Legal
Privacy Policy
How Constroo collects, uses, stores, shares, and protects personal information across this website and the Constroo applications for iOS and Android.
Last updated: 12 October 2026
This policy describes the personal information handled by Constroo as part of its public website and its mobile applications for iOS and Android. It is written to be specific about what the product actually does today, including where something is not yet implemented.
Where a detail has not been established — for example a retention period, or the registered identity of the organisation operating the service — this policy says so plainly rather than filling the gap with an assumption. Items marked Requires confirmation are pending internal or legal verification.
Scope of this policy
This policy applies to Constroo, of Pune / PCMC, Maharashtra, India, and covers:
- this website, which is informational and marketing only;
- the Constroo customer application for iOS and Android;
- the Constroo partner application, used by equipment suppliers and service businesses that list their offerings.
It does not apply to the separate internal operations console used by Constroo’s staff, which is not publicly accessible.
Requires confirmation
Information you provide
Depending on how you use the service, Constroo collects:
- Identity and contact. Full name, mobile number, and email address. If you sign in with a third-party account, the name and email associated with that account may be used to populate your profile.
- Profile details. The role you work in, your employment mode, whether you are looking to procure equipment, labour, or both, and any free-text description you choose to write about your work.
- Location you operate in. The city, state, and locality of your operating area.
- Organisation and GST details. If you provide a GST identification number, Constroo retrieves and stores the registration record returned by the GST registry, which can include the organisation’s legal and trade name, registration status and dates, taxpayer classification, nature of business, and registered address details including a pincode.
- Booking details. For each booking request: the site address and city, a site contact name and phone number, the start date, and what was requested.
- Equipment photographs. Partners may upload photographs of the machinery they list. These are business imagery rather than personal data.
- Worker names and phone numbers. Partners record the names and phone numbers of individual workers on their daily muster roll so that attendance and wages can be tracked against a work requirement.
Requires confirmation
Accounts and authentication
Accounts are created when you sign in. Constroo supports three sign-in methods in its customer application:
- Mobile number with a one-time password. Your number is submitted to an SMS provider, which sends the code to you. Constroo does not set or store a password for this method.
- Google Sign-In. An identity token is exchanged with Google and your profile identifier is linked to your Constroo account.
- Apple Sign-In. Available on iOS, where you may choose to share your name and email. The name you provide is saved to your profile once, at first sign-in.
If you sign in with a mobile number, Constroo creates a technical placeholder email address in its own reserved domain so that the account system has a unique key. That placeholder is not a real mailbox and is not exposed to you as a contact address.
You may link an additional sign-in method to an existing account. Constroo does not currently offer in-app password setting, password recovery by email, or self-service deletion of your account — see section 14.
Requires confirmation
Information collected automatically
When you use the applications, certain records are created as a necessary part of operating the service. These are not optional:
- Account records linking your profile to the sign-in method you used.
- Records of actions you take, such as booking requests you create, accept, or decline, and when. Changes to a booking’s status are recorded with who made the change.
- Partner records: business name, service area, and the capabilities a partner declares they can supply.
- Daily work records submitted by partners for labour engagements, including attendance, shift codes, and derived wage amounts.
Constroo does not currently collect behavioural or advertising data about your use of the applications.
Device and diagnostic information
The customer application requests only the operating location permission (see section 6). It does not request camera, contacts, microphone, phone-state, photo library, or notification permissions.
Our hosting and backend providers may keep standard technical records — for example IP address, request time, and error logs — as part of delivering and securing the service.
Requires confirmation
Location information
Location access is opt-in and one-off. It is requested only when you tap “Use my current location”, and only to fill in the city, state, and locality of your operating area. Manual entry is always available instead.
Specifically, Constroo does not:
- request background or continuous location access;
- track your location in the background;
- store precise coordinates on your profile. Your coordinates are used transiently to determine your city and state, then discarded.
Place-name search is provided by a third-party location service that receives the text you type. Coordinates returned by that service are likewise discarded rather than stored.
Requires confirmation
Bookings and service requests
When you request a booking, Constroo records the site address and city, a site contact name and phone number, the start date, and what you have asked for.
The site contact name and phone number are the designated contact for that booking. Note that Constroo does not currently provide in-app messaging between customers and partners.
Availability is recorded as a simple state per listing. Constroo does not currently maintain detailed availability calendars.
Payments and transaction information
Constroo uses Cashfree as its payment provider. Checkout is hosted by that provider. Constroo does not receive or store card numbers, card expiry dates, or card security codes. Those details are entered on the payment provider’s own secure page.
What Constroo does store about a transaction is:
- the payment provider’s order identifier and payment identifier;
- the amount and currency, denominated in Indian Rupees;
- the transaction status and any refunded amount;
- the raw notification payload received from the payment provider, retained so that a disputed transaction can be settled from the record rather than from memory.
- settlement records for partners, including amounts, fees, and transfer references.
The amount charged for a booking is calculated on the server from the booking itself. It is never accepted as a value supplied by the application, so a modified or tampered client cannot change what a booking costs.
Not currently implemented
How information is used
Information is used to operate the service, specifically to:
- create and authenticate your account and keep it working;
- show you listings relevant to your stated requirement and area;
- process booking requests and record their status;
- calculate, process, and reconcile payments;
- allow partners to record attendance and wages for their workers;
- verify a business’s GST registration where one is provided;
- review partner applications before a business can accept bookings;
- secure the service, investigate abuse, and enforce these terms.
Constroo does not currently use personal information for advertising, and does not sell personal information.
Legal basis and applicable law
Information is processed for the purposes described in section 9. The lawful basis for each purpose, and the governing law, must be confirmed by qualified counsel before this policy is finalised.
Requires confirmation
Third-party processors
Constroo uses the following third-party services to operate the product. Each receives only the information needed for its function.
| Provider | Purpose | Information involved |
|---|---|---|
| Supabase | Database, authentication, and file storage | Account, profile, booking, and payment records |
| MSG91 | Delivery of one-time passwords by SMS | Mobile number and one-time code |
| Cashfree | Hosted payment checkout and settlement | Order reference, amount, customer phone; card details are entered on the provider's page and are not received by us |
| Appyflow | GST registration verification | GST identification number and the registry record returned |
| Google Places | Place-name search during onboarding | The search text you type |
| Google Sign-In | Third-party sign-in | Identity token and profile identifier |
| Firebase | Mobile application identifiers and crash-adjacent services | Application instance identifiers |
Requires confirmation
Security measures
Constroo applies the following controls. These are described specifically rather than as a general assurance:
- Database-level access control. Row-level security rules mean a signed-in user can reach only the records they are entitled to. Restriction is enforced in the database rather than in the application interface.
- Audited role changes. A user’s role cannot be changed from within the applications. Constroo provisions every new account as a customer, and a role can be changed only by an administrator through a controlled process.
- Server-derived amounts. Booking totals and muster-roll wage amounts are computed on the server; any value supplied by a client is discarded.
- Verified payment notifications. Notifications from the payment provider are checked against a signature before any booking state is changed, and repeats of the same notification are ignored rather than applied twice.
- Immutable records. Certain records — for example a verified muster-roll entry or a completed booking’s price — cannot be altered after the fact.
- Restricted access to uploaded files. A partner may only write to a folder scoped to their own account.
Requires confirmation
Data retention and deletion
Constroo retains personal information for as long as needed to operate the service and to meet its legal and accounting obligations.
Not currently implemented
How to request deletion of your account and data is set out on the Data Deletion page. That page also explains that sending an email is a request, and not an instruction that is actioned automatically.
Your rights and choices
You may ask to see the personal information Constroo holds about you, to correct it, to withdraw consent where processing relies on consent, or to request its deletion. You may also close your account by signing out.
Requests are handled by email. Because there is no self-service mechanism, a request requires manual handling, and Constroo may ask for information to verify that you are the account holder before acting.
Some information cannot be deleted while a record is needed for a legal, accounting, tax, fraud-prevention, security, or dispute-related obligation. Where that applies, Constroo will explain what is being retained and why.
If you are a worker whose details a partner has recorded on a muster roll, your name and number are held by that partner rather than by Constroo as your employer. Contact details for the partner are not published; raise the matter through the contact address on this page.
Requires confirmation
International data transfers
Constroo uses third-party providers that may process information outside India, including hosting, authentication, payments, messaging, and registry verification services.
Requires confirmation
Children's privacy
Constroo is a construction services marketplace intended for adults acting in a professional capacity. It is not directed at children.
Constroo does not currently collect dates of birth and does not enforce an age threshold in the application. Our position on minimum age is set out on the Child Safety page, which also explains how to report a safety concern.
Contact and grievance handling
For any privacy question, access request, correction, or grievance, contact us at:
Requires confirmation