Technician Privacy & Identity Notice

Last updated: 28 July 2026

A private government-ID review is required before technician approval. Aadhaar, Voter ID, driving licence and passport images are accepted.

1. Required identity review

MalwaFix requires an accepted government-ID review before a technician profile can be approved. This helps reduce impersonation and supports complaint handling. It does not guarantee approval, future conduct or workmanship.

A technician may use an Aadhaar card image, Voter ID, driving licence or passport. The application remains pending until an identity image is received and the provider agreement is accepted.

2. Information collected

• Phone number, legal name, age confirmation and account records.
• Primary service, experience, service areas, languages, work description and local reference.
• Chosen identity route, private image, review status, reviewer note and audit history.
• Optional address, police, skill or work-evidence documents.
• Agreement version, acceptance timestamp and basic browser information.
• Complaint, suspension, fraud-prevention and service-quality records.

3. Aadhaar image

• Provide verification documents directly to an authorised MalwaFix administrator only when requested during offline onboarding.
• Do not type the Aadhaar number in a form, file name, message or support chat.
• Do not provide biometrics, an Aadhaar OTP, VID, XML share code or password.
• This is an offline manual review by authorised MalwaFix administrators, not UIDAI authentication.

4. File types and storage

Identity uploads accept JPG, JPEG or PNG images up to 5 MB. Files are stored in a private R2 bucket using generated object names. They are not placed on public technician profiles or returned through public URLs.

5. Why the information is used

• Match the application to the person and account.
• Review eligibility, detect duplicate or suspicious applications and prevent fraud.
• Support assignment, complaint handling, safety review and legal claims.
• Maintain a record of what was checked, when and by whom.

6. Access controls

Private documents should be accessible only to authorised reviewers protected by Cloudflare Access. Each private-document view and review action should be logged. Technicians cannot retrieve another technician’s file.

7. Retention and deletion

Rejected identity files are targeted for deletion within 7 days of review and verified identity files within 30 days, unless an active dispute, fraud investigation or legal obligation requires longer preservation. Verification results and audit records may be retained for up to 3 years after offboarding or final complaint closure. MalwaFix must run the private-file cleanup endpoint or scheduled process; a database deletion date alone does not remove the object.

8. Consent, alternatives and rights

A technician may request correction or deletion and may use an accepted alternative identity document instead of Aadhaar. Identity review remains a condition of approval, so withdrawing all identity-review permission may prevent approval or continued activation. Requests remain subject to legal, fraud and dispute-retention needs.

9. Contact