Privacy Policy

1. Who we are

SideCash.ai (operated by SideCash Technologies Private Limited, registered entity placeholder) is an AI data operations platform that connects verified contributors with AI data projects. For the purposes of Indian data protection law, SideCash.ai acts as a Data Fiduciary for worker personal data and as a Data Processor for client project data.

2. What we collect and why

We collect personal data only for stated, specific purposes with your consent:

• Account data (name, mobile number, email, language): to operate your account.
• Profile data (city, state, education, availability, device details): to match you to suitable projects.
• Identity verification data (PAN details, optional masked Aadhaar via consent-based offline routes, or alternate ID): to verify eligibility, prevent fraud, and meet tax requirements. Full identity numbers are stored encrypted; staff interfaces show masked values only.
• Payout data (UPI ID or bank account, IFSC): to process approved payouts. Displayed masked everywhere except restricted payment systems.
• Work data (submissions, annotations, recordings, quality scores): to deliver projects to clients and pay you accurately.
• Support and grievance records: to resolve your issues and meet legal obligations.

3. Consent

Every consent is requested separately, recorded with its exact text and timestamp, and shown in your Privacy Centre. Optional consents (such as robotics recording participation) can be withdrawn at any time without affecting the rest of your account. Withdrawing a required consent (such as KYC processing) may prevent us from paying you and may require account closure, which we will explain before you confirm.

4. Aadhaar

Aadhaar, where supported, is handled through consent-based masked or offline verification routes. SideCash.ai should not and does not require broad storage of full Aadhaar numbers. You may always use another supported identity route, including PAN-only verification or alternate ID review.

5. Who can see your data

Internal access follows role, team, project, region, workflow state, and data sensitivity. Team leads and managers see masked identifiers and status labels only. A small compliance team can view identity documents; each view requires a written reason and creates a permanent audit record. Clients receive project deliverables and aggregate quality metrics, never your identity documents or contact details.

6. Recordings and project data

Robotics household recordings are consent-first: every adult in the household must consent, children and visitors must never appear, and you review each clip before submitting. Recordings are used only for the specific project's stated purpose, are quality- and privacy-reviewed, and can be deleted on request before client approval. Video tagging work uses client-provided footage; you never upload personal footage for tagging projects.

7. Retention and deletion

We keep personal data only as long as needed for the stated purpose or as required by law (for example, payout and tax records have statutory retention periods, placeholder durations pending legal review). Identity documents carry retention dates and are deleted on expiry or on an approved erasure request. Erasure requests are made from your Privacy Centre and tracked to completion.

8. Your rights

Under the DPDP Act 2023 you can:

• Access a summary of the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure, subject to legal retention requirements.
• Withdraw optional consents.
• Nominate a person to exercise your rights in case of death or incapacity (mechanism placeholder pending legal review).
• Raise a grievance and escalate to the Data Protection Board of India if unresolved.

9. Security

We use encryption in transit, encrypted storage for sensitive fields, role- and capability-based access control, comprehensive audit logging of sensitive actions, and secure development practices. See the Trust & Security page for a plain-language description.

10. Contact

Privacy questions: privacy@sidecash.ai (placeholder). Grievance Officer: named officer and address placeholder, response within timelines stated on the Grievance page.