Privacy Policy

When you book a service with Rovala, we collect the information you provide so we can perform and update the booking:

• Your name
• Your mobile number (stored in the normalized form 91XXXXXXXXXX)
• The service address you provide
• Booking details: services booked, preferred date and time, and any problem description you add
• Your review, if you choose to leave one after a completed service

We do not collect or require account passwords for bookings. If you sign in with an OTP, a short-lived verification code is used and stored only in hashed form with a short expiry.

• To schedule, perform and update your booked service
• To let you track your booking status and view your invoices
• To respond to questions about your booking
• To show your published review (name and locality only) if you leave one
• To meet legal obligations (for example, invoice record-keeping)

We do not sell your personal information. We do not use your details for marketing to third parties, and we will not add marketing communication to your phone number without a separate opt-in.

The Digital Personal Data Protection Act, 2023 (DPDP) and its rules progressively apply to data processed in India. We treat you as the “data principal”: you can ask us to access, correct, or erase your personal data, and to grievance-resolution on your requests. Substantive compliance deadlines for businesses begin in 2027; we are building our practices now to meet them.

To make a request, contact us using the details on the contact page and refer to your booking reference.

We keep booking and invoice data as long as needed for the service relationship and legal record-keeping, then delete or anonymize it. Your phone number is masked in logs and never shown publicly. Access to customer data is restricted to staff who need it for your booking.

Verification codes (OTP) are stored only as hashes, expire quickly, and have limited attempts. Access tokens for booking receipts are stored only as hashes.

Our hosting and infrastructure providers process data on our behalf under contract. We do not add analytics or advertising services that receive your personal information. If we later enable notification channels such as email, SMS or WhatsApp, they will be described here first.

We may update this policy as the service evolves. Material changes will be posted on this page with an updated date. This policy is subject to final legal review by the business owner before launch.