DPDPA 2023 Compliant

Privacy Policy

Last Updated: September 8, 2026 • Compliant with the Digital Personal Data Protection Act, 2023 (India)

1. Introduction & Commitment to Privacy

ServiceMedium ("we", "us", or "our") values your personal privacy. This Privacy Policy explains the specific categories of data we collect, why we collect it, how it is secured, and how you can exercise full control over your personal information, including your statutory right to data deletion.

2. Information We Collect

We collect only the minimum data necessary to operate a seamless discovery marketplace:

Profile Information

Full name, username, email address, avatar photo, headline, bio, professional skill tags, and social profiles.

Location Data

City, state/region, and country provided voluntarily on your profile or inferred with explicit permission to match local service inquiries.

Contact Reveal Logs

Timestamps, anonymized IP addresses, and user identifiers recorded when contact details are revealed. Used solely for rate limiting, abuse prevention, and anti-scraping enforcement.

Uploaded Media

Images and video samples uploaded to showcase services and portfolio items, securely stored and distributed via Cloudflare R2 object storage.

3. Purpose of Processing & Data Usage

Your data is processed strictly for:

  • Facilitating discovery between prospective clients and verified service providers.
  • Generating vector embeddings to power semantic AI search matching without exposing raw credentials to third-party models.
  • Preventing automated bot scraping, unauthorized spamming, and platform abuse.
  • Sending transactional system notifications (such as review alerts, suspension notices, and security updates).

Our Monetization Guarantee: We do NOT sell, rent, or trade your personal data, phone numbers, or emails to third-party marketing brokers or advertising networks.

4. User Rights & Right to Request Data Deletion

In accordance with Section 12 of the Digital Personal Data Protection Act (DPDPA), 2023, all ServiceMedium users enjoy comprehensive data principal rights:

  • Right to Access: You can review and export your profile, services, and portfolio data at any time from your account dashboard.
  • Right to Correction: You can update, edit, or rectify inaccurate details directly via profile settings.
  • Right to Erasure / Deletion: You have the unconditional right to request complete erasure of your account, personal data, services, reviews, and uploaded media.

How to Request Permanent Data Deletion:

You can delete your account from your Profile Settings, or email our Data Protection Officer at privacy@servicemedium.com with the subject "Data Deletion Request". We process and purge all associated personal records within 7 business days.

5. Cookie & Local Storage Policy

ServiceMedium uses essential session cookies and local storage tokens strictly necessary for secure authentication, preserving draft forms across sessions, and recording cookie consent preferences. We do not employ cross-site tracking cookies or invasive behavioral surveillance pixels.

6. Security Safeguards & Infrastructure

Data is hosted within secure, audited data centers with PostgreSQL Row Level Security (RLS), TLS 1.3 encryption in transit, and AES-256 encryption at rest. Media objects are protected against unauthorized file tampering via cryptographic magic-byte verification.

7. Grievance Officer & Contact Details

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

Grievance Officer: Pritam M.

ServiceMedium India Operations

Email: grievance@servicemedium.com / privacy@servicemedium.com

Location: Kolkata, West Bengal, India