Privacy Policy

1. Who we are

Houscade (“Houscade”, “we”, “us”) is operated by Houscade, Kochi 682030, India. For any privacy question or to exercise your rights, contact our Grievance Officer at grievance@houscade.in. This policy explains how we handle personal data when you use Houscade.

2. The data we process

We process personal data in two roles:

• As a data fiduciary (controller) — for studio account holders: your name, email, phone, studio details, GSTIN, and usage/log data needed to run the service.
• As a data processor — for the client, lead, and property-owner information that studios enter into Houscade (names, contact details, addresses, project and financial details). Studios are responsible for that data; we process it on their instructions.
• Payment data is handled by our payment processor (Razorpay); we do not store full card details.
• Attendance location: if a studio uses the attendance feature, a team member's device location is captured only at check-in/check-out, only with the browser's permission prompt (declining still records attendance), and is visible to that studio's members for attendance records. [Confirm employee-consent wording with counsel.]

3. Why we use it & our legal basis

• To provide and operate the service (performance of contract).
• To process payments and issue invoices (legal obligation / contract).
• To secure the service, prevent abuse, and keep audit logs (legitimate use).
• To communicate service and account notices (contract).
• With your consent, where consent is the applicable basis — which you can withdraw at any time.

4. Consent & withdrawal

Where we rely on consent, you may withdraw it at any time from your account settings or by contacting the Grievance Officer. Withdrawing consent does not affect processing already carried out, and may limit features that depend on that data.

5. Sharing & sub-processors

We do not sell personal data. We share it only with sub-processors that help us run the service, under data-processing agreements:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Razorpay — payment processing.
• Resend — transactional email (lead alerts, team invites).
• Digio — e-signature of documents, when used.
• Google (Gemini API) — AI drafting of client messages, when enabled.
• Meta Platforms (WhatsApp Business API) — client messaging, when enabled.

6. International transfers

Some sub-processors may process data outside India. Where they do, we rely on appropriate safeguards. [Confirm the regions/safeguards your chosen sub-processor plans use.]

7. Retention

We keep personal data for as long as your account is active and as needed to provide the service, then delete or anonymise it within [X days], except where law requires longer retention (e.g. tax/GST records).

8. Your rights

Subject to applicable law (including the DPDP Act, 2023 and, where relevant, the GDPR), you may:

• Access the personal data we hold about you and request a copy (account holders can export their data in Settings).
• Correct inaccurate data.
• Erase your data — account holders can delete their account and all associated data in Settings → Danger zone.
• Withdraw consent.
• Nominate (DPDP) and raise a grievance with our Grievance Officer; you may also complain to the Data Protection Board of India.

If your data was entered by a studio (e.g. you are a client or property owner of a Houscade studio), please direct access/deletion requests to that studio, who controls it; we will assist them as their processor.

9. Security

We use row-level security, access controls, encryption in transit, and scoped permissions to protect data. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a reportable breach as required by law.

10. Children

Houscade is not intended for children. We do not knowingly process the data of children without verifiable parental consent as required by the DPDP Act.

11. Changes

We may update this policy; we will post the new version here and update the date above. Material changes will be notified in-app or by email.

12. Contact

Grievance Officer: Rajkumar, grievance@houscade.in, Kochi 682030. See also our Terms of Service.