Privacy Policy

FindWorker is a verified home-services marketplace operated in Islamabad, Pakistan by Tectonix. We connect customers needing household services (AC repair, plumbing, electrical, and more) with CNIC-verified, GPS-tracked workers.

For the purposes of this Policy, "we", "us", and "FindWorker" refer to the platform operator. "You" refers to anyone using the site, the app, or our services — whether as a customer, a worker, or simply a visitor.

We collect only the data we need to operate the platform safely and accountably. This breaks into five categories:

2.1 Account data

• Phone number — used for OTP login. We never use passwords.
• Name — first name shown to the matched worker; full name only used internally for KYC.
• Profile photo — optional for customers, mandatory for workers (face-match selfie).
• Saved addresses — for booking convenience; you can delete any saved address at any time.
• Email address — optional for customers; used only for receipts and dispute correspondence if you provide one.

2.2 Worker verification data (workers only)

• CNIC (Computerised National Identity Card) — front and back images are required for KYC. Stored encrypted at rest. Visible to admin staff only, never to customers.
• Face-match selfie — taken in-app and compared against the CNIC photo. Used for fraud prevention.
• Date of birth — derived from CNIC; used to enforce the 18+ requirement.

2.3 Location data

• Customer location — collected only when you place a booking, used to dispatch the nearest verified worker. You can also use a saved address instead of live location.
• Worker location — once a worker accepts a job, GPS pings every 10 seconds from "Heading to Customer" until job completion. Workers cannot go online without granting always-on GPS permission. While online but not on a job, location updates every 60 seconds for dispatch calculations.
• GPS history — retained for 90 days for dispute resolution and safety review, then automatically deleted.

2.4 Payment data

• Payment method preference — cash on completion, JazzCash, or Easypaisa.
• Transaction records — amounts, dates, services. Retained as required by Pakistani tax and accounting law.
• We never store full card or wallet credentials. Online payments are tokenised by our payment processors (JazzCash, Easypaisa). Card payments arrive in Phase 2 and will use a PCI-DSS-compliant processor.

2.5 Communication data

• In-app chat — between customer and worker for the duration of a job. Open from offer acceptance to 24 hours after job close, then read-only archive. Retained for 90 days.
• Masked phone calls — call duration only is logged. Call content is never recorded. Masked numbers prevent direct phone exchange.
• Real phone numbers are never revealed between customers and workers, by design.

2.6 Device data

• Device fingerprint — used to detect fraud (e.g. the same device used for two accounts triggers an admin alert).
• App version, OS, language — for debugging and feature compatibility.

We use your data only for the following purposes:

• Matching customers with verified workers based on category, location, and quality scores.
• Live tracking of a worker's progress to your address.
• Identity verification for workers (CNIC + face match + admin review).
• Payment processing via cash confirmation, JazzCash, or Easypaisa.
• Fraud prevention — duplicate-account detection, GPS-mocking detection, mismatch alerts.
• Dispute resolution — admin review of GPS history, chat transcripts, and photos when a dispute is filed within 24 hours.
• Customer support over WhatsApp, in-app chat, and email.
• Service improvement — anonymised analytics on dispatch performance, common issues, and zone coverage.
• Legal and tax compliance — providing earnings statements to workers (PDF, FBR-ready) and meeting any tax-record retention requirements.

We do not sell your personal data. We do not use your data for behavioural advertising. We do not share CNIC images, face photos, or GPS history with third parties for marketing.

Limited sharing happens only when needed to operate the service:

4.1 Between customer and worker

• The matched worker sees your first name, booking address, the job description, and any photo you attached. They do not see your phone number, full name, or other addresses.
• Customers see the worker's first name and surname initial, their tier badge, rating, jobs completed, and masked profile photo. CNIC details are never shown to customers.

4.2 Service providers

We use a small number of third-party services to operate the platform. They each receive only the data needed to perform their function:

• Supabase — managed Postgres database and authentication. Hosts account, booking, and message data.
• JazzCash, Easypaisa — payment processing for online payments. They receive transaction details required to process payments.
• SMS / OTP gateway — for delivering one-time login codes to your phone.
• WhatsApp Business — when you contact us via wa.me, your message and phone number are processed by Meta in line with WhatsApp's own terms.

4.3 Legal disclosures

We may disclose data when legally compelled by Pakistani law enforcement (FIA, police) presenting a valid request. We disclose only the minimum data required, and we log every such request internally.

4.4 Disputes

When you file a dispute, the admin team reviews GPS history, chat transcripts, and photos relevant to that booking only. The reviewing admin is identified in the audit log.

• Account data — for the lifetime of your account; deleted on request.
• CNIC + face-match images (workers) — for the lifetime of the worker account, then deleted within 30 days of account closure.
• GPS history — 90 days, then automatically deleted.
• Chat transcripts — 90 days from job close.
• Masked-call duration logs — 90 days.
• Transaction records — retained as required by Pakistani tax and accounting law (typically 6 years for FBR records).
• Dispute decisions — retained for the lifetime of the relevant accounts to inform future patterns.

You can exercise the following rights at any time:

• Access — request a copy of the personal data we hold about you.
• Correction — fix any inaccurate data (most fields are editable in-app).
• Deletion — delete your account and your personal data. We honour the request within 30 days, except for data we are legally required to keep (transaction records).
• Export — download your data (account info, bookings, earnings statements for workers) as a portable file.
• Withdraw consent — for workers, withdrawing GPS consent immediately ends your ability to take new jobs but does not delete prior records.
• Lodge a complaint — you can file a complaint with us first via hello@findworker.pk; if unsatisfied, you may escalate to relevant Pakistani consumer-protection authorities.

• Encryption in transit — all communication between your device and our servers uses TLS 1.2+.
• Encryption at rest — CNIC images and face-match photos are encrypted in object storage. Database is encrypted at rest.
• Access control — admin access to sensitive data (CNIC images, GPS history) is logged with the admin's identity, the record viewed, and the timestamp.
• Worker GPS-mocking detection — workers detected using fake-GPS apps are immediately suspended pending admin review.
• No password authentication — we use phone-OTP only, removing the most common cause of credential theft.

The marketing website uses minimal cookies, only for essential functionality:

• Functional cookies — language preference (EN / UR), session.
• Analytics — we may add privacy-respecting analytics (e.g. Plausible) to count page views without tracking individuals. We do not use Google Analytics, Facebook Pixel, or any other behavioural-advertising trackers on the marketing site.

The mobile apps do not use third-party advertising SDKs of any kind.

FindWorker is not intended for users under 18. Worker accounts are blocked at signup if the CNIC indicates the holder is under 18. Customer accounts have an 18+ self-declaration. If we learn we have collected data on a person under 18, we will delete that data within 7 days.

Your data is processed primarily in Pakistan. Some service providers (e.g. Supabase) may store data on infrastructure in the United States or European Union. Where this occurs, we ensure the provider has appropriate safeguards in place (encryption, contractual data-protection commitments).

If we make material changes to this Policy, we will notify you in-app and via the email / phone number on file at least 30 days before the change takes effect. Minor edits (typos, clarifications) are deployed immediately and reflected in the "Last updated" date at the top of this page.

If you have any questions, complaints, or requests about this Policy or your personal data:

• Email: hello@findworker.pk
• WhatsApp: +92 315 9773003
• Address: Tectonix, Islamabad, Pakistan

We aim to respond to every privacy request within 7 working days, and complete account-deletion requests within 30 days.