Privacy policy

What we hold about you, why we hold it, and who else sees it. Specific about the parts most policies leave vague.

Last updated 2026-08-29

1.What we collect

Your mobile number
This is your identity on SajiloKaam. There is no email and no password. We use it to sign you in, to send the professional's arrival updates, and so the person coming to your door can call you.
Your name and preferred language
You give us these once, at sign-up. The name is not optional because a professional standing at a gate needs to know who they are visiting.
What you type into the search box
The description of your problem, so we can work out which trade you need and what it should cost.
Photos you attach
Sent to our AI provider to be read, then discarded. We do not store them — see section 3.
Your bookings and address
Where the work is, when it is, what was agreed, what was paid.
Basic technical data
IP address and browser, used to apply rate limits and to keep the service up. We do not run advertising trackers.

2.The triage log, in detail

Every time you describe a problem, we write one row to a table called triage_logs. We are naming it because a vague sentence about “usage data” would hide something you should be able to see clearly.

That row holds: the text you typed, whether a photo was attached (yes or no — not the photo), the category and urgency we decided, the price band we quoted, how long it took, whether the answer came from the AI or from our own keyword matcher, and whether a safety hazard was detected.

It exists for one reason: it is the only record of whether our published prices are right and whether the safety detection is working. We read it in aggregate. It is linked to your account when you are signed in, so that you can ask us to delete it.

3.Photos are not stored

When you attach a photo, your browser shrinks it and sends it to us. We pass it to our AI provider to be read alongside your description, and we keep the answer. We do not write the image to a database, we do not put it in file storage, and it is not attached to your booking.

The only trace left is a yes-or-no flag in the triage log recording that a photo was sent. This is deliberate: a photograph of the inside of someone's home is the most sensitive thing this product touches, and the safest way to hold it is not to.

4.The AI, and what it sees

Your description and any photo are sent to Anthropic, who run the Claude model we use to decide which trade you need. That processing happens on their servers, outside Nepal.

We send only what you typed and the photo. We do not send your name, your number, your address or your booking history.

If the AI is unavailable, a keyword matcher running on our own servers answers instead, and nothing leaves our infrastructure. You get an answer either way.

5.Who else sees your data

The professional you book
Your name, mobile number and the address of the job. They need all three to arrive and to call you if they cannot find the gate. They do not see your other bookings.
Our SMS provider
Your mobile number, to deliver the sign-in code and arrival updates.
eSewa and Khalti
Only when you choose to pay that way, and only what the payment needs. We never see or hold your card or wallet credentials.
Anthropic
Your problem description and photo, as in section 4.
Supabase
Our database and authentication provider, who host the data described above on our behalf.

We do not sell your data. We do not share it for advertising. We will disclose it if a Nepali court or a law enforcement authority lawfully requires it.

6.How long we keep things

  • Your account and booking history: while your account is open, and for seven years after a booking, because tax and accounting rules require it.
  • Triage logs: 24 months, then deleted.
  • Sign-in codes: minutes. They expire and are discarded.
  • Photos: not retained at all.

7.Your rights

You can ask us to show you everything we hold about you, to correct anything wrong, or to delete your account and its data. Call the number on our contact page, or write to us, and we will do it within 30 days.

Some records survive deletion where the law requires us to keep them — a completed booking that appears in our accounts, for example. We will tell you exactly what was kept and why.

8.Cookies

Three, and no more: one that keeps you signed in, one that remembers whether you read the site in Nepali or English, and one that remembers your light or dark theme.

There are no advertising cookies and no third-party analytics trackers on this site.

9.Security

Data is encrypted in transit and at rest. Access to the database is restricted by row-level security rules, so one customer's records cannot be read by another. Sign-in is by one-time code, which means there is no password of yours for anyone to steal from us.

No system is perfect. If we ever suffer a breach that affects you, we will tell you and the relevant authority without delay.

10.Children

SajiloKaam is for people aged 18 and over. We do not knowingly collect data about children. If you believe a child has created an account, tell us and we will remove it.

11.Contact and changes

Questions about any of this go through our contact page. We will update this policy as the product changes, and the date at the top will change with it.