HSTLE ("we", "us") operates a task marketplace in Mumbai, India. We are the data fiduciary for the personal data described below. Contact: hello@hstle.in.
To create and secure your account; verify identity and build trust; match tasks; enable payments and escrow; moderate content and prevent fraud, abuse, and illegal use; provide support; and comply with law. We process data only for these stated, lawful purposes (purpose limitation) and collect only what we need (data minimisation).
Automated (AI) processing: task descriptions and chat messages are screened by automated systems for safety and moderation, and task text may be processed to suggest a title, category, translation (English/Hindi), or fair price. Flagged content may be reviewed by a human. These systems assist the service; account-level decisions such as bans follow stated rules and can be raised with our Grievance Officer.
We process your data based on your consent and to perform our service to you. You may withdraw consent at any time by contacting us, though some processing is necessary to provide the service or to meet legal obligations.
We share the minimum necessary with: our identity-verification partner (to verify Hustlers), our payment partner (to process and hold payments), and service providers that host and run the platform. Between users, we show only what is needed for a task (e.g., name, rating, approximate location, and contact at the point of an active task). We do not sell your personal data. We may disclose data where required by law or to protect safety.
Our processors and where data lives: application hosting in Mumbai, India (Fly.io); database in Singapore (Neon, on AWS); photo storage and delivery on Cloudflare; AI text processing by OpenAI (United States) — task text and messages only, never your ID numbers; payments by our licensed Indian payment partner; SMS one-time passcodes by an Indian SMS provider; push notifications via Apple/Google. Some processing therefore happens outside India with providers bound by contractual safeguards, as permitted under the DPDP Act.
Identity numbers are never stored in raw form. Sensitive identifiers are hashed at rest, personal data is transmitted over encrypted connections, and access is restricted. Staff cannot view raw identity numbers.
We keep personal data only as long as needed for the purposes above or as required by law, after which it is deleted or anonymised. Transaction and payment records are retained for the periods required by Indian tax and financial regulations even after account deletion.
Under the DPDP Act you may request access to, correction of, or erasure of your personal data, and you may nominate or withdraw consent. You can delete your account directly in the app (Profile → Delete account), which removes your account and associated personal data subject to the legal retention above. To exercise any right or raise a grievance, contact our Grievance Officer at hello@hstle.in. You also have the right to escalate to the Data Protection Board of India.
Our website and app use essential cookies and basic analytics to operate and improve the service. We default to privacy-preserving settings.
HSTLE is not for anyone under 18. We do not knowingly collect data from minors.
We may update this policy and will post the new date above. Significant changes will be notified in-app.
Grievance Officer, HSTLE — hello@hstle.in. We acknowledge grievances within 48 hours and resolve them within the timelines required by law.