Privacy Policy — Uptime360

Effective date: 3 June 2026 · App: Uptime360 (package com.winday.uptime360) · Publisher: Winday Associates, Hyderabad, Telangana, India

Uptime360 helps building owners and facility managers book annual maintenance contracts (AMC), schedule one-time service visits, monitor live status of installed equipment, and communicate with Winday engineers. This page explains what data the app collects, why, how it is stored, and what choices you have.

1. Data we collect

We collect only what we need to deliver the service.

Data	Why we collect it	When
Phone number	Login (OTP via WhatsApp) and to contact you about your bookings	When you log in
Name, email, role, company / building	To address you correctly and pre-fill booking forms	When you complete your profile
Service address (street, city, lat/lng)	To dispatch an engineer to the right location	When you save an address
Booking and contract details	To track what you've booked and surface it in your profile	When you place a booking
GST details (optional)	For business invoicing where applicable	When you opt to add them
Approximate / precise location	Only when you explicitly tap "Use my current location" while picking an address. We do not track your location in the background.	On-demand only
Payment reference data	To reconcile your booking with a successful payment, generate receipts, and support refunds. Includes the Razorpay payment id, order id, amount, status, and timestamp.	When you complete an in-app payment
Project drawings & site photos (optional)	To help our engineers prepare for the site visit. Includes any PDF, CAD, or image files you upload on the New Project form.	When you upload them

Payments: From v1.1.0 onwards Uptime360 supports in-app payment of AMC tokens and service advances. Payments are processed by Razorpay (Razorpay Software Private Limited, a PCI-DSS Level 1 certified payment processor regulated by the Reserve Bank of India). Card numbers, UPI PINs, OTPs, CVVs and other payment credentials are entered into and handled entirely by Razorpay; Uptime360 never sees, stores, or transmits this sensitive payment data. We receive and store only the payment reference (payment id, order id), the amount, the status, and the timestamp, attached to your booking record. Razorpay's own privacy notice is at https://razorpay.com/privacy/. Refunds, when issued, are processed via Razorpay against the original payment instrument.

We do not collect contacts, microphone, camera, or calendar data.

2. How we use the data

Deliver bookings and dispatch engineers for service visits.
Send WhatsApp messages confirming bookings and status updates.
Surface your contracts, projects, and visit history inside the app.
Forward booking leads to our internal engineering platform (Winday admin) so an engineer can be dispatched.
Aggregate anonymised analytics about app usage to improve the product.

We do not sell your data to third parties. We do not use your data for advertising or profiling.

3. Service providers we share data with

We rely on the processors below. Each handles only the data necessary to deliver its part of the service, under its own privacy policy.

Supabase (database + authentication) — stores your profile, addresses, and bookings. Hosted in Asia Pacific (Mumbai, ap-south-1).
AiSensy (WhatsApp Business API) — receives your phone number to deliver login OTPs and service notifications.
Razorpay (payment gateway) — when you tap Continue to Payment, you are handed off to Razorpay's secure checkout to enter card / UPI / netbanking details. Razorpay processes the payment and returns only a payment reference (id, status, amount) to us. Razorpay is regulated by the Reserve Bank of India and PCI-DSS Level 1 certified.
OpenStreetMap / Nominatim and Google Places — when you type into the address-search field, the search text is sent to one of these services to return place suggestions.
Sentry (crash reporting) — diagnostic stack traces and pseudonymous device identifiers are sent so the engineering team can fix runtime errors. We do not send personal content (names, addresses, message bodies) to Sentry.
Google Play services — for app distribution, updates, and push notification delivery.

4. Where the data is stored

All user data is stored in our Supabase project hosted in the Asia Pacific (Mumbai, ap-south-1) AWS region.
Database backups are encrypted at rest.

5. Retention

Account profile: until you ask us to delete it.
Bookings and service history: 7 years (required for warranty and tax records).
OTP verification records: cleared after 24 hours.
Server logs: 90 days.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023 and applicable laws, you have the right to access, correct, or delete the personal information we hold about you. Inside the app:

See your data — open the Profile tab; all your contracts, projects, and bookings are listed there.
Edit your profile — Profile → Edit.
Delete your account — email privacy@windayamc.com from the registered number's email and we will erase your account within 30 days. Booking and invoice records may be retained as required by law (see Section 5).

7. Security

All network traffic uses HTTPS (TLS 1.2+).
Authentication uses one-time passcodes delivered via WhatsApp.
Database access is restricted by Postgres row-level security policies scoped to your authenticated user id.

No system is perfectly secure; if you suspect a compromise, contact us immediately.

8. Children

Uptime360 is intended for adult building owners, managers, and procurement staff. We do not knowingly collect data from children under 18.

9. Changes to this policy

We may update this policy. Material changes will be posted on this page with a revised effective date and flagged in the app on your next launch.

10. Contact

Winday Associates
Email: privacy@windayamc.com
Phone / WhatsApp: +91 70757 35579
Postal: Hyderabad, Telangana, India