Privacy Policy
Version 2026-09 · This policy explains how Stafic collects and uses personal data, in line with India’s Digital Personal Data Protection Act, 2023.
What we collect
- Workers: phone number, name, date of birth, address, ID documents, skills, work history, certificates, photo, video resume, languages, availability and, only if you choose, health and background-check information.
- Employers: name, business details, GST/registration number, contact details, and payment records.
Why we collect it
- To create worker profiles that employers can search, verify identity and certificates, connect workers with employers, process payments and issue invoices, prevent fraud, and meet legal obligations.
How we protect it
- ID numbers and health notes are encrypted. ID documents are stored separately from public profile data and can be viewed only by authorised verification staff; every view is logged.
- Aadhaar numbers are shown masked (last 4 digits only).
Your rights
- You can access and download your data, correct it, withdraw consent, and ask us to delete your account from your dashboard (Privacy & data) or by contacting our grievance officer.
- Deletion requests are completed within 30 days, except records we must keep by law (for example tax invoices).
Retention
- ID documents are deleted within 90 days of account deletion. Payment and invoice records are kept for 8 years as required by tax law.
Consent records
- We record which version of these terms you accepted, in which language, and when.
Questions? Contact our Grievance Officer. Other policies: Worker terms · Employer terms · Privacy · Cookies