Privacy Policy

1. What we collect

• Floor plans & building details you upload or enter: the plan image, room layout, orientation, and any building attributes (roof, walls, shading, water, etc.).
• Location: a pincode or city you provide, used to resolve the local climate zone. We do not track your precise device location.
• Contact details: your email address, if you join the newsletter, take the pledge, or request a report.
• Payment information: if you buy a paid report, payment is handled by our payment processor. We do not store your full card details on our servers.
• Usage & device data: basic, privacy-respecting analytics and logs (pages visited, errors) to keep the service working.

2. Why we use it

• To generate your report and the Vāstav Score, and to improve our analysis.
• To send a report you asked for, and (with consent) occasional newsletter notes.
• To process payments and provide support.
• To keep the service secure, debug issues, and meet legal obligations.

We do not sell your personal data, and we do not use your floor plans for advertising.

3. Service providers (sub-processors) we share with

We use a small number of trusted processors to run Vāstav. Each receives only what it needs, under a data-processing agreement that binds it to protect your data and process it only on our instructions:

• Database & storage: Supabase, hosted in the Mumbai (ap-south-1) region so your records stay in India.
• AI analysis: a third-party AI vision service. Your floor-plan image is sent only with your consent to detect rooms and layout; the provider processes it to return a result and does not own your data.
• Email: Resend, to deliver report links and the newsletter you asked for.
• Payments: Razorpay, for paid reports. Card details go to Razorpay, not us.

Some providers may process data outside India; where they do, we rely on appropriate contractual safeguards (data-processing agreements / standard contractual clauses). We do not sell your data to anyone.

4. How long we keep it

We keep your data only as long as needed for the purposes above or as required by law. You can ask us to delete your floor plans, report and account data at any time (see your rights below), and we will do so unless we must retain something for a legal reason.

5. Your rights

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you can:

• Access the personal data we hold about you, and ask us to correct it.
• Ask us to delete your data.
• Withdraw consent (e.g. unsubscribe from the newsletter) at any time.
• Raise a grievance with our Grievance Officer (below).

To exercise any of these, use our data-rights request form or email grievances@vastav.co.in. We verify your identity before acting on a request.

6. Cookies & analytics

We use essential cookies to make the site work and minimal analytics to understand usage. You can control cookies through your browser settings.

7. Children

Before you begin a reading we ask you to confirm that you are 18 or older. We never ask for your date of birth. If you are under 18, we require a parent or guardian to provide their name, email and consent before we process the floor plan: the verifiable parental consent the DPDP Act requires. We do not knowingly process a child’s data without it.

8. Security

We use reasonable technical and organisational measures to protect your data. No system is perfectly secure, but we work to keep yours safe and to act quickly if anything goes wrong.

9. Changes to this policy

We may update this policy as the product evolves. We’ll change the “last updated” date above and, for significant changes, let you know.

10. Contact & Grievance Officer

For questions, requests, or grievances about your data, you can reach our Grievance Officer:

Varalika Sahu · Grievance Officer
grievances@vastav.co.in

We aim to respond within the timelines required by law. You may also complain to the Data Protection Board of India.