Privacy matters.
Updated November 7, 2026. This local/staging draft needs the operator's legal identity, service providers, final retention schedule and jurisdiction-specific review before public launch.
Data collected
Requests contain contact information, property type, service category, ZIP, optional city, issue description and consent. Account users provide name, email and a password stored as a salted one-way hash. Workers also provide service areas, availability and credential notes. Customers may upload JPEG/PNG job photos; the site re-encodes them and removes image metadata. Do not submit identity documents, bank details or unrelated sensitive photos.
Accounts and security
Verification and password-recovery links are expiring and single use. Administrator MFA seeds and queued email bodies are encrypted at rest; opaque database sessions can expire or be revoked. Private tracking links expire after 30 days by default and can be replaced by the account owner. Anyone holding a valid guest link can view status and approve/reject a quote. Do not share it publicly.
Visitor reporting
We count public page views and summarize referrer domains, campaign labels, device category and approximate country/region when supplied by trusted hosting. We do not store visitor IP addresses, full referrer URLs or analytics visitor IDs. Reports are private to administrators; traffic events expire after 90 days. Do Not Track and Global Privacy Control requests are excluded. No Meta Pixel is installed.
Use and disclosure
Information is used to coordinate requested services, accounts, verification and support. Approved workers see only offered jobs; contact details are available after acceptance. Authorized workers and administrators may view job photos. Administrators can review internal records and audit history. SMTP delivery providers process queued account/service emails when configured; retries may produce duplicate notices after failures.
Payments
Payments are disabled unless an authorized sandbox is configured. Stripe-hosted checkout and onboarding collect payment and identity information directly. The site stores only sandbox account/payment identifiers, status, amount allocations and reconciliation history. It does not store raw card numbers, bank details or identity documents. No live payments or payouts are enabled in this release.
Voice dictation
Optional browser speech-to-text may send speech to the browser's provider under its own terms. OneRequest stores the resulting request text and does not store a voice recording.
Retention and requests
Final retention, deletion and legal-hold rules must be approved before public use. Proposed schedules and a support workflow are supplied in the operations drafts; automatic deletion is not enabled. Account access, correction or deletion requests require identity verification and review of lawful record-retention needs.
Privacy contact: patelsuchitbhai@gmail.com.
Back home