Skip to content
Constroo

Legal

Privacy Policy

How Constroo collects, uses, stores, shares, and protects personal information across this website and the Constroo applications for iOS and Android.

Last updated: 12 October 2026

This policy describes the personal information handled by Constroo as part of its public website and its mobile applications for iOS and Android. It is written to be specific about what the product actually does today, including where something is not yet implemented.

Where a detail has not been established — for example a retention period, or the registered identity of the organisation operating the service — this policy says so plainly rather than filling the gap with an assumption. Items marked Requires confirmation are pending internal or legal verification.

Scope of this policy

This policy applies to Constroo, of Pune / PCMC, Maharashtra, India, and covers:

  • this website, which is informational and marketing only;
  • the Constroo customer application for iOS and Android;
  • the Constroo partner application, used by equipment suppliers and service businesses that list their offerings.

It does not apply to the separate internal operations console used by Constroo’s staff, which is not publicly accessible.

Requires confirmation

The legal entity that operates Constroo, including its registered name and registered office, has not been established in the reviewed documentation. Those details must be supplied and confirmed by Constroo before publication. This policy currently describes the service by brand name only.

Information you provide

Depending on how you use the service, Constroo collects:

  • Identity and contact. Full name, mobile number, and email address. If you sign in with a third-party account, the name and email associated with that account may be used to populate your profile.
  • Profile details. The role you work in, your employment mode, whether you are looking to procure equipment, labour, or both, and any free-text description you choose to write about your work.
  • Location you operate in. The city, state, and locality of your operating area.
  • Organisation and GST details. If you provide a GST identification number, Constroo retrieves and stores the registration record returned by the GST registry, which can include the organisation’s legal and trade name, registration status and dates, taxpayer classification, nature of business, and registered address details including a pincode.
  • Booking details. For each booking request: the site address and city, a site contact name and phone number, the start date, and what was requested.
  • Equipment photographs. Partners may upload photographs of the machinery they list. These are business imagery rather than personal data.
  • Worker names and phone numbers. Partners record the names and phone numbers of individual workers on their daily muster roll so that attendance and wages can be tracked against a work requirement.

Requires confirmation

Constroo does not currently request government identity documents such as Aadhaar or PAN, does not collect dates of birth, and does not ask you to upload identity proof. If that changes, this policy must be updated before the change ships.

Accounts and authentication

Accounts are created when you sign in. Constroo supports three sign-in methods in its customer application:

  • Mobile number with a one-time password. Your number is submitted to an SMS provider, which sends the code to you. Constroo does not set or store a password for this method.
  • Google Sign-In. An identity token is exchanged with Google and your profile identifier is linked to your Constroo account.
  • Apple Sign-In. Available on iOS, where you may choose to share your name and email. The name you provide is saved to your profile once, at first sign-in.

If you sign in with a mobile number, Constroo creates a technical placeholder email address in its own reserved domain so that the account system has a unique key. That placeholder is not a real mailbox and is not exposed to you as a contact address.

You may link an additional sign-in method to an existing account. Constroo does not currently offer in-app password setting, password recovery by email, or self-service deletion of your account — see section 14.

Requires confirmation

Sign-in by mobile OTP requires a registered messaging template under Indian telecom regulations. That registration was not complete at the time of review, so mobile sign-in may be unavailable or intermittently unavailable. Google Sign-In is the primary working method at present, and Apple Sign-In is configured in the application but its server credentials were not enabled at the time of review, so it is hidden from the interface rather than shown and left to fail.

Information collected automatically

When you use the applications, certain records are created as a necessary part of operating the service. These are not optional:

  • Account records linking your profile to the sign-in method you used.
  • Records of actions you take, such as booking requests you create, accept, or decline, and when. Changes to a booking’s status are recorded with who made the change.
  • Partner records: business name, service area, and the capabilities a partner declares they can supply.
  • Daily work records submitted by partners for labour engagements, including attendance, shift codes, and derived wage amounts.

Constroo does not currently collect behavioural or advertising data about your use of the applications.

Device and diagnostic information

The customer application requests only the operating location permission (see section 6). It does not request camera, contacts, microphone, phone-state, photo library, or notification permissions.

Our hosting and backend providers may keep standard technical records — for example IP address, request time, and error logs — as part of delivering and securing the service.

Requires confirmation

The exact contents, retention, and access controls of host and provider diagnostic logs were not available in the reviewed documentation. The provider configurations in use must be confirmed and this section updated to describe them accurately.

Location information

Location access is opt-in and one-off. It is requested only when you tap “Use my current location”, and only to fill in the city, state, and locality of your operating area. Manual entry is always available instead.

Specifically, Constroo does not:

  • request background or continuous location access;
  • track your location in the background;
  • store precise coordinates on your profile. Your coordinates are used transiently to determine your city and state, then discarded.

Place-name search is provided by a third-party location service that receives the text you type. Coordinates returned by that service are likewise discarded rather than stored.

Requires confirmation

The location lookup service was not enabled on the relevant cloud project at the time of review, meaning in-app place search may fall back to free-text entry. This does not change what is stored.

Bookings and service requests

When you request a booking, Constroo records the site address and city, a site contact name and phone number, the start date, and what you have asked for.

The site contact name and phone number are the designated contact for that booking. Note that Constroo does not currently provide in-app messaging between customers and partners.

Availability is recorded as a simple state per listing. Constroo does not currently maintain detailed availability calendars.

Payments and transaction information

Constroo uses Cashfree as its payment provider. Checkout is hosted by that provider. Constroo does not receive or store card numbers, card expiry dates, or card security codes. Those details are entered on the payment provider’s own secure page.

What Constroo does store about a transaction is:

  • the payment provider’s order identifier and payment identifier;
  • the amount and currency, denominated in Indian Rupees;
  • the transaction status and any refunded amount;
  • the raw notification payload received from the payment provider, retained so that a disputed transaction can be settled from the record rather than from memory.
  • settlement records for partners, including amounts, fees, and transfer references.

The amount charged for a booking is calculated on the server from the booking itself. It is never accepted as a value supplied by the application, so a modified or tampered client cannot change what a booking costs.

Not currently implemented

Payments are not yet operable end to end in the released applications. The checkout integration is built against the provider’s web interface and has no native mobile component installed, so a payment cannot currently be completed on Android or iOS. The environment is also configured for testing rather than production, no live order has been created through the provider, and there is currently no refund function, refund path, or partner-payout mechanism in the codebase. No commitment to refunds, escrow, split settlement, or payout timing should be inferred from this policy.

How information is used

Information is used to operate the service, specifically to:

  • create and authenticate your account and keep it working;
  • show you listings relevant to your stated requirement and area;
  • process booking requests and record their status;
  • calculate, process, and reconcile payments;
  • allow partners to record attendance and wages for their workers;
  • verify a business’s GST registration where one is provided;
  • review partner applications before a business can accept bookings;
  • secure the service, investigate abuse, and enforce these terms.

Constroo does not currently use personal information for advertising, and does not sell personal information.

Data sharing and disclosure

Constroo shares personal information in a limited set of cases:

  • With the service provider of a booking. When you make a booking, the relevant information is available to the partner fulfilling it. A partner’s own mobile number is not directly shown to customers. The customer instead provides a site contact name and number for the booking.
  • With processors. As listed in section 12.
  • Within a registration. Where a GST number is submitted, the corresponding registry record is retrieved and stored.
  • For legal requirements. Where we are required by law, a valid legal process, or a safety concern to disclose information.

Constroo does not currently permit customers to browse or select individual workers, and individual workers’ names and numbers are not published.

Third-party processors

Constroo uses the following third-party services to operate the product. Each receives only the information needed for its function.

ProviderPurposeInformation involved
SupabaseDatabase, authentication, and file storageAccount, profile, booking, and payment records
MSG91Delivery of one-time passwords by SMSMobile number and one-time code
CashfreeHosted payment checkout and settlementOrder reference, amount, customer phone; card details are entered on the provider's page and are not received by us
AppyflowGST registration verificationGST identification number and the registry record returned
Google PlacesPlace-name search during onboardingThe search text you type
Google Sign-InThird-party sign-inIdentity token and profile identifier
FirebaseMobile application identifiers and crash-adjacent servicesApplication instance identifiers

Requires confirmation

Data residency and sub-processor locations for each provider were not determinable from the reviewed configuration. This must be confirmed before publication — see section 17.

Security measures

Constroo applies the following controls. These are described specifically rather than as a general assurance:

  • Database-level access control. Row-level security rules mean a signed-in user can reach only the records they are entitled to. Restriction is enforced in the database rather than in the application interface.
  • Audited role changes. A user’s role cannot be changed from within the applications. Constroo provisions every new account as a customer, and a role can be changed only by an administrator through a controlled process.
  • Server-derived amounts. Booking totals and muster-roll wage amounts are computed on the server; any value supplied by a client is discarded.
  • Verified payment notifications. Notifications from the payment provider are checked against a signature before any booking state is changed, and repeats of the same notification are ignored rather than applied twice.
  • Immutable records. Certain records — for example a verified muster-roll entry or a completed booking’s price — cannot be altered after the fact.
  • Restricted access to uploaded files. A partner may only write to a folder scoped to their own account.

Requires confirmation

These controls are engineering measures. They are not a statement that the service has been independently security audited, that it is free from vulnerability, or that any particular outcome can be guaranteed. No penetration test or third-party audit was evidenced in the reviewed documentation.

Data retention and deletion

Constroo retains personal information for as long as needed to operate the service and to meet its legal and accounting obligations.

Not currently implemented

No fixed retention schedule and no automated deletion or anonymisation process exists in the reviewed codebase. There is no self-service account deletion, and no scheduled purge of accounts, bookings, payment records, or uploaded files. If an account is removed at the database level, associated profile records are removed with it, but booking and payment records are retained because they are financial records. The retention periods that will apply must be decided, implemented, and then described here.

How to request deletion of your account and data is set out on the Data Deletion page. That page also explains that sending an email is a request, and not an instruction that is actioned automatically.

Your rights and choices

You may ask to see the personal information Constroo holds about you, to correct it, to withdraw consent where processing relies on consent, or to request its deletion. You may also close your account by signing out.

Requests are handled by email. Because there is no self-service mechanism, a request requires manual handling, and Constroo may ask for information to verify that you are the account holder before acting.

Some information cannot be deleted while a record is needed for a legal, accounting, tax, fraud-prevention, security, or dispute-related obligation. Where that applies, Constroo will explain what is being retained and why.

If you are a worker whose details a partner has recorded on a muster roll, your name and number are held by that partner rather than by Constroo as your employer. Contact details for the partner are not published; raise the matter through the contact address on this page.

Requires confirmation

No grievance officer, response deadlines, or appeal mechanism have been designated. The process above describes current practice, not a legally prescribed procedure.

Cookies and analytics

This website does not set advertising cookies, does not embed third-party trackers, and does not run analytics. It requires no cookie consent because it uses no technologies that would require it.

The mobile applications do not currently contain an analytics or advertising SDK. If that changes, this policy must be updated and consent obtained where required before the change ships.

Requires confirmation

The status of any app-level analytics should be re-verified at publication rather than assumed from this document.

International data transfers

Constroo uses third-party providers that may process information outside India, including hosting, authentication, payments, messaging, and registry verification services.

Requires confirmation

The specific data-centre regions and sub-processor locations in use were not determinable from the reviewed configuration, so this policy cannot currently state where information is stored or confirm that all processing takes place in India. This must be confirmed, and any cross-border transfer mechanism identified, before publication.

Children's privacy

Constroo is a construction services marketplace intended for adults acting in a professional capacity. It is not directed at children.

Constroo does not currently collect dates of birth and does not enforce an age threshold in the application. Our position on minimum age is set out on the Child Safety page, which also explains how to report a safety concern.

Contact and grievance handling

For any privacy question, access request, correction, or grievance, contact us at:

Constroo

Email: Constroo.in@gmail.com

Phone: +91 77448 21742

Pune / PCMC, Maharashtra, India

Requires confirmation

The registered office address, the identity of the designated grievance officer, and any statutory response timelines must be added once confirmed. Until then, this policy does not constitute a compliant notice in every respect.