Privacy Policy

Last Updated: November 11, 2025
Effective Date: November 11, 2025

1. Introduction

Welcome to Innfill ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to all users of Innfill, including freelancers, clients, and administrators.

By using Innfill, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Jurisdiction and Compliance

Innfill operates primarily in India and is subject to Indian laws, including:

• Digital Personal Data Protection Act (DPDP Act), 2023
• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

This Privacy Policy is designed to comply with these Indian data protection regulations.

3. Information We Collect

3.1 Personal Information

We collect the following personal information when you register and use our platform:

For All Users:

• Full name
• Email address
• Username
• Password (encrypted and hashed)
• Profile photo (optional)
• Bio/description (optional)
• Location information
• Account creation date and activity logs

For Freelancers:

• Skills and expertise
• Hourly rate and service pricing
• Portfolio items and work samples
• Bank account details for payments:
  • Bank account number
  • IFSC code
  • Account holder name
  • PAN number (for tax compliance)
• Service offerings and descriptions
• Reviews and ratings received
• Earnings and transaction history

For Clients:

• Company name (if applicable)
• Payment transaction history
• Order details and service requests
• Reviews and ratings given
• GST number (if applicable)

3.2 Automatically Collected Information

We automatically collect certain information when you use our platform:

• Device information (browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Session information

Note: We do NOT currently collect IP addresses or use tracking cookies/analytics tools.

3.3 Communication Data

• Messages exchanged through our chat system
• Email communications with support
• Order-related communications
• Dispute resolution correspondence

3.4 Payment Information

We use Razorpay as our third-party payment processor. We do NOT store:

• Credit/debit card numbers
• CVV codes
• Card expiration dates

We only store:

• Razorpay payment IDs
• Razorpay order IDs
• Transaction amounts and dates
• Payment status
• Refund information

4. How We Use Your Information

4.1 Platform Functionality

• Creating and managing user accounts
• Facilitating service transactions between freelancers and clients
• Processing payments and refunds
• Enabling communication through our chat system
• Managing orders and service delivery

4.2 Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features and services
• Debugging and fixing technical issues

4.3 Security and Fraud Prevention

• Verifying user identity
• Detecting and preventing fraudulent activities
• Securing financial transactions
• Protecting against unauthorized access

4.4 Legal Compliance

• Complying with tax regulations (GST, income tax)
• Responding to legal requests and court orders
• Enforcing our Terms of Service
• Resolving disputes and conflicts

4.5 Communication

• Sending transactional emails (order confirmations, payment receipts)
• Providing customer support
• Notifying users of platform updates (with consent)
• Sending important security alerts

5. How We Share Your Information

5.1 With Other Users

Publicly Visible Information:

• Username, profile photo, bio
• Freelancer skills, rates, and portfolio
• Reviews and ratings
• Service offerings

Shared After Transaction:

• Contact information shared between freelancer and client for service delivery
• Order details and requirements
• Chat messages

5.2 With Third-Party Service Providers

Payment Processing:

• Razorpay - For payment processing, refunds, and transfers
• Information shared: Transaction amounts, user IDs, bank details for payouts

Infrastructure and Hosting:

• Supabase - Database, authentication, and file storage
• Information shared: All user data, encrypted passwords, file uploads
• Vercel - Application hosting and deployment
• Information shared: Usage logs, performance data

Note: All third-party providers are contractually obligated to maintain data security and confidentiality.

5.3 Legal Requirements

We may disclose your information when required by law:

• In response to court orders, subpoenas, or legal processes
• To comply with tax and regulatory obligations
• To protect our rights, property, or safety
• To investigate fraud or security incidents
• To enforce our Terms of Service

6. Data Storage and Security

6.1 Where We Store Your Data

Your data is stored on:

• Supabase (PostgreSQL database) - Cloud infrastructure
• Vercel (Next.js application) - Cloud hosting
• Geographic location: Data centers may be located outside India

6.2 Data Retention

Current Policy: Data is retained indefinitely for platform functionality.

Note: We do NOT currently offer account deletion functionality. Once implemented, data will be handled according to user deletion requests subject to legal retention requirements.

6.3 Security Measures

Technical Safeguards:

• HTTPS encryption for all data transmission
• Password hashing using Supabase authentication
• Row-Level Security (RLS) policies on database
• Payment signature verification (Razorpay)
• Secure environment variable management
• Regular security updates and patches

Operational Safeguards:

• Access controls and authentication requirements
• Secure payment processing through certified gateway
• Regular monitoring for suspicious activities
• Incident response procedures

7. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

7.1 Right to Access

• You can view your profile information at any time
• Request a copy of your personal data by contacting support@innfill.in

7.2 Right to Correction

• Update your profile information through account settings
• Contact us to correct inaccuracies in your data

7.3 Right to Data Portability

• Request your data in a machine-readable format
• Contact support@innfill.in for data export requests

7.4 Right to Erasure

Currently Not Available: Account deletion functionality is not yet implemented. Once available, you can request complete account deletion. Note: Some data may be retained for legal/tax compliance purposes.

7.5 Right to Grievance Redressal

• Contact our Grievance Officer at support@innfill.in
• We will respond to grievances within 30 days

8. Cookies and Tracking

Current Status: We do NOT currently use cookies or tracking technologies.

Future Implementation: If we implement analytics tools (such as Google Analytics) or use cookies in the future:

• We will update this Privacy Policy
• Users will be notified of the changes
• Cookie consent mechanism will be implemented as required by law

9. Children's Privacy

Innfill is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@innfill.in, and we will delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Legal or regulatory requirements
• New features or services

Notification of Changes:

• Updated "Last Updated" date at the top of this policy
• Email notification for significant changes (if user has opted in)
• Prominent notice on the platform

11. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal information:

We will respond to your inquiry within 7 business days.

12. Consent

By using Innfill, you consent to:

• The collection and use of your information as described in this Privacy Policy
• The transfer of data to third-party service providers
• The storage of data on cloud infrastructure
• Communications from us regarding your account and transactions