Privacy Policy

1. Introduction

Welcome to Grihafy ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered Vastu analysis services.

Please read this Privacy Policy carefully. By accessing or using our services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Business Information

3. Information We Collect

3.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account or join our waitlist
• Submit your email to access analysis reports
• Contact us via email or contact forms
• Subscribe to our newsletter or marketing communications
• Make a payment for premium services

The personal information we collect may include:

• Contact Information: Name, email address, phone number
• Account Information: Username, password (stored securely in encrypted form)
• Payment Information: Billing address, payment method details (processed securely through third-party payment gateways)
• Communication Data: Any information you provide when contacting our support team

3.2 Floor Plan Images and Analysis Data

When you use our Vastu analysis service, we collect:

• Floor Plan Images: Digital images or PDF files of floor plans you upload for analysis
• Analysis Results: Generated Vastu scores, detected rooms, compliance insights, and recommendations
• Usage Data: Number of analyses performed, dates of analyses, and analysis history

3.3 Automatically Collected Information

When you access our website, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on pages, click patterns, referral sources
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies (see Section 8 for details)
• Analytics Data: We use Google Analytics 4 to understand user behavior and improve our services

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Service Delivery

• Process and analyze your floor plan images using AI technology
• Generate Vastu compliance scores, insights, and recommendations
• Deliver analysis reports via email
• Manage your account and subscription services
• Process payments and maintain transaction records
• Provide customer support and respond to your inquiries

4.2 Communication and Marketing

• Send you service-related notifications and updates (e.g., analysis completion, account changes)
• Send promotional emails about new features, special offers, and relevant content (you can opt-out at any time)
• Respond to your comments, questions, and support requests
• Conduct surveys and gather feedback to improve our services

4.3 Service Improvement and Analytics

• Analyze usage patterns to improve our website and services
• Monitor and analyze trends, usage, and activities for quality assurance
• Develop new features and enhance existing functionality
• Train and improve our AI models (using anonymized data)

4.4 Security and Legal Compliance

• Detect, prevent, and address technical issues, fraud, and abuse
• Enforce our Terms and Conditions and other policies
• Comply with legal obligations and respond to legal requests
• Protect our rights, property, and safety

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

5.1 Service Providers and Third-Party Partners

We share your information with trusted third-party service providers who assist us in operating our website and delivering our services:

• AI Processing: Google Gemini AI (for floor plan analysis)
• Cloud Storage: Vercel Blob Storage (for storing uploaded images)
• Analytics: Google Analytics 4 (for website analytics and user behavior tracking)
• Email Services: Brevo or Mailchimp (for email delivery and marketing automation) - To be integrated
• Payment Processing: Razorpay or Stripe (for secure payment processing) - To be integrated
• Hosting and Infrastructure: Vercel, MongoDB Atlas (for website hosting and database services)

These third parties are bound by contractual obligations to keep your information confidential and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies, law enforcement).

5.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal information.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Information: Retained for the duration of your account plus 3 months after account closure (unless you request immediate deletion)
• Floor Plan Images: Retained for 90 days after analysis, then automatically deleted (unless you have an active subscription)
• Analysis Reports: Retained for the duration of your account or until you request deletion
• Transaction Records: Retained for 7 years to comply with tax and accounting regulations
• Marketing Communications: Retained until you unsubscribe

When we no longer need your information, we will securely delete or anonymize it so that it cannot be linked back to you.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Secure Storage: Personal data is stored in secure databases with access controls
• Password Protection: User passwords are hashed and salted using industry-standard algorithms
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments
• Limited Access: Access to personal information is restricted to authorized personnel only
• Payment Security: Payment information is processed through PCI-DSS compliant payment gateways (we do not store credit card details on our servers)

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small data files stored on your device.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., authentication, session management)
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics 4)
• Functional Cookies: Remember your preferences and settings (e.g., language, theme)
• Marketing Cookies: Track your browsing activity to show you relevant advertisements (future feature)

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. For more information on how to manage cookies, visit www.allaboutcookies.org.

8.3 Google Analytics

We use Google Analytics 4 to collect and analyze website usage data. Google Analytics uses cookies to help us understand how visitors interact with our website. The information generated by the cookie about your use of the website is transmitted to and stored by Google. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

9. Your Privacy Rights

Under applicable data protection laws, you have certain rights regarding your personal information:

9.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of your data in a structured, commonly used format.

9.2 Correction and Update

You can update or correct your personal information at any time through your account settings or by contacting us.

9.3 Deletion (Right to be Forgotten)

You can request deletion of your personal information, subject to certain legal exceptions (e.g., transaction records required for tax purposes). To delete your account and data, contact us at support@grihafy.com.

9.4 Opt-Out of Marketing

You can opt-out of receiving marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your communication preferences in your account settings. Please note that you will still receive essential service-related communications.

9.5 Restrict or Object to Processing

You have the right to request that we restrict or stop processing your personal information under certain circumstances.

9.6 Withdraw Consent

Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@grihafy.com, and we will delete such information from our systems.

11. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than India, including the United States and the European Union, where our service providers are located. These countries may have data protection laws that differ from those in India.

We take appropriate measures to ensure that your information receives adequate protection, including using standard contractual clauses approved by relevant authorities and ensuring our service providers implement appropriate safeguards.

12. Third-Party Links and Services

Our website may contain links to third-party websites, plugins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top
• Notify you via email if the changes are significant (for registered users)
• Display a prominent notice on our website for a reasonable period

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated Privacy Policy.

14. Compliance with Indian Data Protection Laws

We are committed to complying with applicable Indian data protection laws, including:

• Information Technology Act, 2000 and Rules thereunder (particularly the Reasonable Security Practices Rules)
• Digital Personal Data Protection Act, 2023 (when enforced)
• Any other applicable privacy and data protection laws

We implement reasonable security practices and procedures as required by Indian law to protect your personal information from unauthorized access, use, disclosure, or destruction.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within 30 business days.