Privacy Policy

1. Who We Are

Data Controller:

2. Information We Collect

2.1 Information You Provide Directly

When you create an account, set up an organisation, or use the Platform, we may collect:

• Full name, professional designation, and organisation name
• Email address and phone number (including WhatsApp number)
• Login credentials (passwords are encrypted and never stored in plain text)
• Profile information such as your role (Architect, Interior Designer, Developer, Contractor, Supervisor, or Client)
• Project data you enter, including task details, site communications, drawings, snag lists, material records, and approval notes
• Media files such as photographs and documents uploaded to the Platform

2.2 Information Collected Automatically

When you use the Platform, we automatically collect certain technical data:

• Device type, operating system, and browser or app version
• IP address and approximate location derived from it
• Session activity, page views, and feature usage logs
• Error reports and diagnostic information to improve stability

2.3 Information from Third-Party Integrations

If you use integrations or receive communications through our Platform:

• WhatsApp message delivery status may be tracked via the wa.me deep-link mechanism
• Translation services (DeepL) process text you enter when multilingual output is requested; we do not store translations separately after delivery
• Firebase Cloud Messaging is used to deliver push notifications to your device

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and organisation workspace
• To provide core Platform functionality: task tracking, site communications, drawings management, materials and approvals workflows
• To send transactional emails (invitations, password resets, notifications) via our email service provider
• To deliver in-app and push notifications relevant to your projects
• To support multilingual use of the Platform in English, Hindi, and Gujarati
• To diagnose technical issues, prevent fraud, and ensure Platform security
• To comply with applicable legal obligations
• To communicate product updates, new features, or relevant announcements (you may opt out at any time)

We do not use your project data, site communications, or uploaded media for advertising purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under applicable law:

• Contract performance – processing necessary to provide the services you have subscribed to
• Legitimate interests – improving Platform quality, preventing abuse, and communicating relevant product updates
• Legal obligation – retaining records as required by Indian law, including the Information Technology Act, 2000 and rules thereunder
• Consent – where you have explicitly opted in, for example to marketing communications

5. How We Share Your Information

5.1 Within Your Organisation

The Platform is multi-tenant. Data you create is accessible to other users within your organisation's workspace based on their assigned roles and permissions. Anantam's technical team may access data in the course of providing support, subject to confidentiality obligations.

5.2 Service Providers

We share data with carefully selected third-party providers who process data on our behalf:

• Supabase – database hosting and authentication infrastructure (data hosted in the region configured for your account)
• Firebase (Google) – push notification delivery
• Brevo (formerly Sendinblue) – transactional email delivery
• DeepL – real-time text translation
• Apple App Store / Google Play – app distribution

These providers are contractually required to process data only as instructed and to maintain appropriate security standards.

5.3 Legal and Regulatory Disclosures

We may disclose your information if required to do so by law or in response to a valid request from a government authority, court, or regulator. We will notify you of any such request unless legally prohibited from doing so.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of Anantam Designs' business, your data may be transferred to the successor entity. You will be notified prior to any such transfer.

We do not sell your personal data to any third party.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Platform. Specifically:

• Account data is retained for the duration of your subscription and for up to 6 months after termination, after which it is deleted or anonymised
• Project data (tasks, communications, drawings, etc.) is retained for the duration of your subscription; you may request earlier deletion
• Backup copies may persist for up to 90 days after deletion from the live Platform
• Billing and transaction records are retained for a minimum of 7 years in compliance with Indian financial regulations

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Row-level security (RLS) policies enforcing strict organisation-level data isolation
• Encryption of passwords and sensitive credentials
• HTTPS / TLS for all data in transit
• Role-based access controls limiting data access to authorised personnel
• Regular security reviews of our infrastructure

No method of data transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access – request a copy of the personal data we hold about you
• Correction – request correction of inaccurate or incomplete data
• Deletion – request deletion of your personal data, subject to legal retention obligations
• Portability – receive your data in a structured, machine-readable format
• Restriction – request that we restrict processing of your data in certain circumstances
• Objection – object to processing based on legitimate interests
• Withdrawal of consent – where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at hello@anantamdesigns.com. We will respond within 30 days. Identity verification may be required before we process your request.

9. Cookies and Tracking

The web version of Anantam Site Manager may use cookies and similar technologies to maintain your session, remember your preferences, and collect usage analytics. You may control cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

We do not currently use third-party advertising or behavioural tracking cookies.

10. Children's Privacy

Anantam Site Manager is intended for use by professionals in the construction and design industry. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it promptly.

11. International Data Transfers

Anantam Designs is based in India. Our service providers (including Supabase, Firebase, Brevo, and DeepL) may process data in jurisdictions outside India. Where data is transferred internationally, we ensure appropriate safeguards are in place, including contractual protections, consistent with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this document. For material changes, we will notify you by email or via an in-app notification at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes your acceptance of the revised policy.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the name and contact details of the Grievance Officer are:

The Grievance Officer will acknowledge receipt of your complaint within 5 business days and resolve it within 30 days.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to us: