Privacy Policy
What we collect, why we need it, who can see it, and how long we keep it. Written against the actual database, so the retention periods below are the ones the software enforces.
Version 2026-09-02 · in effect from 2026-09-02 · VixitAi Labs, Ranchi, Jharkhand
Who we are
Upper Bazaar connects workers in Ranchi to local work, and lists the shops of the market. It is operated by VixitAi Labs from Ranchi, Jharkhand. This policy covers upperbazaar.com, the app at /app/, and the consoles used by workers, shopkeepers, employers and delivery riders.
Two short answers up front, because they are the questions worth asking first. We hold no health records — see “The Health ID” below. We never publish your gender or your housing situation— see “What a worker listing makes public”.
If you register as a worker
Registering asks for your name, your mobile number, your trade, the area you work in and your years of experience. Those are the listing. A free Digital Health ID comes with it automatically — see below. Two further things are optional, are marked optional on the form, and are handled differently from everything else on this page:
| What | Why we ask | Who ever sees it |
|---|---|---|
| Gender | To report how many of the workers listed here are women, which is a condition of the funding this programme runs on. | Nobody. It is counted into a total and is never shown on your listing, never shown to an employer, and never published. |
| Housing situation | The same: a total, so that support can be aimed at the people who need it most. | Nobody. Same rule, and it matters more here — this is the single most sensitive thing we ask anyone. |
| Health ID | Issued to every worker who registers — there is no question to answer. All we store is a yes/no that you are in the programme. | Our own staff, and a partner clinic you choose to show the card to. It is not on your listing. |
You can answer “Prefer not to say” to gender and to housing, and it is the default. Doing so does not affect your listing, where you appear in the directory, or anything else — nothing on this platform ranks or filters a worker by either answer.
What a worker listing makes public
When your listing is approved it becomes a public page that anyone can read, including people who are not signed in, and search engines that index it. On it: your name, trade, area, years of experience, indicative rate and any ratings.
Your phone number is not on it. Somebody who wants to hire you rings our office instead. We check what is being offered — that the pay matches your listing, and that the work is not something you should be walked into — and only then do we bring the job to you. Your number reaches an employer when you have agreed to the work, and not before. If you turn a job down, they never get it at all.
Not on your listing, ever: your phone number, your gender, your housing situation, whether you asked for a Health ID, or anything a customer wrote to you privately. If you would rather not be publicly listed at all, ask us and we will take the page down — see section 6 of the Listing Agreement.
The Health ID
Every worker who registers gets one, free. Show it at a partner clinic for up to 25% off your treatment — and free treatment where the need is there.
Upper Bazaar still holds no health information about anybody. Not a diagnosis, a prescription, a visit, a test result or a clinic record. What we hold is your card: a membership number, the date it was issued, and which of our staff issued it. That is all of it. Using your card does not send anything back to us — we do not learn that you went, when, or what for. There is nowhere for a health record to be stored here, which is a stronger promise than protecting one.
Your card is at /health-id/ and you can open it any time with your mobile number. Any record of your care is held by the clinic that treats you, under their own duty of confidentiality — not by us. If that ever changes, so that we would hold health information ourselves, this section changes before the first record is written, and we will tell every worker.
If somebody asks you for work
A request carries what the customer typed about the job, the area, when they want it, and a number to reach them on. It reaches our staff first, who check it before bringing it to you; it goes nowhere else. If you send a price back and it is accepted, we keep that figure as a record of what was agreed — we do not take the payment, hold it, or take a share of it.
What we collect if you buy from a shop
Shop orders are delivered, which needs more than a listing does. This table is about that side of the site.
| What | Why we need it | How long |
|---|---|---|
| Your phone number | It is how you sign in — we send a one-time code rather than storing a password. It is also how the shop or the rider reaches you about an order in progress. | While your account exists |
| Your name | So the shop knows whose order it is packing and the rider knows who to ask for. | While your account exists |
| Email address (optional) | Order confirmations, the invoice for a delivered order, and password sign-in if you choose to set one. | While your account exists |
| Delivery address and its map pin | Two separate jobs: deciding whether we deliver to that spot at all, and getting a rider to the right door in a market of unnamed lanes. | Until you delete the address |
| Your orders | The order itself, the invoice, and any refund — all three have to be reconstructable afterwards or a dispute cannot be settled. | Kept as accounting records |
| Notification permission | If, and only if, you allow it: a browser subscription so we can tell you your order has left the shop. | Until you turn it off |
| The delivery code | The code a rider needs at your door. It is stored as a one-way hash, so nobody at this end — including us — can read it back out. | With the order record |
| A doorstep photograph | Sometimes taken at handover to settle “was it delivered”. It exists for a question that stops being asked within days. | Deleted after 30 days |
| Rider location (riders only) | To offer a delivery run to a rider who is actually nearby, and to show you where your order is while it is moving. | Deleted after 14 days |
| Photographs sellers upload | Shop and product pictures for the listing. | While the listing exists |
| What people search for | The words only, counted — never linked to you. It is how we find out what this market is being asked for and does not stock. | Kept as counts |
The two deletions above are done by a scheduled job, not by hand. When a doorstep photograph expires, the file is removed and the pointer to it is cleared, so nothing in the system can serve it afterwards. The record that a delivery happened — when, where, against which code — is kept. It is the photograph that expires, not the proof.
What you type into the search box
We count search terms, and we store nothing that connects one to you— no account, no device, no address, no session. There is no way for us to look up what a particular person searched for, because that information does not exist here.
What is kept is a daily tally: the words, how many times they were asked for, and whether anything was found. A search that finds nothing is the useful part — it tells us which shop or which product this market is missing. Anything that looks like a phone number or an email address is not stored at all; it is replaced by a marker before it is written.
Photographs are stripped before they are stored
Every uploaded image is re-encoded on our server before it is saved. That removes the EXIF block, which on a phone photograph normally includes the GPS coordinates of where it was taken. A shopkeeper photographing their counter is not also publishing their home address.
Who can see your details
- Our own staff see every enquiry before a worker does. That is the point of it: we read what is being offered and decide whether to pass it on.
- A worker we bring the job to sees what you wrote about it and a number to reach you on. Nothing else of yours reaches them, and they may not use it for anything but that job — section 5 of the Listing Agreement binds them to that.
- An employer browsing the directorysees a worker’s public listing and nothing behind it. Not their phone number, not gender, not housing, not a Health ID request, not who else has contacted that worker.
- The shop you ordered from sees your name, your delivery address and a contact number — it cannot pack and hand over an order otherwise. In an order split across several shops, each shop sees only its own part.
- The rider assigned to your delivery sees the same, for as long as the delivery is live.
- Our own staff see it when answering a question about an order, and those actions are logged.
- Nobody else. Your address and phone number are never shown on a public page, never included in a review, and never sold or rented to anyone. Reviews show a first name only.
Payments
Work booked through the directory is paid directly to the worker, so there is no payment on that side of the site at all — nothing to process and nothing to store.
Shop orders are mostly cash on delivery: you pay the rider at your door and no payment details exist to store. If you pay online, that happens on the payment provider’s own secure page — card and UPI details never reach our servers, and we could not store them if we wanted to. What we keep is that a payment succeeded, for how much, and against which order.
Third parties and tracking
This site runs no analytics, no advertising and no tracking scripts— not Google Analytics, not a Facebook pixel, not a session recorder. Nothing on the page loads from another company’s servers, and nothing follows you between sites. If that ever changes, this section changes with it, before the script ships.
The one thing we do count is search terms, on our own servers, with nothing attached to them — described above. We would rather say that plainly than let “no analytics” do more work than it honestly can.
We do rely on other companies for two narrow jobs, and only with the minimum they need: sending a message you asked for (an order update by email, SMS or WhatsApp — the recipient address and the message), and taking an online payment. We do not send your order history or your address anywhere else.
Cookies
After you sign in we set one cookie so you stay signed in. It is not readable by other sites and is not used to follow you around the internet. There are no advertising cookies to consent to, which is why you are not being asked to dismiss a banner.
Your choices
- See and correct your details — from your account in the app.
- Turn notifications off — in the app, or in your browser settings.
- Take your listing down — ask us and the public page goes, along with your number on it. You do not have to give a reason.
- Change or withdraw an optional answer — gender or housing. Tell us and we will clear it. Withdrawing one changes nothing about your listing. You can also ask to be taken out of the Health ID programme, though there is no reason we can think of to want that: it costs you nothing and we learn nothing from it.
- Delete your account — from your account screen, or by asking us. We remove your profile and stop using your details. Records of completed orders, invoices and refunds are kept, because both sides may need them to settle a dispute or for tax — a delivered order is a transaction between you and a shop, not just a row we own.
- Ask what we hold about you — by the contact route below.
If reading or filling in any of this is hard, call us and a person will go through it with you in Hindi. Not being able to read a form is not a reason to have fewer rights over your own details.
Children
Upper Bazaar is not intended for use by children. We do not knowingly create accounts for anyone under 18, and we do not list workers under 18. If you believe a listing is of a child, tell us and we will take it down while we check.
Security
The site is served only over HTTPS. Passwords, where set, are stored hashed and never in readable form; so are delivery codes. Access to customer details from our staff consoles requires a sign-in and is recorded. No system is perfect, and if something happens that affects your data we will say so plainly rather than quietly.
Changes
When this policy changes materially, the version at the top of this page changes with it. The version is the date it took effect.
Contact us
For anything about your data — a question, a correction, a deletion, or a complaint — reach us on WhatsApp or by email at vixitaissh@gmail.com. Say that it is a privacy question so it reaches the right person. We answer during market hours.
Postal and telephone contact: VixitAi Labs, Ranchi, Jharkhand · +91 70042 24293.