Harmonia Support Agent Privacy Policy

Who is responsible for your information

Harmonia Tech operates Harmonia Support Agent, an Android workspace for independent partners who provide support services and receive payouts from us. This privacy policy covers this separate agent app, including registration, manual identity review, accounts, calls, messages and support. It does not replace the privacy policies of other apps.

Our address is Harmonia Tech, 9/213, Konathukunnu, Thekkumkara, Thrissur, Kerala 680123, India. For privacy requests or grievances, email support@harmoniatechglobal.com or call +91 7012742853.

Information used to operate the agent app

Account and work information includes your name, phone number, account identifier, profile details, sign-in sessions, availability, work-shift records, ratings, call history, earnings and transaction references. We use it to authenticate you, show your work and earnings, route sessions, administer the partner relationship and provide support.

Communications information includes messages and their delivery/read status, call notes, ratings or feedback, blocking choices and safety reports. Call audio is processed through the calling service to connect participants. Call metadata includes participant identifiers, start/end times, duration, status and connection events. We use these records to deliver communications, calculate charges and earnings, troubleshoot failures and address reports or disputes. We keep access and decision records for accountability.

Technical information includes an app-generated device identifier, notification token, device model, operating system and app version, network address, connection events, call-quality measurements and failure diagnostics. We use it for incoming-call and message alerts, session security, compatibility checks and reliability. These diagnostics are different from an uploaded ID image or selfie.

Your working profile, such as display name, avatar, specialisation, rating and availability, may be shown to customers or other authorised users as needed to deliver the service. Your registration ID image and selfie are not part of that working profile. Messages are visible to their recipients; relevant service records may be reviewed by authorised support and safety staff.

Photo ID and selfie collection for registration

For an HR-managed enquiry, we first collect your name and phone number so our team can contact you; no SMS OTP is sent for this enquiry. After HR confirms your contact and application reference and enables document submission, we ask for a supported photo ID and a selfie. We use those images to review your identity manually and decide whether to approve your partner application. Older registration flows may still use an SMS OTP.

Supported documents are a driving licence, passport or voter ID. Your ID photograph may contain printed details such as a document number, date of birth, address, name and photograph. We do not ask you to enter a document number separately. Where possible, cover details that are not needed for the review while keeping your name, photograph and document type clear. Do not upload Aadhaar or PAN for this process.

We also keep your consent choices and notice version, application status, contact and decision timestamps, limited review notes and access/audit records. Restricted staff receive application-state notifications without document images or login codes. Application continuation and recovery credentials, login-attempt records and network information help authenticate requests and prevent abuse. For HR-issued agent login codes, the server stores a protected hash rather than the readable code. These codes are restricted to the agent account. We do not ask for bank information, payout or tax documents in this identity application.

How manual review works

Authorised members of our onboarding team review the submitted images, reach out to you and record a decision. A selfie is a photograph for human comparison; this flow does not perform automated liveness detection, automated facial recognition, biometric-template creation, OCR or government-database verification. We do not send these images to a third-party KYC verification provider.

Submitting an application does not automatically approve or activate an agent account. A team member must record contact and confirm the manual ID and selfie checks before approval. Contract discussions and signing are handled separately; these privacy choices are not acceptance of a partner contract.

Your choices and device access

Before you submit, we ask for separate, unchecked consent to manual photo ID review and to manual selfie comparison. Both are needed to complete this registration method. You may decline; the application will not be submitted for this review. Contact support if you need assistance with the process.

The app uses microphone access for voice calls, notification and incoming-call permissions for alerts, and Bluetooth access for supported audio devices. For registration it may open your device camera or photo picker so you can supply the selected images. You control access through your device settings and picker. The registration flow does not upload your photo library or record your verification conversation. Denying a permission may prevent its related feature from working.

You can withdraw an application before approval from the application screen or contact support to request withdrawal. Withdrawal stops the pending review and removes the uploaded images and identifying application fields from the live application record. A non-identifying status record remains temporarily. Withdrawal does not undo processing already completed. After approval, use the account-deletion process or contact support to request deletion of your agent account.

Who can access it and how it is protected

Application images are available only through authenticated, authorised review access. They are not public profile photos and are not shown to customers or other agents. We restrict staff access, record image access and encrypt application images in storage and protect them in transit.

We use service providers for infrastructure and communications, including Amazon Web Services hosting, Google Firebase Cloud Messaging for alerts, LiveKit or Agora calling technology as configured for a session, and our SMS delivery provider for OTPs. They process the information needed to deliver their functions. Application images are kept within our restricted application storage and are not sent to a third-party KYC verification provider. We do not sell personal information or use this registration flow to train face-recognition models. Information may also be disclosed when legally required or to address a lawful security investigation.

How long we keep registration information

Uploaded photo ID and selfie images are removed from the live application database when a review is approved, rejected, withdrawn or returned for changes. An unfinished upload expires after 30 days; expired images are no longer available for review and are removed by scheduled cleanup. If changes or fresh images are needed, you must submit both images again.

Inactive drafts, applications awaiting requested changes, rejected applications and withdrawn status records are deleted after 90 days without an application update. After approval, we keep a limited application record, including contact details, document type, consent, review notes, decision and access records, for 180 days. The images are not part of that retained approval record. The approved agent account and any separate payout, tax or contract records follow their own applicable retention requirements.

Legacy registration OTP challenge records are removed after two days and legacy applicant sessions expire after 24 hours. An HR-managed application can be resumed using a protected credential saved on the device, valid for up to 90 days unless revoked earlier. HR can issue a single-use recovery code valid for 72 hours if access is lost; completing recovery replaces the previous application session. Scheduled cleanup also removes the linked application record when its agent account has been deleted. Access expiry and live-record deletion are separate from disaster-recovery backup expiry.

Automated database backups use a rolling two-day retention period. Encrypted information removed from the live application database may remain in those backups until they expire; live deletion is not instant erasure of a recovery copy. Backup access is restricted to authorised recovery and operational needs. The two-day period describes automated database backups, not the retention of active account, transaction or legally preserved records.

Account retention and deletion requests

Account and service records are kept while needed to operate your account, maintain transaction and payout records, investigate safety or security issues, resolve disputes and meet legal obligations. The specific 30-, 90- and 180-day periods above apply to registration records; they do not describe every call, message, account or payment record.

In the app, open Account and choose Request account and data deletion. You can prepare an email to support@harmoniatechglobal.com with your registered phone number and send it to our team. Opening the email draft does not send a request or delete your account. We may verify your identity, check active calls and unresolved payments, and contact you about information needed to complete the request. Our team processes deletion of your account and associated personal data, explains any records that must be retained and why, and confirms completion. Deactivate account is a separate option that deactivates access and revokes active sign-in sessions; it does not submit a personal-data deletion request. Some older login methods may reactivate a deactivated account when signing in again. Agents using an HR-issued personal code must have HR reactivate the account before they can sign in.

To request deletion without installing the app, email support@harmoniatechglobal.com with the subject “Harmonia Support Agent — delete my account and data” and the phone number registered to your agent account. You can also use this channel for a data-only deletion request. We may verify your identity before acting and process requests in accordance with applicable law. Do not include an ID image or OTP in your email. Financial, transaction, security or other records may be retained where there is a legitimate requirement; we will explain the applicable retention when responding to your request.

Access, correction, deletion and grievances

You can ask to access or correct your application information, withdraw consent, request deletion or challenge a review outcome by emailing support@harmoniatechglobal.com. Use the subject “Agent privacy request” or “Agent privacy grievance” and include the phone number used for your application so we can locate it. We may need to verify your identity before acting on a request.

Do not email an ID image, Aadhaar number, PAN or selfie unless an authorised support process specifically explains why it is needed and provides a secure channel. You can also write to Harmonia Tech at the address above or call +91 7012742853. We will address requests and grievances in accordance with applicable law.

Notice version and changes

This policy is dated 9 October 2026, version agent-privacy-v4-2026-10-09. The manual registration consent notice uses version manual-agent-v1-2026-10-01. We will publish material changes here and present the applicable notice when asking for registration consent. We will seek a new consent choice when a changed purpose or review process requires it. Continuing to use the app alone is not consent to a new identity-verification purpose.