1.Who We Are
HiVastu (“Company”, “we”, “us”, “our”) is a digital platform providing AI-powered Vastu Shastra analysis services through our website www.hivastu.com and mobile application. Our registered office is located in India. For any privacy concern, contact us at hivastuindia@gmail.com.
2.Information We Collect
(a) Information you provide directly
- Full name, mobile number, email address
- City, state, and purpose of use (buying / renting / owning property)
- Property details: type, size, BHK, floor number
- For Premium users: Date of Birth, Place of Birth, Birth Time (optional)
- For Brokers: company name, RERA registration number, office address, KYC documents
- Any content you submit via the “5-Problem Solver” feature
(b) Automatically collected information
- Device type, operating system, browser type, IP address
- App usage data: pages visited, features used, time spent
- Device compass / magnetometer data — used only during an AR Vastu Compass session, not stored permanently
- Location (city / state level only) for pricing and regional relevance — not real-time GPS tracking
- Cookies and similar technologies for session management
3.How We Use Your Information
- To create and manage your account
- To generate your Vastu analysis report using AI
- To process payments through Razorpay (we do not store card / bank details)
- To send transactional communications: OTP, payment confirmation, report delivery
- To send marketing communications — only with your explicit consent, unsubscribe anytime
- To improve our AI models and analysis accuracy (anonymised data only)
- To comply with legal obligations under Indian law
- For brokers: to verify RERA credentials and manage client-facing reports
4.Legal Basis for Processing (DPDP Act 2023)
- Consent: You provide explicit consent at registration and may withdraw it anytime by writing to hivastuindia@gmail.com.
- Contractual Necessity: Processing required to fulfil the service you have paid for.
- Legal Obligation: Processing required to comply with Indian law (e.g. GST records, dispute resolution).
- Legitimate Interest: Fraud prevention, platform security, and improving service quality.
5.Sensitive Personal Data
Under the IT (SPDI) Rules 2011, we treat the following as Sensitive Personal Data: financial information (payment data), passwords, and biometric data (if any). We collect Date of Birth only for Jyotish matching in Premium plans and do not sell, trade, or rent this information to any third party.
6.Data Sharing — Who We Share With
- Razorpay: payment processing only, governed by Razorpay's privacy policy.
- Meta Platforms (WhatsApp Business API): OTP and transactional messages only.
- Google Cloud / Vertex AI: AI report generation and secure hosting on Google Cloud infrastructure.
- Cloudflare R2: encrypted storage of reports and uploaded images.
- Firebase / FCM: push-notification delivery — no personal data beyond the push token.
- Astrology API (Premium only): Date of Birth + Place of Birth sent for Jyotish calculation; no name is sent.
- We DO NOT sell, rent, or trade your personal data to any third party for marketing purposes.
- We may disclose data to government / law-enforcement authorities if required by valid Indian law.
7.Brokers and Client Data
When a Broker generates a report for their client, the broker is responsible for obtaining the client's consent to share their data with HiVastu. HiVastu acts as a data processor for client data entered by brokers. Such data is stored securely and is accessible only to that specific broker and HiVastu administrators.
8.Camera and Location Access
The AR Vastu Compass feature requires camera access and compass / magnetometer sensor access. The camera feed is processed locally on your device during the session — no video or continuous camera feed is transmitted to our servers. Only the captured directional data (compass readings) is sent for analysis. Location access, if requested, is used only at city level for regional pricing and content. We do not track your real-time GPS location.
9.Data Retention
- Account data: retained while your account is active; deleted within 30 days of a deletion request.
- Reports: retained for the validity period of your plan (30–90 days individual, 6 months for broker).
- Payment records: retained for 8 years as required under Indian tax law.
- OTP logs: deleted after 24 hours.
- KYC documents (brokers): retained for the duration of engagement + 2 years.
10.Your Rights Under DPDP Act 2023
- Right to Access: request a copy of your personal data.
- Right to Correction: request correction of inaccurate data.
- Right to Erasure: request deletion (subject to legal retention requirements).
- Right to Withdraw Consent: withdraw consent for processing at any time.
- Right to Grievance Redressal: file a complaint with our Data Protection Officer.
To exercise any right, email hivastuindia@gmail.com. We respond within 30 days.
11.Security Measures
We implement reasonable security practices as required under Rule 8 of the IT (SPDI) Rules, 2011, including: SSL/TLS encryption for data in transit; AES-256 encryption for sensitive data at rest; role-based access control; regular security audits; and secure cloud infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12.Children's Privacy
HiVastu's services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will delete it promptly.
13.Cookies
We use essential cookies for session management and authentication, and anonymised analytics cookies (Google Analytics) to understand usage patterns. You may disable cookies in your browser settings; however, some features may not function correctly.
14.Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email and/or in-app notification at least 7 days before they take effect. Continued use after the effective date constitutes acceptance of the revised policy.