ENGहिं

Privacy policy

Last updated 22 Oct 2026

Last updated: 22 October 2026

HelpInfra is a construction resource platform provided by HelpInfra Buildcon Pvt. Ltd., C/O Manoj Kumar, East of Sector-8, Vijay Nagar, Sampatchak, Patna, Bihar 800026, India. This policy explains how the HelpInfra website and customer Android app handle information. FirstPrincipalAI provides technology development and operation services for HelpInfra.

Information you provide

  • Account information: mobile number, name, account identifier, language and profile or business information you choose to provide. We use a one-time password to verify access to a mobile number.

  • Listings and enquiries: machine, material or manpower details, prices, availability, owner name, contact and WhatsApp numbers, district, block, address, map location, photos and the enquiries or order requests you send.

  • Verification documents: photographs or files you submit for ownership or business verification. These may contain registration, identity or tax information. Please do not upload unrelated or unnecessary personal information.

  • Messages and support: direct messages, conversation requests, reports, blocked-user settings and information you give to HelpInfra support. Asha is a guided assistance and callback-request feature; information entered there is shared with HelpInfra staff to respond to your request.

  • Account activity: saved listings, listing views, enquiries, notification preferences and optional choices such as whether your identity can appear to a listing owner.

  • Payments made through the HelpInfra website: plan and payment status, payment-provider references and billing information. Razorpay handles its payment interface and payment credentials. HelpInfra does not ask you to send card details, a UPI PIN or an OTP to staff or in a message. The customer Android app provides access to existing subscription information; it does not offer a new paid-plan checkout.

If a staff member assists you with onboarding, they can enter your owner name, mobile number and listing details on your behalf. You do not need to share an OTP with them. You can later sign in with that same number and verify the OTP yourself. Please contact us if a listing or account was created without your authority.

Device information and permissions

We receive information necessary to operate and secure the service, such as network address, request and error information, app version and session or device identifiers. Local storage and caches remember your language, session and recently loaded information.

Location access is optional. If you permit it, we use approximate or precise location to select an area, find nearby resources or fill a listing address. You can instead select a district and block manually. We do not request background location permission.

Camera and system photo or file pickers let you choose content for a listing or document upload. We do not request general access to your contacts, call history or entire photo library. Voice search opens your device's speech-recognition service; that service handles speech under its own settings and returns recognised text to HelpInfra. HelpInfra does not itself record or store voice-search audio.

If you enable push notifications, Firebase Cloud Messaging uses an installation identifier, push token and app or device information to deliver notifications. You can change notification permission in Android settings. Service messages, messages from other users and optional promotional communications have separate purposes and controls where available.

How information is used

We use information to provide accounts and listings, search and location features, communications, verification, customer support, subscription records and security. We also use it to investigate abuse, operate and improve the service, and comply with applicable obligations. Permissions and optional communication choices can be changed, although some features need the relevant information to work.

Listing-view statistics can include aggregate activity. Your name is shown to a listing owner as a viewer only when you choose to share that identity; the setting is off by default. Turning sharing off removes existing named-view records. It does not stop ordinary anonymous or aggregate activity counts.

Who can receive information

Public listings expose the details you choose to publish. Eligible signed-in users can access provider contact details to make enquiries. Direct-message content is available to its participants and is not end-to-end encrypted. Authorised HelpInfra staff may access information needed for support and safety. Reporting a conversation can provide recent messages as evidence for a restricted, audited moderation review.

We use service providers for hosting, storage and delivery, authentication, messaging and notifications. These include Cloudflare services, Meta/WhatsApp, MSG91 and Google/Firebase for relevant enabled features. Razorpay processes website payments. Service providers may process information in countries other than India under their applicable service arrangements. If you choose an external action such as a phone call or WhatsApp order request, the selected recipient and external service receive the information needed for that action under their own terms.

Document-reading functionality can use an external document processor when enabled. It is currently disabled in the production service. We will update the notice and any required in-product disclosure before enabling a new processing purpose. Diagnostic or analytics services are used only when configured; the Android release configuration determines whether any such SDK transmits data.

Retention and deletion

You can request account deletion in the app under Profile, or use HelpInfra account deletion in a browser. We verify control of the account, normally through an OTP. The deletion screen displays the scheduled date, normally after a seven-day cancellation period. Listings are paused when the request is made. After processing starts, it cannot be cancelled. Account deletion is a process, rather than a promise that every retained record is erased on the seventh day.

The account-deletion process removes or anonymises the account profile and associated active personal data, revokes sessions and removes relevant uploaded documents and personal message data. Other participants can retain their own messages and transaction context. Separately submitted support or callback requests may need to be identified to our support team for removal because they are not always linked to an account.

Current routine retention includes:

  • Ordinary direct-message content is eligible for deletion after 12 months. Conversation requests expire after 30 days.

  • Identified listing-view records are kept for up to 90 days, and can be removed earlier by turning identity sharing off.

  • Notification inbox records are kept for 180 days and delivery records for 365 days.

  • Report evidence and private report or review text are generally kept until resolution and for 90 days after closure. Relevant evidence can remain while an investigation or legal hold is open.

  • Soft-deleted listings normally enter permanent-purge processing after a 30-day recovery window. Verification documents otherwise have routine expiry rules, normally 90 days after a decision or 180 days without a decision; account deletion separately requests their removal.

Financial receipts, accounting records, administrative audit records and records needed for a dispute, security investigation or legal obligation may be retained separately from a deleted account. These records do not currently all have a single automatic expiry period. Some legal-evidence records have a configured seven-year retention period; this is a system retention setting, not a statement that every record must be retained for seven years by law. Contact us to ask which exception applies to your information.

Backup copies are isolated from normal service use and are removed through backup rotation or controlled cleanup. Routine and manually retained release or recovery backups can have different lifetimes. Restoring a backup must also apply deletion records. We do not promise that every backup copy disappears when an account is deleted.

Your choices and security

You can edit profile information, withdraw optional permissions, change message or notification preferences, block or report users, and request access, correction or deletion through support. We may ask for reasonable proof that a request relates to your account. We use HTTPS, access controls and other safeguards; no service can guarantee absolute security. Please protect your device and OTPs.

HelpInfra is intended for construction and business use. Do not submit another person's information without authority. If you believe a child or another person has provided information without appropriate authority, contact us so we can review and remove it where appropriate.

Contact and changes

For privacy questions, access or deletion requests, contact the HelpInfra Privacy/Grievance Team at [email protected], call +91 91353 59078, or write to the registered address above. Include “HelpInfra privacy” in the subject. Do not send passwords, OTPs, full payment credentials or unnecessary identity documents.

We may update this policy when practices change. The updated date and policy will be available here. Where a change requires a new permission or consent, we will request it through the relevant feature.