Published: May 18, 2026
Privacy Policy
Effective: May 18, 2026
This Privacy Policy describes how HACKCOMM TECHNOLOGY PRIVATE LIMITED (operating urBuddy under OSCode) ("Company", "we", "us", "our") collects, uses, stores, and shares your personal data when you use the urBuddy platform ("Platform"). This Policy should be read alongside our Terms of Service.
By using the Platform, you consent to the practices described in this Policy.
Information We Collect
Information You Provide
- Account information: Name, email address, phone number, username, and profile picture.
- Profile information: Bio, areas of expertise or interest, professional background, and social media handles (if provided).
- Payment data: Billing details processed by our payment partners (e.g., Razorpay). We do not store full card or bank account details on our servers.
- Session content: Notes, messages, and materials exchanged during or in connection with booked sessions.
- Communications: Any correspondence you send us via email, support tickets, or in-app chat.
Information Collected Automatically
When you use the Platform, we may automatically collect:
- Device and browser information: IP address, browser type, operating system, device identifiers.
- Usage data: Pages visited, features used, session duration, clicks, and navigation patterns.
- Log data: Server logs including timestamps, error reports, and access records.
- Location data: Approximate location inferred from IP address.
Information from Third Parties
- Social login providers: If you sign in using Google, LinkedIn, or another third-party provider, we receive basic profile information (name, email, profile picture) as permitted by your settings with that provider.
- Payment processors: We receive transaction confirmation and status from our payment partners, not full payment credentials.
How We Use Your Information
We use the data we collect to:
- Create, manage, and authenticate your account.
- Facilitate bookings, sessions, and transactions between Users and Mentors.
- Process payments and issue refunds.
- Send transactional communications (booking confirmations, reminders, receipts).
- Provide customer support and respond to grievances.
- Improve Platform features, performance, and user experience through analytics.
- Detect, prevent, and respond to fraud, abuse, or security threats.
- Comply with applicable legal obligations.
- Send marketing and promotional communications (you may opt out at any time).
Legal Bases for Processing
Where required by applicable law (including the Digital Personal Data Protection Act, 2023 and GDPR for users in the EU/UK), we process your personal data on the following bases:
| Basis | Examples |
|---|---|
| Consent | Marketing emails; optional profile data; cookie analytics |
| Contract performance | Account creation; session booking; payment processing |
| Legitimate interests | Platform security; fraud prevention; service improvement |
| Legal obligation | Tax records; responses to valid legal orders |
You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Data Sharing
We do not sell your personal data. We may share your data with:
- Mentors: Your name, profile, and booking details are shared with the Mentor you book a session with, and vice versa.
- Payment processors: Razorpay and other licensed gateways, solely for transaction processing.
- Analytics providers: PostHog and similar tools, for aggregated platform usage analysis.
- AI service providers: We may use third-party AI APIs (such as OpenAI) to power platform features. Data shared is governed by those providers' data processing agreements.
- Legal and regulatory authorities: Where required by law, court order, or government direction.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a materially different privacy policy.
All third-party processors are contractually required to handle your data securely and only for the purposes we specify.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Keep you logged in and remember your preferences.
- Analyse Platform usage and performance.
- Serve relevant content and, where applicable, advertisements.
Types of cookies we use:
| Type | Purpose |
|---|---|
| Essential | Session management, authentication, security |
| Analytics | Usage tracking via PostHog |
| Preference | Storing your settings and language preferences |
| Marketing | Interest-based content (opt-in only) |
You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. We currently do not respond to Do Not Track (DNT) signals.
AI-Powered Features
The Platform may use AI technologies to power features such as mentor matching, search, recommendations, and session summaries. Where AI processes your data:
- It is used only for the stated feature purpose.
- It is not used to train third-party AI models without your explicit consent.
- You may opt out of AI-powered features by contacting us at support@urbuddy.in.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected or as required by law. Specifically:
- Account data: Retained for the duration of your account and for up to 3 years after closure for audit, fraud prevention, or dispute resolution purposes.
- Transaction records: Retained for 7 years as required under Indian tax and financial regulations.
- Support communications: Retained for up to 2 years.
- Marketing data: Retained until you opt out or withdraw consent.
Upon expiry of the applicable retention period, your data will be securely deleted or anonymised.
Data Security
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, and regular security assessments.
However, no method of electronic transmission or storage is 100% secure. You share data with the Platform at your own risk, and we encourage you to use strong, unique passwords and secure your devices.
Children's Privacy
The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data without appropriate consent, please contact us at support@urbuddy.in and we will promptly delete such data.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
All Users (India - DPDPA 2023)
- Right to access: Request a summary of personal data we hold about you.
- Right to correction: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
- Right to grievance redressal: Contact our Data Protection Officer or Grievance Officer.
- Right to nominate: Nominate another individual to exercise your rights in the event of death or incapacity.
EU / UK Users (GDPR / UK GDPR)
In addition to the above:
- Right to data portability.
- Right to restrict processing.
- Right to object to processing based on legitimate interests.
- Right to lodge a complaint with your local supervisory authority.
Exercising Your Rights
To exercise any of the above rights, email support@urbuddy.in with sufficient identification. We will respond within 30 days. We may decline requests that are manifestly unfounded, excessive, or conflict with our legal obligations.
International Data Transfers
The Platform is operated from India. If you access the Platform from outside India, your data may be transferred to and processed in India. We take appropriate safeguards to ensure such transfers comply with applicable law.
For users in the EU/UK, transfers are made under Standard Contractual Clauses (SCCs) or other lawful mechanisms.
Grievance Officer
In compliance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, 2021, we have appointed a responsible point of contact for data-related concerns:
Name: Abhishek Kumar
Email: support@urbuddy.in
Address: Unit 101 Desk no RK 69, Oxford Towers, HAL Old Airport Road, 139, Kodihalli, Bengaluru, Bengaluru Urban, Karnataka, India - 560008
Response Timelines
- Acknowledgment within 24 hours.
- Resolution within 30 days for data access, correction, or deletion requests.
Third-Party Links
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.
Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent in-app notice at least 7 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.
The current version is always available at www.urbuddy.in/privacy-policy.
Contact Us
HACKCOMM TECHNOLOGY PRIVATE LIMITED (urBuddy / OSCode)
Email: support@urbuddy.in
Address: Unit 101 Desk no RK 69, Oxford Towers, HAL Old Airport Road, 139, Kodihalli, Bengaluru, Bengaluru Urban, Karnataka, India - 560008
Website: www.urbuddy.in