Privacy Policy

This is a plain-language summary of how Construvex handles your information. It is intentionally short and honest. It is a starting point and should be reviewed by a qualified legal advisor before you rely on it at scale, but everything below reflects what we actually do today.

Who we are
Our role: your data vs your buyers' data
What we collect
How we use it
Analytics and cookies
Who we share it with
Where your data lives
How we protect it
How long we keep it
If something goes wrong
Your rights
Contact and grievance redressal

Who we are

Construvex is a construction-management software product for real estate developers in India. For any privacy question, contact us at [email protected].

Our role: your data vs your buyers' data

Two different sets of data flow through Construvex, and our responsibilities differ for each.

Your own account data is the details you give us to open and run a Construvex account. Here we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023, and this policy governs what we do with it.
Your business data, including your buyers' details is everything you and your team enter to run your projects. Here you are the Data Fiduciary and we are your Data Processor. You decide what to collect, why, and for how long; we process it only on your instructions, to provide the product. Your own privacy notice, not this one, governs your relationship with your buyers, and responding to their access, correction, and erasure requests is your responsibility. We will help you action them.

What we collect

When you request a demo or contact us: the details you submit in our form. Typically your name, work email, company, city, and optionally your phone number and message.
When you use the product (as a customer): your account details and the project, sales, payment, and construction data you and your team enter into Construvex to run your business.
Automatically: basic, aggregated usage statistics about our website (see Analytics below). We do not build advertising profiles.

We do not intentionally collect sensitive personal data through our marketing site, and we ask you not to submit it in free-text fields.

We do not collect Aadhaar numbers. Construvex has no Aadhaar field, because Aadhaar is not required to buy property; PAN together with a photo ID satisfies the statutory requirement. We ask customers not to enter Aadhaar numbers into free-text fields either.

Construvex does provide a PAN field on the buyer record, because PAN is genuinely required for property transactions above ₹10 lakh (Rule 114B) and for TDS filing. PAN is masked in data exports.

How we use it

To respond to your demo request or enquiry and to contact you about Construvex.
To provide, secure, and improve the product for customers.
To meet legal, tax, and compliance obligations.

We do not sell your personal data.

Analytics and cookies

We use two kinds of analytics:

Cookieless traffic counts (Cloudflare Web Analytics): aggregate page-view statistics only. This sets no cookies and does not track you across other websites; it runs without consent.
Google Analytics, only if you accept. When you first visit, a consent banner asks whether we may use Google Analytics to understand how visitors use the site. It sets cookies only after you accept; if you decline (or ignore the banner), it never loads. You can change your mind by clearing this site's data in your browser, which brings the banner back.

Essential cookies may be used only where strictly necessary for the site or product to function.

We share data only with service providers who help us run Construvex, such as our cloud hosting, database, email delivery, form, and analytics providers, under agreements that limit them to processing it on our behalf. We may disclose information where required by law.

Where your data lives

We host Construvex on infrastructure located in India (Mumbai region) wherever practical. Some service providers may process limited data in other regions; where they do, we rely on appropriate safeguards.

How we protect it

In transit: traffic to Construvex is encrypted with TLS, including the connection between the application and its database.
At rest: our database storage and backup volumes are encrypted (AES-256) by our hosting provider.
Separation: each organization's data lives in its own database, so one customer's records are not reachable from another's account.
Access control: access is role-based, and security-relevant actions are written to an audit log. Statutory identifiers such as PAN are redacted from those audit records.
Exports: PAN is masked in CSV exports, so a downloaded file does not carry the full number.

No system is perfectly secure, and we will not claim otherwise.

How long we keep it

Demo/contact enquiries: for as long as needed to follow up, then a reasonable period afterwards.
Customer account data: for the life of your account. Within the product, files you delete sit in a recoverable trash for about 30 days before being permanently purged; audit logs are kept for one year by default (each organization can configure this); and certain compliance records, such as construction-progress history, are retained as a regulatory trail.
After account closure: data is deleted or anonymised once the limited period needed for legal, tax, and backup purposes has passed (system backups roll off on their own schedule).

If something goes wrong

If we become aware of a personal data breach affecting your data, we will notify you without undue delay, and notify the Data Protection Board of India where the law requires it. Our notice will describe what happened, what data was involved, what we are doing about it, and what you can do.

If you are a customer and the breach affects your buyers' data, you remain the Data Fiduciary for those individuals, and we will give you what you need to make your own notifications.

Report a suspected security problem to [email protected].

Your rights

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you can ask us to access, correct, or delete your personal data, nominate someone to exercise these rights on your behalf, or ask us to stop contacting you. Email [email protected] and we will respond within a reasonable time.

If you are a buyer whose details a developer entered into Construvex, that developer, not Construvex, is the Data Fiduciary for your data. Please contact them directly. If you cannot reach them, write to us and we will help you make contact.

Contact and grievance redressal

For any privacy question, request, or complaint, contact our grievance officer:

Email: [email protected]
Response: we aim to acknowledge within 72 hours and resolve within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.