Background and Scope
RoleCycle is a managed on-demand staffing platform operated from Bengaluru, Karnataka, India by Dhananjay Shetty trading as RoleCycle ("RoleCycle", "we", "us", or "our"). We connect businesses requiring part-time, hourly, or short-term staff with verified independent workers for shift-based engagements.
This Privacy Policy ("Policy") outlines our practices in relation to the collection, storage, usage, processing, and disclosure of personal data that you share with us when you access, use, or interact with RoleCycle's services — including via our website at rolecycle.com, WhatsApp Business account, Google Forms, or any other channel through which we deliver services.
Please read this Policy carefully alongside our Terms and Conditions available at rolecycle.com/terms. By using RoleCycle's services, you confirm that you have read, understood, and agree to be bound by this Policy and consent to the processing of your data as described herein.
How this Policy applies: This Policy applies to all individuals who access or use RoleCycle's services — whether as a Business placing a booking or as a Worker registering for shifts. References to "you" throughout this Policy refer to any such individual.
We regularly review and update this Policy. We request you to review it periodically. Please notify us immediately if your personal data changes.
Personal Data We Collect
RoleCycle collects different categories of personal data from Businesses and Workers. Here is a complete breakdown:
| Data Type | From Businesses | From Workers |
|---|---|---|
| Full name | ✓ | ✓ |
| Phone number | ✓ | ✓ |
| Email address | ✓ | Optional |
| Business name and address | ✓ | — |
| Residential area and locality | — | ✓ |
| Aadhar number (last 4 digits only) | — | ✓ |
| Aadhar card copy (for verification) | — | ✓ |
| Skills and work experience | — | ✓ |
| Availability schedule | — | ✓ |
| Daily or hourly rate preference | — | ✓ |
| UPI ID or bank account details | ✓ | ✓ |
| Shift history and performance ratings | ✓ | ✓ |
| WhatsApp communication history | ✓ | ✓ |
| Upfront payment and transaction records | ✓ | ✓ |
| Refund and cancellation records | ✓ | — |
| Device and technical data (website only) | ✓ | ✓ |
ℹ️ We also collect, use, and share aggregated data — statistical or demographic information derived from personal data — for the purpose of improving our services. Aggregated data does not identify you individually.
Where we need to collect personal data by law or under our Terms and Conditions, and you fail to provide that data when requested, we may not be able to provide you with our services.
How We Collect Your Data
We collect personal data through the following methods:
- Direct interactions: When you register via Google Form, communicate via WhatsApp, submit a booking request, or contact us directly by phone or in person.
- Registration forms: Worker registration and business shift request forms hosted on Google Forms.
- WhatsApp Business: All booking confirmations, shift alerts, payment communications, and feedback exchanges.
- Website interactions: When you visit rolecycle.com, fill in contact forms, or interact with embedded registration forms.
- In-person onboarding: Walk-in worker recruitment where identity documents are collected and verified directly.
- Post-shift feedback: Ratings and reviews collected after every completed shift from both Businesses and Workers.
- Payment records: UPI transaction confirmations for invoicing, payment tracking, and financial compliance.
- Automated technologies: Technical data including IP address, browser type, device type, page views, and visit timestamps through cookies and similar technologies.
How We Use Your Data
We will only use your personal data where we have a lawful basis to do so. We use your data for the following purposes:
- To verify your identity and register you as a Business client or Worker on our platform.
- To match Workers with suitable shift bookings based on skills, location, and availability.
- To confirm bookings and communicate shift details, updates, and cancellations.
- To process payments to Workers and collect invoiced amounts from Businesses.
- To maintain shift records, ratings, and performance history.
- To monitor trends, personalise your experience, and improve the quality of our services.
- To send operational communications — shift alerts, booking confirmations, and payment receipts.
- To administer and protect our business including for troubleshooting and quality control.
- To comply with applicable Indian laws and regulations.
- To resolve disputes and respond to complaints.
- To respond to court orders or legal authority requests.
- To enforce our Terms and Conditions.
What we do NOT do: We do not use your data for third-party advertising. We do not sell your data to any party. We do not use your data for any purpose not listed above without notifying you first.
How We Store Your Data
At our current stage of operation, personal data is stored in the following systems:
- Google Sheets: Worker database, shift tracker, and payment records stored on Google Drive with restricted access and two-factor authentication.
- Google Forms: Registration and booking data collected via forms, stored automatically in connected Google Drive spreadsheets.
- WhatsApp Business: Communication history with Businesses and Workers retained for operational and dispute resolution purposes.
- Physical records: Where Aadhar cards or identity documents are collected in person, they are stored in a secure, locked location accessible only to authorised RoleCycle personnel.
As RoleCycle grows and adopts a dedicated web platform, data storage practices will be upgraded to industry-standard secure servers and this Policy will be updated accordingly.
Data Security Enhanced
We implement appropriate security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
Two-Factor Auth
All Google accounts storing RoleCycle data are protected by 2FA.
Restricted Access
Only authorised RoleCycle personnel can access worker and business databases.
No Public Sharing
No personal data files are set to public access. All sheets are private.
Secure Deletion
Data deletion requests are processed within 14 working days.
⚠️ Your responsibility: You are responsible for keeping your phone number, WhatsApp account, and any password-protected communication credentials secure. If you believe your account has been compromised, notify us immediately at hello@rolecycle.com.
Who We Share Your Data With
RoleCycle shares personal data only in the following limited and specific circumstances:
- Assigned Business (for Workers): Basic details such as a Worker's name and confirmation status may be shared with the Business for the specific confirmed shift only. Worker personal contact numbers are not shared without explicit consent.
- Assigned Workers (for Businesses): Worker name and attendance confirmation are shared. Detailed personal information is not disclosed beyond what is operationally necessary.
- Service providers: Trusted third-party providers such as Google (data storage) and WhatsApp (communications) may process your data as part of service delivery.
- Analytics providers: Anonymised technical data may be processed to help us understand platform usage. No personally identifiable information is shared.
- Payment processors: UPI providers (GPay, PhonePe, ICICI Bank) process transaction data under their own privacy policies and applicable Indian financial regulations.
- Legal obligations: We may disclose your data if required by law, court order, or a government authority in India.
Our commitment: We do not sell, rent, trade, or share your personal data with any third party for advertising or commercial purposes. Ever.
Cookies and Website Data Enhanced
When you visit rolecycle.com, we may use cookies and similar technologies to improve your browsing experience and understand how visitors use our website.
- Essential cookies: Required for the website to function correctly. These cannot be disabled.
- Analytics cookies: Help us understand page views, visit duration, and user behaviour. No personally identifiable information is collected through analytics cookies.
- Session data: Temporary data collected during your visit including IP address, browser type, operating system, and access times.
We do not use advertising cookies, remarketing pixels, or any tracking technology that shares your data with third-party advertisers. You may configure your browser to refuse cookies; however, this may affect some website functionality.
Aadhar and Identity Data
RoleCycle collects Aadhar card details from Workers for identity verification purposes only, in compliance with the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016.
- Aadhar data is used solely for verifying a Worker's identity before their first shift assignment.
- We do not store full Aadhar numbers in digital form. Only the last 4 digits are recorded for reference.
- Physical copies of Aadhar cards are stored securely in a locked location and accessed only by authorised RoleCycle personnel.
- Aadhar data is never shared with Businesses, third parties, or any other entity under any circumstances.
- Workers may request destruction of their Aadhar document copy at any time after deregistration from the platform.
Important: RoleCycle does not use Aadhar data for digital authentication, financial transactions, government benefit tracking, or any purpose beyond initial physical identity verification of Workers before their first shift.
WhatsApp and Communication Data
RoleCycle uses WhatsApp Business as its primary operational communication channel. By communicating with RoleCycle via WhatsApp, you acknowledge and agree that:
- WhatsApp messages are subject to WhatsApp's own Privacy Policy operated by Meta Platforms Inc., in addition to this Policy.
- RoleCycle retains WhatsApp communication history for operational, quality assurance, and dispute resolution purposes.
- RoleCycle will not add you to WhatsApp broadcast lists without your explicit consent at the time of registration.
- You may opt out of non-operational WhatsApp communications at any time by sending the word "STOP" to RoleCycle's WhatsApp number. You will be removed from all broadcast lists within 24 hours.
- Opting out of operational communications such as shift alerts may affect RoleCycle's ability to provide services to you.
Your Rights Enhanced
Under applicable Indian data protection law, you have the following rights in relation to your personal data held by RoleCycle:
Right to Access
Request a copy of all personal data we hold about you. We will respond within 7 working days.
Right to Correction
Request correction of any inaccurate, incomplete, or outdated personal data we hold.
Right to Deletion
Request permanent deletion of your personal data, subject to legal retention requirements.
Withdraw Consent
Withdraw your consent to data processing at any time. This may affect service availability.
Right to Opt-Out
Opt out of marketing communications at any time. We will action this within 10 business days.
Right to Complain
Raise a data-related complaint with RoleCycle or the relevant Indian regulatory authority.
To exercise any of these rights, contact us at hello@rolecycle.com with your full name, registered phone number, and a clear description of your request. We will acknowledge within 48 hours and respond fully within 14 working days.
Account Deletion New
You may request deletion of your RoleCycle registration and all associated personal data at any time by sending an email to hello@rolecycle.com with the subject line "Data Deletion Request" and your registered phone number.
- RoleCycle will process your deletion request within 7 working days of receipt.
- Once deleted, you will lose access to all RoleCycle services and shift history.
- All data associated with your registration will be permanently removed from our active databases.
- Physical identity documents will be securely destroyed within 30 days of your deletion request.
⚠️ Upfront payment records, invoices, refund records, and all financial transaction data will be retained in accordance with applicable Indian tax and financial law — currently 7 years — regardless of account deletion. This is a legal obligation and cannot be waived.
Data Retention
Your personal data will be stored and retained for as long as necessary to fulfil the purposes described in this Policy, and for a reasonable period thereafter to comply with our legal obligations.
- Active worker data: Retained for as long as the Worker remains registered.
- Inactive worker data: Retained for 12 months after the last completed shift, then permanently deleted.
- Business booking records: Retained for 3 years for invoicing and tax compliance.
- Payment, invoice, and refund records: Retained for 7 years as required by Indian GST and income tax law.
- Cancellation records: Retained for 3 years for dispute resolution.
- Identity documents: Retained while the Worker is active. Destroyed within 30 days of deregistration upon written request.
- Communication records: WhatsApp and email history retained for 24 months.
Cross-Border Data Transfers New
RoleCycle primarily stores and processes your data within India. However, because we use third-party service providers such as Google and Meta (WhatsApp), your personal data may be stored on servers located outside India.
- Google's servers may store data in data centres located in multiple countries.
- WhatsApp (Meta Platforms Inc.) may process communication data across international infrastructure.
- We comply with applicable Indian laws in respect of such cross-border data storage and transfers.
By using RoleCycle's services, you acknowledge and consent to the possibility of your data being stored in countries where data protection laws may differ from those in India.
Business Transitions New
In the event RoleCycle undergoes a business transition — such as a merger, acquisition, restructuring, or sale of assets — your personal data may be among the assets transferred to the acquiring or successor entity.
In such circumstances, RoleCycle will make reasonable efforts to notify registered users via WhatsApp or email prior to any such transfer. The acquiring entity will be bound by applicable data protection obligations.
Aggregated and Anonymised Data New
RoleCycle may collect, use, and share aggregated or anonymised data — statistical information derived from personal data — for business analysis, service improvement, and reporting.
Aggregated data does not directly or indirectly identify any individual. Examples include total shifts completed per month, average worker ratings by category, and booking volumes by industry segment.
However, if RoleCycle combines aggregated data with personal data in a way that could identify you, we will treat the combined data as personal data and handle it in accordance with this Policy.
Third-Party Services New
RoleCycle's website and operations may involve links to or use of third-party websites, applications, and services. These third-party services are not governed by this Privacy Policy.
- We do not control third-party websites or services and are not responsible for their privacy practices.
- When you interact with a third-party link, we encourage you to read the privacy policy of that service.
- Third-party providers used by RoleCycle — including Google and Meta (WhatsApp) — have their own privacy policies governing their data handling independently of this Policy.
Children's Privacy
RoleCycle's services are intended only for individuals who are 18 years of age or older. We do not knowingly collect, process, or store personal data from anyone under the age of 18.
If you believe that RoleCycle has inadvertently collected personal data from a minor, please contact us immediately at hello@rolecycle.com and we will delete that data promptly upon verification.
Marketing Opt-Out New
If RoleCycle sends you any marketing or promotional communications, we will always provide you with a clear and easy means to opt out.
- To opt out of WhatsApp marketing, send the word "STOP" to our WhatsApp number at any time.
- To opt out of email marketing, click the unsubscribe link in any marketing email or write to hello@rolecycle.com.
- We will process all opt-out requests within 10 business days of receipt.
- Opting out of marketing does not opt you out of operational communications such as shift confirmations and payment invoices.
Updates to This Policy
We may occasionally update this Privacy Policy to reflect changes in our practices, technology, applicable law, or regulatory requirements.
- The updated Policy will be published at rolecycle.com/privacy with a revised effective date.
- For significant changes, we will notify registered Businesses and Workers via WhatsApp or email at least 7 days before the changes take effect.
- Continued use of RoleCycle's services after the effective date constitutes your acceptance of the revised Policy.
Grievance Officer New
In compliance with applicable Indian law, RoleCycle has designated the following contact as the Grievance Officer for all privacy-related queries, complaints, and data requests:
Grievance Officer — RoleCycle
You may contact the Grievance Officer with any questions about this Policy, requests for data access, correction, or deletion, or any privacy-related complaint.