Privacy Policy

1. Who we are

CivilNext is operated by Seetharam Engineering and Services, Tamil Nadu, India ("CivilNext", "we", "us"). This policy covers the website civilnext.in, the provider web dashboard, and the four CivilNext mobile apps on iOS and Android: CivilNext Customer, CivilNext Partner (for businesses and service providers), CivilNext Staff (for employees of a provider) and CivilNext Transport (for transporters and drivers). CivilNext is a marketplace: independent providers offer rentals, materials, on-site services, consultations and transport, and we connect them with customers.

2. What we collect, and why

We collect only what is needed to run the marketplace. Each item below says which app collects it.

• Contact details (all apps) — your name, mobile number and, if you add it, email address. Used to create your account, sign you in by one-time password (OTP), and send you order updates and bills.
• Addresses (Customer, Partner) — delivery and service addresses you save, and a business address for providers. Used to deliver orders and send providers to the right place.
• Precise location — Customer: only while you use the app, to find providers near you, set a delivery pin and show a live order on the map. Partner: while you use the app, to show your team on the map and to tag job photos with where they were taken. Staff: while you are signed in and location sharing is on (the provider you work for decides whether staff can pause it), including when the app is in the background, so that provider can see your live position and route for dispatching jobs; iPhone shows the blue location indicator while this is active. Transport: while you are online for deliveries, including in the background, so the customer and provider can follow the delivery and see an accurate arrival time. You can stop location access at any time in your phone's settings; features that need it will then ask again.
• Photos, videos and documents (all apps) — pictures and files you choose to attach: order and job photos, machine condition and checklist photos, downtime evidence, profile pictures, dispute evidence, listings you post, and verification documents that providers and transporters upload (for example a GST certificate, driving licence or vehicle registration). We only receive files you pick or take yourself.
• Voice recordings — when you use the voice assistant (all apps) the recording is sent to our speech-to-text service to turn it into text, and is not kept afterwards. Voice notes you record on a job, a service diagnosis or a machine-downtime report (Partner, Staff) are stored with that record so your team can listen to them.
• A contact you pick (Partner, Staff) — if you choose "pick from contacts" while adding a customer, only the one contact you select (name and number) is used. We never read or upload your whole address book.
• Messages and content you write (Customer, Partner, Staff) — chat messages about an order, reviews and ratings, dispute messages, comments, support tickets, and property or resale listings you publish.
• Orders and payments (all apps) — what you booked or sold, amounts, payment status and invoices. Card, UPI and bank details you enter during online payment go directly to our payment gateway (Razorpay); we never see or store your card number.
• Provider business and payout details (Partner) — business name, GSTIN and PAN if you add them (for tax invoices), and the bank account or UPI ID you give us to receive payouts.
• Staff records (Partner, Staff) — information a provider enters about its own employees, such as role, attendance, daily work reports and pay, and identity documents the provider chooses to keep.
• Device information (all apps) — app version, device model and operating system version, used to keep the app working and fix problems, and a push-notification token on Android so we can send you notifications.

We do not use your data for advertising, we do not track you across other companies' apps or websites, and we do not sell your personal data.

3. Phone calls and the CRM (providers and their staff)

This section applies to the Call assistant in the CivilNext Partner and Staff apps on Android. It is off by default. It works only if a provider (a "business") switches on call linking for its CRM and the staff member reads the notice in the app and accepts it. It is not used for customers who only use the CivilNext Customer app.

• What is processed. When a call rings, ends or is placed, the app turns the number into a scrambled code (a salted hash) and compares it, on the phone itself, with a list of scrambled codes of the phone numbers in that business's CRM (leads and customers). Your phone downloads that list as codes, not as readable numbers. Only when the number matches a CRM record do we store the call's time, direction (incoming, outgoing or missed), duration and outcome, together with the notes and follow-up dates the staff member types, linked to that CRM record and to the staff member.
• Numbers that are not in the CRM. The app only checks them on the phone, and, if the staff member chose "also show new callers", shows a "New caller" card. Nothing about the number is sent to our servers unless the staff member taps Add to CRM, Follow up or Create order; only then is that number saved as a new lead in the business's CRM. Numbers already saved in the phone's contacts, and numbers the staff member marks Ignore, are never shown and never sent. A scrambled code of an ignored number, and a temporary code used to group repeat calls for 24 hours, stay on the phone only.
• What is NOT collected. We never record or receive call audio. We do not read SMS or other messages and we do not read the phone's call log. The app does not ask for call-log or SMS permission; it uses Android's call-screening and call-redirection roles, which the user grants, and it never blocks, rejects or changes a call. The phone's contacts are consulted on the phone only to skip personal contacts; they are not uploaded.
• Why. To show staff who is calling and what was last said, to keep a complete history of conversations with customers and leads in one place, to remind staff of follow-ups and missed-call call-backs, and to give the business owner call statistics (calls per staff, talk time, outcomes).
• Consent and legal basis. Processing for a staff member starts only after that person accepts the in-app notice; the version and time of acceptance are recorded. Staff can withdraw consent at any time in the app and processing stops at once. Working hours set by the business apply: calls outside them are skipped. The business is responsible for telling its own customers and staff that calls with CRM contacts may be logged; CivilNext acts as a service provider to the business for this data.
• Who sees it. The staff member concerned, and the business owner and the managers the owner authorises, according to their CRM role. Call data is not sold, not shared with third parties and not used for advertising.
• Retention. Call details such as exact start and end times and device identifiers are removed from call records after the retention period the business sets (90 days unless the business changes it). The outcome, direction, duration and the notes remain on the CRM record until that record is deleted. Cached caller cards on the phone are erased when the user logs out, withdraws consent or chooses Delete my data.
• Your controls. Staff can switch the Call assistant off, withdraw consent and choose Delete my data in the app, and can revoke Android permissions and roles in the phone's settings. A business owner can disable call linking for the whole business or for any individual, set working hours, change the retention period, and rotate the matching key, which invalidates every scrambled list held on phones. Removing a staff member or deleting an account removes that person's call consent and call details. Changes to call-linking settings are recorded in an audit log the owner can read. To ask for access to, or deletion of, call records about you, write to the grievance officer in section 11.
• Security. Number matching uses salted hashes, traffic is encrypted (HTTPS), cached caller cards are stored in the app's private storage and encrypted where the phone supports it, and only the business's authorised users can read its call records.

4. Who can see your information

• The other side of your order. When you book, the provider (and, if a delivery is involved, the transporter) receives your name, the delivery or service address and pin, and the order details, and can contact you about that order. Customers see the provider's business name, contact and the progress of the order.
• Your team. A provider's managers see the work, attendance and, while on duty, the location of the staff they employ.
• Shared profile access (providers). A provider can choose to give another registered CivilNext provider access to their business profile for a limited time. Before anything is shared, the owner is shown a clear warning and confirms it, and the other provider must accept the offer in their own app. The owner decides what is shared: view only, full access, or only certain modules, features or locations, and the access ends automatically on the end date the owner sets. While it lasts, the other provider can see the business data the owner shared (for example orders, customers, stock, and, only if the owner allows it, money figures and reports) and receives the matching notifications; a banner always shows which profile they are working in. Payouts, bank details, KYC and plan purchases are never available through shared access. The owner can change or end the access at any time, the other provider can leave at any time, and every action taken inside a shared profile is recorded with the name of the person who took it and is visible to the owner. The owner is responsible for sharing only with people they trust and for any customer data they choose to share.
• Public content. Reviews, ratings and listings you publish are visible to other users, with the name on your profile.
• Service companies that work for us, only as needed to run CivilNext: our payment gateway (Razorpay); SMS, WhatsApp and email providers that deliver OTPs, bills and order updates; Google Maps for maps, addresses and routes; a speech-to-text provider for the voice assistant; Firebase Cloud Messaging for Android push notifications; and our hosting provider. They may use the data only to provide their service to us.
• The law. When required by law, court order or a valid request from a government authority, or to protect the safety of users.

5. How long we keep it

We keep your account data while your account is active. Order records and invoices are kept for the period Indian tax law (GST) requires of the provider who issued them, even after an account is deleted, but with your identity removed. Voice-assistant recordings are not kept. Chat and dispute messages are kept as part of the order record.

6. Deleting your account

You can delete your account yourself, at any time, inside the app: Profile / Account → Delete Account, confirmed with a one-time code sent to your number. Deletion takes effect immediately: you are signed out, and your name, phone number, email, profile photo, saved addresses, identity documents and bank or UPI details are erased. Orders, their photos and invoices already issued are retained without your identity, as described above. You can also email support@civilnext.in to ask for deletion or for a copy of your data.

7. Your choices and rights

• See and correct your details in the app's profile screen.
• Turn off location, camera, microphone, photos, contacts or notification access in your phone's settings at any time.
• Report content or block a user from the chat, review or listing where you see them.
• Ask us to access, correct or erase your personal data, or withdraw consent, by writing to the grievance officer below. We respond within 30 days, as required under India's Digital Personal Data Protection Act, 2023.

8. Children

CivilNext is for people aged 18 and over. We do not knowingly collect data from children; if you believe a child has created an account, write to us and we will delete it.

9. Security

All traffic between the apps and our servers is encrypted (HTTPS). Access to personal data is limited to the people and services that need it to run CivilNext. Sign-in uses one-time passwords, so we never store a password for you.

10. Changes

If we change this policy in a way that matters, we will update the date above and tell you in the app before the change takes effect.

11. Contact and grievance officer

Grievance Officer, CivilNext (Seetharam Engineering and Services), Tamil Nadu, India — support@civilnext.in. For help with an order use civilnext.in/support.