Privacy notice

01

Who we are

Passionfrut Technologies Private Limited runs Kshetra (kshetra.ai) and is the Data Fiduciary for your personal data: we decide why and how it's used. Registered office: A 101, Madhu Ganesh Apartment, Mahim Road, Behind SBI Bank, Palghar - 401404, Maharashtra. This notice (version 2026-10-29) explains what we collect, why, how long we keep it, and your rights. If we change it, we'll ask you to agree again before you carry on.

02

What we collect and why

Only what we need for the service you use. Each item, its purpose, and how long we keep it:

• Email or WhatsApp number

  • Why: Sign you in with a one-time code, send receipts, order and booking messages.
  • Kept: Until you delete your account.

• Name

  • Why: Address you, and print on invoices you ask for.
  • Kept: Until you delete your account; on invoices, 8 years (GST law).

• Floor plans, photos and home details you upload

  • Why: Read your plan, build the 3D model, Vastu reading and designs.
  • Kept: Until you delete the home or your account.

• Payments (amount, plan, Razorpay reference)

  • Why: Take payment and keep tax records. We never see or store card or UPI details.
  • Kept: 8 years (GST and income-tax law), without your contact details if you delete your account.

• Messages, enquiries and bookings

  • Why: Reply to you; pass enquiries and bookings to the studio or lister you chose.
  • Kept: 2 years after the last reply, or until you delete your account.

• Device and sign-in records (IP address, session)

  • Why: Keep your account secure and stop abuse.
  • Kept: Sessions until they expire; sign-in records 2 years (the DPDP Rules ask for at least 1).

• How you use our public pages, and whether you signed up or paid (only if you allow analytics)

  • Why: See which pages help people (Microsoft Clarity, Meta Pixel), and tell Meta that a visit from one of our ads led to a sign-up or a purchase, with the amount only. Never your homes, plans or contact details.
  • Kept: As set by those services; never inside your homes.

03

Your consent

• When you start using Kshetra we show you this notice and ask you to agree. We use your details only for the purposes above.
• Anything beyond the service is a separate, optional permission, off unless you tick it: email, whatsapp, phone calls with tips, reminders and offers.
• Every form that takes your details (enquiries, bookings, contact, studio applications) asks for your agreement on that form, and separately for any updates.
• We keep a record of every permission you give or withdraw. You can see it, and change your permissions, in the privacy centre (Account → Privacy).
• Withdrawing is as easy as giving: untick it in the privacy centre and we stop. Withdrawing consent for the service itself means closing your account.

04

Studios, listers and their clients

• When you send an enquiry, book a consultation or ask a studio or property lister something through Kshetra, we pass your name, contact and message to that studio or lister so they can reply. The form tells you who it goes to before you send it.
• Studios using Kshetra add their own clients' details. For those clients the studio decides how the details are used, and Kshetra stores and processes them for the studio. Studios agree to add clients only with their agreement and to contact them only as allowed.

05

Who handles your data for us

These companies process data on our behalf under contract. We never sell your data or share it for advertising.

• Vercel: Runs the website and stores uploaded files (Singapore)
• Neon: Database (Singapore)
• Razorpay: Payments (India)
• Google (Gmail, Google sign-in): Sends our emails; signs you in if you choose Google (Global)
• Meta (WhatsApp Business): Sends sign-in codes and messages on WhatsApp (Global)
• OpenAI, Anthropic: AI that reads floor plans and writes design notes. Not used to train their models. (USA)
• Microsoft Clarity, Meta Pixel: Analytics on public pages, and a count of sign-ups and purchases from our ads, only if you allow it (Global)

06

Data outside India

Some of these services store or process data outside India (Singapore, the USA and elsewhere). The DPDP Act allows this except to countries the Government of India restricts; we don't use any such country.

07

Analytics

Only if you click Allow: on our public pages we use Microsoft Clarity and Meta Pixel to see which pages help people. After you sign up or pay, Meta Pixel also tells Meta that it happened (for a purchase, the product and amount only), so we can see which of our ads work. Nothing else runs inside your account, and your homes, plans and contact details are never sent. You can change your choice any time with "Analytics choices" at the bottom of every public page.

08

Your rights

• See your data: Download everything we hold about you from the privacy centre.
• Correct or update it: Edit your name in account settings; write to us for anything else.
• Withdraw consent: Turn off email, WhatsApp or calls any time in the privacy centre. Withdrawing consent for the service itself means deleting your account.
• Erase it: Delete your account from account settings. Tax records stay, without your contact details.
• Nominate someone: Name a person who can use these rights if you die or can't.
• Complain: Write to our Grievance Officer. If you're not satisfied, complain to the Data Protection Board of India.

09

Grievances and contact

• Our Grievance Officer answers questions about your data and handles requests and complaints: privacy@kshetra.ai, or "Privacy request" on the contact page, or Account → Privacy.
• We acknowledge requests quickly and resolve them within 30 days (the law allows up to 90).
• If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
• Want this notice in another language listed in the Eighth Schedule of the Constitution? Write to us and we'll send it.

10

Security and breaches

• Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Sign-in uses one-time codes, so there are no passwords to leak; session tokens are stored only as hashes.
• Only the people who need it can see customer data, and admin actions are logged. Security logs are kept for at least a year.
• If a breach affects your data, we'll tell you without delay what happened, what it means for you and what we're doing, and report it to the Data Protection Board of India as the law requires.

11

Children

Kshetra is for adults. You must be 18 or older to create an account. We don't knowingly collect children's data, track children or show them targeted ads; if we learn we have, we delete it.