This Privacy Policy explains how MakanVastu.com collects, uses, stores, shares and protects digital personal data. It is intended to support obligations under applicable Indian information technology, data protection and consumer laws, including the Digital Personal Data Protection Act, 2023 and rules brought into force from time to time.
We process data to create and secure accounts; generate and deliver reports; administer subscriptions and payments; provide requested service enquiries; maintain consent and audit evidence; prevent fraud; respond to support and legal requests; improve reliability; comply with law; and send necessary transactional communications. We will seek consent where consent is the applicable basis and provide a clear notice describing the data and purpose.
Registration requires express acceptance of the Terms and Privacy Policy. Checkout separately records acceptance of relevant payment/refund terms. Service requests require contact consent. Consent may be withdrawn for future processing by contacting the grievance channel, but withdrawal will not invalidate lawful processing already undertaken and may make certain requested services unavailable.
The platform is intended for persons legally competent to contract. We do not knowingly permit children to independently purchase services. Where applicable law requires verifiable parental consent or restricts tracking/targeted advertising involving children, such processing must not be undertaken without required safeguards.
Data may be shared only as reasonably necessary with payment gateways, hosting/database providers, communication/support vendors, professional/service partners, auditors/advisers, and government or law-enforcement authorities where legally required. For a map-category purchase, checkout separately asks for consent to the exclusive partner-enquiry workflow. Before a partner purchases the enquiry, approved partners receive only the customer name and selected map category; the customer phone and email are not included in that marketplace response. After one approved partner pays the recorded unlock price through the partner wallet, contact details are disclosed only to that partner and the enquiry is removed from availability for all other partners. Partners must use the contact only for the stated service follow-up and must not resell, redistribute or use it for unrelated marketing.
Partner documents are not publicly listed. They are accessible only to the submitting Partner, authorised administrators and service providers or authorities with a lawful need. Files may be used for identity, licence, fraud, risk, complaint and re-verification purposes. Partners should submit masked identifiers where full identifiers are unnecessary and must not upload an unmasked Aadhaar number, passwords, OTP, CVV or payment PIN.
For an active supported project, the Partner may upload work photos/videos, written notes, precise latitude/longitude, location accuracy, device capture time, file name/type/size, cryptographic hash, IP address and browser/device metadata. This information is used for project timelines, customer review, fraud prevention, milestone decisions, complaints and legal compliance. It is visible only to the project Customer, assigned Partner and authorised administrators/service providers. Camera and GPS metadata are integrity aids and not conclusive proof of identity, location, quality or completion.
Partners must obtain any necessary permission before recording workers, neighbours or private property and must avoid capturing unrelated personal information. The administrator controls an evidence-retention period and should securely delete or anonymise data when it is no longer required, subject to dispute, accounting and legal retention duties.
Technology vendors may process data in locations permitted under applicable law and contractual safeguards. The operator should review vendor locations and any government restrictions before production deployment.
Data is retained only for as long as reasonably necessary for the stated purpose, contractual service, dispute handling, accounting/tax, fraud prevention, statutory limitation and legal compliance. Illustrative production schedules should be formally approved by the operator: active account/project records during the relationship; transaction/tax records for the legally required period; security logs for a proportionate period; and consent/legal acceptance evidence for the applicable claim/limitation period.
The application uses password hashing, secure sessions, CSRF controls, rate limiting, security headers, role-based access, audit logging and encryption for configured gateway secrets. No system is absolutely secure. Users should use unique passwords and promptly report suspected compromise. The production operator must maintain backups, access review, vulnerability patching, incident response and vendor security governance.
Where a personal data breach occurs, the operator will assess, contain, document and notify affected persons and the competent authority/board as required by applicable law and prescribed timelines/content.
Subject to applicable law and verification, you may request access to a summary of your personal data and processing, correction/completion/update, erasure where retention is no longer required, withdrawal of consent, grievance redressal and nomination where applicable. Requests may be declined or limited where retention/processing is required by law, fraud prevention, contract, dispute or other lawful grounds.
Essential session cookies are used to authenticate users, protect forms and maintain security. Non-essential analytics/advertising cookies should not be activated in production without an appropriate notice/consent mechanism where required.
Privacy requests may be sent to grievance@example.com. Grievance Officer: Grievance Officer. Business contact: support@example.com, 9999999999, Update registered office address in Admin Settings. We may request reasonable information to verify identity before acting on a request.
Changes will be published with a revised version and date. Where legally required, a fresh notice or consent will be obtained.