MYHELPR | WORKER & SERVICE PROVIDER PRIVACY POLICY

All workforce categories: salaried employees, independent providers and agency personnel | Effective 09 October 2026 | Version 1.0

WHO WE ARE AND WHO THIS POLICY COVERS

Sagar Trifix Private Limited (operating as “MyHELPR”) provides this Worker & Service Provider Privacy Policy to Employees, applicants who become workers, independent service professionals, gig/platform workers, contractors, agencies and their deployed personnel who interact with MyHELPR. It describes collection, use, sharing, retention, security and rights relating to personal data. Effective date: 09 October 2026. Website: www.myhelpr.in; privacy and grievance contact: support@myhelpr.in.

This is a provider-specific supplement to the existing MyHELPR Privacy Policy and should be read consistently with it. For customers, the customer-facing policy continues to apply. An agency is responsible for giving its own legally required employee notices; MyHELPR provides this notice for information it processes. Legal grounds and rights apply according to provisions of Indian law in force at the relevant time.

1. CATEGORIES OF INFORMATION

Identity and eligibility: legal name, photograph, date of birth/age, contact details, address, emergency contact, identity-document details, licence or registration, qualification, certifications, work history, references and lawful police/background-check results where needed. We seek only proportionate data and avoid collecting unnecessary copies of identification documents.

Work and platform: worker/provider ID, category and skills, availability, shift and attendance records, assignments, service addresses, route/location as needed for dispatch or safety, arrival/departure, booking activity, proof of completion, ratings, complaints, training, safety events, equipment allocation, customer communications and performance records.

Pay, tax and compliance: bank/account verification, beneficiary details, agreed wages or fees, incentive, reimbursements, invoices, commissions, tax identifiers where necessary, statutory deduction and benefit records, registration details, expense and settlement data.

Device, communications and security: IP address, app version, device type, login/session, authentication logs, support email, authorised WhatsApp/chat, call or quality records where lawfully notified, fraud signals, electronic contract acceptance logs and, subject to permissions and necessity, location data.

Sensitive-context information: occupational injury, disability accommodation, workplace health or medical fitness information only if permitted and necessary for workplace safety, law or requested accommodation. Avoid collecting detailed health or criminal-history records unless justified and lawful. Photos/videos of customer premises are only for authorised service purposes.

2. SOURCES OF INFORMATION

We receive data directly from you, the MyHELPR app/website, booking and operations systems, authorised customer feedback, payment and banking partners, your agency (if applicable), background and credential-verification providers, referees, training vendors, lawful public sources and authorities. Where information comes from other parties, we take reasonable steps to use it only for legitimate specified purposes.

3. WHY WE PROCESS DATA

We use information to evaluate and onboard suitable Providers; check identity, age, licences and skills; provide accounts and secure authentication; match/assign and route bookings; administer lawful attendance, work schedules, wages, provider fees, commissions, taxes and statutory benefits; communicate customer service details; provide support; conduct training and quality checks; prevent theft, impersonation and fraud; protect customers, Providers and premises; investigate safety incidents and complaints; comply with contracts and laws; and establish, exercise or defend legal rights.

Automated ranking, allocation or fraud signals may inform decisions. Material adverse decisions involving misconduct, where practicable and required by law, receive meaningful human review and a way to contest erroneous information. We do not use provider data for unrelated advertising without the appropriate legal basis and any required separate consent.

4. LAWFUL GROUNDS, NOTICE AND CHOICE

Processing is carried out on lawful grounds available under Indian data-protection and employment law, taking into account which provisions are in force. These may include valid consent, services requested, specified legitimate uses recognised under applicable law, employment-related purposes and compliance with legal obligations. We do not claim that all worker data can be processed merely because a Provider clicked “Agree”.

Where consent is required, the request will identify the data and purpose in a clear notice, permit a genuine affirmative choice and explain lawful withdrawal. If optional marketing, unrelated tracking or an additional special purpose requires consent, use separate unticked controls, not bundled or pre-checked consent. Withdrawing consent does not automatically erase records lawfully needed for payroll, tax, safety, disputes or statutory retention.

We will not knowingly use Provider information to discriminate unlawfully or retaliate for good-faith privacy, wage or safety complaints.

5. BOOKINGS, LOCATION AND TRACKING

For accepted jobs, we may use service area, location and navigation/arrival information to help dispatch and verify service completion, subject to notice and required device permission. We should limit precise location access to an explained, necessary period and not claim unrestricted off-duty tracking. Disable or stop collection when no longer necessary, save where proportionately required for a documented incident or legal obligation.

Customer addresses, building details and instructions disclosed to Providers are confidential and limited to the booking. Providers must not export customer lists, solicit directly, disclose addresses, use location to visit outside bookings or take unapproved photographs/recordings.

6. SHARING AND DISCLOSURE

Assigned customers may receive a Provider name, profile photo, relevant rating, category/skill, service status, a contact mechanism and other necessary identity/verification indicators. Do not disclose full government ID numbers, private home address, private bank details, detailed check reports or medical data to customers except on a lawful need-to-know basis or legal requirement.

We may share proportionate data with authorised managers, payroll and HR personnel, contractors/agency administrators, payment and financial institutions, verification, hosting, cloud, messaging, customer-support, accounting, security and insurance providers bound by appropriate controls; and legal advisers, regulators, police or courts where legally required or justified.

In a documented incident, relevant identity, booking and verification information may be disclosed to law enforcement or other authorised recipients where lawful, necessary and proportionate. MyHELPR does not sell or rent Provider personal data for independent third-party marketing.

7. DATA SECURITY AND ACCESS CONTROLS

We apply reasonable organisational and technical safeguards such as role-based access, credentials, restricted sharing, secure transmission/storage where appropriate, audit trails, vendor controls, backups and incident response. Providers must secure their accounts, protect login credentials, report suspected compromise, and immediately notify the Company if a device containing customer data is lost.

No security measure eliminates all risk. We will investigate and respond to personal-data breaches, and notify affected people or authorities when required by provisions of law then in effect.

8. RETENTION AND DELETION

Keep data only as long as reasonably needed for onboarding and service, wage/fee/benefit accounting, tax and labour requirements, fraud and safety investigation, consumer complaints and legal claims. Different categories have different legal and operational periods; we do not assert one uniform retention period.

When purposes expire and no legal hold applies, securely delete, anonymise or restrict access. A request for account deletion may end access but does not necessarily remove outstanding payment, labour, tax, incident, chargeback or dispute records required by law. Customers’ personal information should be deleted from Provider devices after booking completion unless authorised retention is necessary.

9. PROVIDER RIGHTS AND REQUESTS

Subject to rights and exemptions available under law in force, request information about processing, correction or updating of erroneous records, completion, erasure when no longer required, withdrawal of consent where relied on, and grievance resolution. Employees may request correction of attendance, pay or service records; rights to employment records are preserved under applicable labour law.

Contact support@myhelpr.in with your registered contact information, description of request and relevant provider/booking reference. We may reasonably verify identity and respond under applicable deadlines. You may use relevant statutory regulators and forums without giving up legal rights. Any nomination mechanism will be provided if and when applicable under relevant law.

10. CHILDREN, DEPENDANTS AND SAFEGUARDING

MyHELPR will not knowingly engage child labour and will apply relevant restrictions to adolescent work. Service providers may receive limited necessary information about children, elder-care clients or dependants; they must use it only to perform the booked task, protect confidentiality and avoid recording or sharing it without lawful permission. Customer consent cannot authorise an otherwise unlawful disclosure.

11. INTERNATIONAL SERVICE PROVIDERS AND TRANSFERS

Information may be processed on systems in India or elsewhere where lawful. We use contractual, access and technical controls appropriate to the nature of information and comply with applicable cross-border restrictions and notification requirements in force. We will not promise local-only storage unless technically and contractually assured.

12. MONITORING, INVESTIGATIONS AND FAIR USE

Work-related monitoring may include booking, attendance, authorised quality checks, support communications, access/security logs and incident evidence. Monitoring must be reasonably connected to stated purposes, proportionate and consistent with applicable employment law. The Company will not publish unsupported allegations, and will restrict access to investigation data.

Provider identity, verification or disciplinary information must not be shared publicly merely because a complaint was made. Legitimate legal requests or safety disclosures are assessed according to law, necessity and proportionality.

13. UPDATES AND CONTACT

Changes will be dated and made available in the app/website. Where a materially different processing purpose requires a new notice or consent, MyHELPR will provide it rather than assuming acceptance of all changes. Changes cannot retroactively waive non-waivable rights.

Company: Sagar Trifix Private Limited | Brand: MyHELPR | Website: www.myhelpr.in | Privacy/grievance contact: support@myhelpr.in. This policy is governed by applicable Indian law, without restricting statutory remedies.