Privacy Policy

Last updated: 28 September 2026

ExtraKhaata helps contractors record extra work on construction and interior sites and get it approved by their customers on WhatsApp. This policy explains what information we handle, why, and the choices you have. We process personal data in line with India's Digital Personal Data Protection Act, 2023.

Who this applies to

Contractors who create an account, the site supervisors they add, and the customers whose projects they manage. Contractors decide which supervisors and customers to add, and are responsible for having their permission to be contacted on WhatsApp about the work.

Information we collect

  • Contractors: name, business name and mobile number.
  • Projects: site name and address, and the customer's name and WhatsApp number.
  • Supervisors: name and WhatsApp number.
  • Extra work: descriptions, quantities, prices, approvals or rejections with their date and time, reasons given, and payment status.
  • Messages sent to the ExtraKhaata WhatsApp number, including text, photos and voice notes, so they can be recorded as requests.
  • Basic technical data needed to run the service securely, such as login sessions and error logs.

How we use it

  • To provide the service: record requests, send approval requests and updates on WhatsApp, and keep the record of approvals and payments.
  • To send service messages, such as login codes, reminders and daily summaries.
  • To keep the service secure and fix problems.
  • We do not sell personal data, and we do not use it for advertising.

Who we share it with

Only with the services we need to run ExtraKhaata: Meta (WhatsApp Business Platform) to send and receive WhatsApp messages, and our hosting and database providers. They process data on our behalf. We may also disclose information if required by law.

Within ExtraKhaata, a contractor sees their own projects only. A customer sees only the requests and statement for their own site, through private links.

Where it is stored and for how long

Our database is hosted in India (Mumbai). We keep project records for as long as the contractor's account is active, because they serve as a record of what was agreed. When an account is closed, we delete or anonymise its data within 90 days, unless we must keep it longer by law.

Security

Connections are encrypted, WhatsApp messages to our server are verified as coming from Meta, login uses one-time codes, and approval and statement links are random and private. No system is perfectly secure, but we work to protect your data and will inform affected users of any serious breach as required by law.

Your rights

You can ask us to access, correct or delete your personal data, or to stop using it, by contacting us on WhatsApp. If you are a customer or supervisor, you can also ask the contractor who added you. We will respond within a reasonable time.

Changes to this policy

We may update this policy as the service changes. The date above shows the latest version, and we will inform account holders of important changes.

Contact us

For any question about this policy or your data, message us on WhatsApp.