Privacy Policy

Last updated: 25 July 2026

This policy explains what MalwaFix collects, why it is used, who may receive it, how long it is kept and how a person may request correction, deletion or grievance review.

1. Scope and operator

MalwaFix is a local service-booking platform operated under Kaarvo Services (the “Operator”, “MalwaFix”, “we” or “us”). This policy applies to customers, website visitors and account holders. A separate Technician Privacy Notice gives extra detail for service professionals.

This document is an operational privacy notice and should be reviewed by an Indian privacy lawyer before public commercial launch, especially after the final legal entity name, business address, grievance contact, payment model and third-party vendors are confirmed.

2. Information we collect

Customer and account information

• Name, verified Google email, saved contact number, Google account identifier, session records and account status.
• Service category, area, exact address, problem description, preferred time and booking history.
• Technician assignment, estimates, approvals, completion events, ratings, complaints and support communications.

Technician information

We may collect professional profile details, service areas, experience, local references, private identity-review documents and review results as described in the Technician Privacy Notice.

Security and technical information

We may process IP address, browser or device information, timestamps, security logs, session records and abuse-prevention signals needed to protect accounts, investigate fraud and operate the service.

3. Why we use information

• Create and secure customer accounts using Google and technician accounts using administrator-issued credentials.
• Create, assign, track and support service bookings.
• Share the minimum necessary booking information with an assigned technician.
• Review technician onboarding records, safety concerns, fraud, complaints and service quality.
• Maintain records required for disputes, legal compliance, security and business administration.
• Send essential booking and account communications. Promotional messages require a separate lawful choice where applicable.

4. Technician identity documents

MalwaFix does not ask customers for Aadhaar. Technician onboarding is handled directly by MalwaFix. When an identity or reference document is required, it is collected and reviewed privately through an approved offline or administrator-controlled process.

• Accepted routes include Aadhaar card, Voter ID, driving licence and passport images.
• Identity files are stored privately and are not shown on public profiles.
• Do not submit an Aadhaar OTP, biometrics, VID, XML share code or password.
• The manual document review is not UIDAI authentication.

5. Who receives information

• Assigned technicians: only the booking information reasonably required to visit and perform the requested service.
• Service providers: hosting, database, private-file storage, identity, security and support providers under appropriate contractual and security controls.
• Authorised MalwaFix personnel: role-limited access for operations, complaint handling and technician review.
• Authorities or advisers: when required by law, necessary to protect rights and safety, or needed for a legal claim.

We do not sell personal data. Exact customer addresses and private technician identity files must not be published.

6. Current retention schedule

These periods must be implemented in the database and private-file cleanup process. A deletion date stored in the database does not itself remove an R2 object.

7. Security

MalwaFix uses role-based access, HTTPS, non-public object storage, hashed session tokens, audit logs, file type and size restrictions, and Cloudflare Access protection for admin routes. No online service is risk-free. Access should be removed promptly when a reviewer no longer needs it, and sensitive-file access should be periodically reviewed.

8. Your choices and rights

Subject to applicable law, a person may request a summary of personal data being processed, correction, completion, updating, erasure, withdrawal of consent for optional processing, grievance review and nomination of another person to exercise rights where legally available. Some data may be retained when necessary for an unresolved booking, complaint, fraud investigation or legal obligation.

Use the data request and deletion page or contact the grievance channel below. We may verify the request through the account mobile number or another proportionate method before acting.

9. Children

Home-service bookings are intended to be placed by adults. A person under 18 should use MalwaFix only through a parent or legal guardian. Technician registration is limited to adults aged 18 or older.

10. Security incidents

If a personal-data breach creates a legal notification duty, MalwaFix will take reasonable steps to contain it, preserve evidence and provide required notices to affected persons and the competent authority.

11. Contact and grievance