security, communication, and support providers;
• with professional advisers, payment or banking partners, government authorities, or law enforcement where required by law, safety, fraud prevention, dispute resolution, or enforcement of our terms; and
• as part of a business reorganisation, subject to appropriate safeguards and notice where legally required.

We do not sell personal or sensitive user data.

5. Security

We use access controls, authenticated APIs, role-based restrictions, and encrypted network connections where supported to protect data. Sensitive verification documents are restricted to authorised workflows. No online service can guarantee absolute security, so users should protect their device, OTPs, and account access.

6. Retention and deletion

We keep account and operational data only while it is needed to provide the service, resolve disputes, prevent fraud, and meet legal, tax, accounting, and regulatory obligations. When data is no longer required, we delete it or anonymise it. Some booking, invoice, payment, refund, or compliance records may be retained for the period required by applicable law even after account deletion.

You may request deletion of your account and associated personal data through our Account Deletion page or by emailing support@machinebulao.com. We may verify that the request comes from the account holder before completing it.

7. Your choices and rights

You may update certain profile details in the app, control device permissions and notifications in Android settings, and ask to access, correct, or delete personal data by contacting us. Rights and exceptions vary by applicable law.

8. Children

MachineBulao is a construction-services marketplace and is not directed to children. Users must be legally capable of entering into service transactions in their jurisdiction.

9. Policy changes

We may update this policy when our services, legal obligations, or data practices change. The revised effective date will appear at the top of this page. Material changes may also be communicated in the app or by another appropriate method.

10. Contact

For privacy questions, data requests, or complaints, contact the MachineBulao privacy team at support@machinebulao.com.