Privacy Policy
1. Introduction
This Privacy Policy explains how Amika Technologies ("we", "us", "our") collects, uses, discloses, and protects personal information when you visit constructx.app, create an account, or use the ConstrucTx web application at web.constructx.app (together, the "Service").
ConstrucTx is a financial operations platform for interior designers, architects, and contractors. Businesses use it to record transactions, vendor and contractor billing, site finances, loans, petty cash, and related records.
Two different roles. It is important to distinguish between:
- Data we control. Information about our customers, prospects, and website visitors: account details, billing information, support conversations, and enquiries. We decide how and why this is processed, so we are the data fiduciary (controller) for it. This Policy governs that data.
- Data our customers control. Records our business customers enter into the Service about their own clients, vendors, contractors, employees, and other third parties. We process that only on the customer's instructions as a data processor. If your details are in the Service because you deal with one of our customers, please contact that business. Their privacy notice applies, and we will refer requests to them.
2. Information We Collect
2.1 Information you provide
| Category | Examples |
|---|---|
| Account information | Name, mobile number with country code, email, password (stored only in hashed form), profile photo |
| Company information | Company name, logo, phone number, GST number and registration type, company registration number, business type |
| Billing information | Plan, invoices, and payment history for your ConstrucTx subscription. We do not store card numbers or bank login credentials. |
| Content you enter into the Service | Sites (name, address, city, state, pincode, quote value), transactions, company expenses, payment accounts (name and identifier), vendors and contractors (name, phone, email, GST number and address, credit days), estimates, challans, invoices, payments, returns, loans (lender or party name, amount, rate, EMI details), and petty cash entries |
| Uploaded files | Attachments such as bills, challans, invoices, and payment proofs |
| Support and communications | Messages to support, feedback, and call or meeting notes |
| Enquiries | Name, email, phone, company, role, and message you submit through the demo or free trial form on our website. The form hands your details to a WhatsApp chat with us. |
2.2 Information collected automatically
| Category | Examples |
|---|---|
| Activity records | Who created or last updated a record and when, and activity history on transactions and petty cash accounts |
| Device and technical data | IP address, browser type and version, operating system |
| Log data | API requests, error reports, and performance diagnostics |
| Browser storage | See Section 8 |
2.3 Information from third parties
- Authentication and SMS providers: confirmation that the one-time password sent to your mobile number was verified.
- Invitations: contact details submitted by a colleague who adds you as a user of their company.
2.4 Sensitive information
The Service holds financial records, and some of those records include personal details of your vendors, contractors, clients, and employees. We do not intentionally collect health, biometric, religious, or precise geolocation data, or government identity numbers of individuals, and we ask that you not submit them unless we have agreed in writing.
3. How We Use Information
We use personal information to:
- Provide the Service: create and administer accounts, verify mobile numbers, authenticate users, apply the permissions each company has set, store your records and files, and generate ledgers, reports, and exports.
- Process payments: bill subscriptions and issue invoices and refunds.
- Support you: respond to enquiries, set up trials, troubleshoot, and provide technical assistance.
- Maintain and improve: monitor performance, diagnose faults, analyze aggregate usage patterns, test features, and develop new functionality.
- Secure the Service: detect and prevent fraud, abuse, unauthorized access, and security incidents; enforce our Terms.
- Communicate: send one-time passwords, service announcements, security alerts, billing notices, and product updates. Transactional messages are not optional while you have an account.
- Market: contact you about ConstrucTx where permitted, subject to your right to opt out at any time.
- Comply with law: meet legal, tax, accounting, and regulatory obligations and respond to lawful requests.
Automated decision-making. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
4. Legal Bases for Processing
We process personal data on the grounds permitted by the Digital Personal Data Protection Act, 2023 and, where it applies to you, other data protection law.
| Purpose | Basis |
|---|---|
| Creating your account and providing the Service you signed up for | Your consent, given when you register, and performance of our contract with you |
| Responding to an enquiry or trial request you send us | Information you voluntarily provide for that purpose |
| Security, fraud prevention, and product improvement | Our legitimate interests, balanced against your rights |
| Marketing messages | Your consent, which you can withdraw at any time |
| Tax, accounting, and regulatory record-keeping | Legal obligation |
Records about your clients, vendors, contractors, and employees are processed on the instructions of the business that entered them, which is responsible for having a lawful basis.
5. How We Share Information
We do not sell personal information, and we do not share it for advertising. We disclose information only as follows:
5.1 Service providers (sub-processors). Vendors who process data on our behalf under contracts limiting their use to our instructions:
- Database, authentication, and file storage: Supabase, hosted in Mumbai, India
- Application hosting and background job infrastructure: Hetzner, hosted in Singapore
- SMS delivery of one-time passwords: Twilio
- Messaging for enquiries and support: WhatsApp (Meta)
5.2 Within your organization. Owners and administrators of a company can access the records of that company and see which user created or updated them. What each user can see is controlled by the role-based permissions the company configures. Data belonging to one company is not visible to another.
5.3 Legal and safety. We may disclose information where we believe in good faith it is necessary to comply with law, valid legal process, or a government request; to enforce our Terms; or to protect the rights, property, or safety of any person. Where legally permitted, we will notify you before disclosing your data in response to such a request.
5.4 Corporate transactions. In connection with a merger, acquisition, financing, or sale of assets, information may be transferred, subject to this Policy or a materially equivalent successor policy. We will notify you of any change in control affecting your data.
5.5 With your consent. For any other purpose disclosed to you at the time. For example, we show a customer's name and logo on our website only as permitted by our Terms, and you may opt out.
6. International Transfers
We are based in India. Your information is stored and processed in India (Mumbai) and Singapore and may be processed in other countries where our service providers operate. Where personal data is transferred outside India, we do so in line with applicable law and under contracts that require the recipient to protect it.
7. Data Retention
We keep personal information only as long as necessary for the purposes described, unless a longer period is required by law.
| Data | Retention period |
|---|---|
| Account and profile data | Duration of the account, plus 90 days after closure |
| Company records and uploaded files | Duration of the subscription; deleted or anonymized within 90 days after termination, subject to backup cycles |
| Generated export files (Excel, PDF) | Deleted automatically after they expire, 48 hours after generation |
| Billing and tax records | 8 years, or as required by applicable tax law |
| Support conversations and enquiries | 24 months from resolution |
| Security and access logs | 6 months |
| Marketing contacts | Until you opt out, plus a suppression record to honor your opt-out |
Backups are retained on a rolling 30-day cycle and overwritten in the ordinary course.
8. Cookies and Browser Storage
We keep browser-side storage to what the Service needs to work:
- Strictly necessary (web application). Your browser's local storage holds your sign-in token and the companies and branches you have access to, including the one you last selected. Without these you cannot stay signed in. They are cleared when you log out.
- Functional (website). constructx.app remembers your light or dark theme preference in local storage.
We do not currently use advertising cookies or third-party analytics trackers. If that changes, we will update this Policy and, where required by law, ask for your consent first. You can clear local storage or block cookies in your browser settings, though you will then be signed out and core features may stop working.
9. Your Rights and Choices
Subject to applicable law, you have the right to:
- Access a summary of the personal information we hold about you and how it is processed
- Correct inaccurate or incomplete information, and have it updated
- Delete your information, subject to legal retention requirements
- Withdraw consent at any time, without affecting prior processing
- Nominate another individual to exercise your rights if you die or become incapacitated
- Raise a grievance with us, and if it is not resolved, complain to the Data Protection Board of India
How to exercise. Email amika.technologies.6@gmail.com or use the controls in your account. We will verify your identity and respond within 30 days, or sooner where the law requires.
Marketing opt-out. You can ask us to stop marketing messages at any time by replying to the message or emailing us. Service and transactional messages cannot be opted out of while your account is active.
If your data was entered by one of our customers. If you are a vendor, contractor, client, or employee of a business that uses ConstrucTx, direct your request to that business. We will forward any request we receive and assist them in responding.
10. Security
We maintain administrative and technical safeguards designed to protect personal information, including:
- Encryption in transit (TLS) and at rest
- Passwords stored only in hashed form
- Mobile number verification by one-time password at registration
- Time-limited sign-in sessions
- Role-based access control configured per company, with each company's data isolated from other companies
- Rate limiting on the application, with stricter limits on sign-in and registration
- Limits on the size and number of uploaded files
- Access to production systems restricted to authorized personnel
No system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the Data Protection Board of India as required by applicable law and without undue delay.
11. Children's Privacy
The Service is intended for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact amika.technologies.6@gmail.com and we will delete it.
12. Region-Specific Disclosures
12.1 India (DPDP Act, 2023). Our grievance officer is Amit Gajjar, reachable at amika.technologies.6@gmail.com and the address in Section 14. You may access, correct, and erase your personal data, nominate another individual to exercise your rights, and raise grievances with us before approaching the Data Protection Board of India.
12.2 Other jurisdictions. ConstrucTx is built for and offered to businesses in India. If you use the Service from another country, your information will be processed in India and the locations in Section 6, and you may have additional rights under your local law. Contact us to exercise them.
13. Changes to This Policy
We may update this Policy from time to time. We will post the revised version with a new "Last Updated" date and, for material changes, give notice by email, SMS, WhatsApp, or in-app notification at least 30 days in advance.