Privacy policy

DevaConnect is a local directory where you can browse businesses, job openings, and property listings by city, and — under the same account — list your own business, job opening, or property for sale or rent. This policy explains what we collect from you as a visitor or account holder, why we collect it, who we share it with, and the choices you have.

Account information. When you register or sign in, we collect your phone number and name. We verify your phone number by OTP through our SMS provider, MSG91 — we never see or store the OTP code itself, only confirmation that it was verified.

Listing content. If you list a business, job opening, or property, we store the details you submit — description, category, city/area, photos, opening hours, salary or price information, and contact details — so it can be reviewed and, once approved, shown publicly.

KYC documents. Some listings require identity verification before approval. Documents you upload for this purpose are stored in a private, access-controlled location, are never publicly reachable by URL, and are only ever viewed by our admin team for verification.

Activity you generate. Reviews you post, listings you favourite, and enquiries you send or receive are stored against your account so they can be shown back to you and to the listing owner where relevant.

Device and session information. To keep your account secure, we record sign-in sessions with approximate device/browser information and IP address, so you can review and revoke them from your account. On mobile, we also store a push notification token (via Expo) if you allow notifications.

Location. We only use the city/area you select — for example, when browsing or listing — not your device's precise GPS location.

• Create and secure your account, and keep you signed in across sessions
• Review, approve, and publish listings you submit
• Verify identity where a category requires KYC before approval
• Deliver enquiries between you and other users, subject to contact-visibility rules
• Send account and listing notifications (push and in-app)
• Investigate abuse, fraud, or violations of our terms
• Meet legal, tax, and regulatory obligations

With other users. Your listing content is public once approved. Whether your phone number, email, or WhatsApp is shown on a listing depends on that listing's contact-visibility setting — when it's set to hidden, we never send your contact details to other users; they can only reach you by sending an enquiry through the platform.

With service providers. We share the minimum data needed with providers who help us run DevaConnect on our behalf: MSG91 (phone verification via OTP) and Expo (push notification delivery to the mobile app). They are only permitted to use your data to provide that service to us.

We do not sell your data. We do not share your information with third parties for their own advertising or marketing purposes.

Legal. We may disclose information if required by law, or to protect the rights, safety, or property of DevaConnect, our users, or the public.

Passwords and refresh tokens are never stored in plain text. KYC documents and other private uploads are kept outside the public web root and served only through an authenticated route that re-checks your identity on every request. No method of transmission or storage is 100% secure, but we apply industry-standard safeguards throughout.

We keep account and listing data for as long as your account is active. Deleted records are retained in a recoverable, non-public state for a period for accountability and dispute-resolution purposes, and are excluded from every public query in the meantime. Expired OTP requests and stale sessions are purged automatically.

• Review and update your profile and listing details at any time from your account
• View and revoke any active sign-in session from Account → Sessions
• Turn push notifications off from your device settings
• Request a copy of your data, or request deletion of your account and associated data, by emailing info@devaconnect.com from your registered contact details. We'll verify your request and process it within a reasonable time, except where we're required to retain certain records by law.

DevaConnect is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, contact us and we'll remove it.

On the web, we use a single essential, httpOnly cookie to keep you signed in — it isn't used for advertising or cross-site tracking. The mobile app doesn't use cookies; it stores your session token securely on your device instead.

We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you in-app.

Questions about this policy or your data? Email us at info@devaconnect.com.