Privacy Policy

Last updated: 2026-07-07

What we collect.

(a) Premises facts you enter or that our AI extracts and you confirm (room placements, directions, plot details); (b) the generated report; (c) your email address, only if you purchase; (d) basic technical logs (IP address, request IDs) for security and abuse prevention; (e) anonymous usage events (e.g. “analysis completed”).

We use Google Analytics to understand aggregate usage; it does not receive your premises data.

What we do NOT store.

Uploaded floor-plan images, photos, and videos are processed transiently — held only in memory or short-lived temporary files that are deleted automatically when your request completes — and are never retained.

Why we process it (purpose).

To generate your report, deliver purchases by email, prevent abuse, and improve the service. We do not sell personal data. We do not use your data to train AI models.

Processors we use.

Payment: Razorpay (we never see card/UPI credentials). Email: Resend. AI input reading: Anthropic (receives uploaded images/text transiently to extract facts). Hosting: Railway, Vercel, Cloudflare.

Retention.

Free reports: deleted after 90 days. Paid reports and the purchase email: retained so your report link keeps working, until you ask us to delete them. Security logs: up to 12 months.

Your rights (DPDP Act, 2023).

You may request access to, correction of, or deletion of your personal data, or withdraw consent, by emailing privacy@vastuverdict.com from the relevant email address with your report link. We respond within 90 days (usually much faster). You may raise unresolved grievances with the Data Protection Board of India.

Breach notification.

If a breach affects your personal data we will inform you without delay and report to the Data Protection Board as required by law.

Children.

The service is not directed at children under 18.

Grievance Officer (Consumer Protection (E-Commerce) Rules, 2020).

Phanidhar Madduri, VastuVerdict, Kakinada, Andhra Pradesh, India · privacy@vastuverdict.com. Complaints are acknowledged within 48 hours and resolved within 30 days. (The 90-day window above applies only to DPDP data-access/erasure requests.)