Privacy Policy

NirmanShastra is operated by Sudip Jhawar, an individual civil engineer based in Vrindavan, Uttar Pradesh, India. When you use NirmanShastra tools, you are sharing your data with us as the data controller.

Contact for privacy concerns: reports@nirmanshastra.in

We collect the following categories of personal data:

• —Name, mobile number, and email address — collected at registration for each tool
• —Property address, city, pin code, and state — collected to contextualise your estimate
• —Property type and approximate plot size — used in calculations
• —Project details you enter in tool forms — floor plans, material specifications, quantities entered by you
• —Payment information — we do not store card details; Razorpay processes payments directly
• —Usage data — pages visited, tool steps completed, browser type, device type (collected automatically by our hosting provider, Vercel)

We do not collect Aadhaar numbers, PAN, bank account details, or any other sensitive financial or government identification.

• —Generating your construction cost estimate and BOQ report
• —Sending your PDF report by email via Resend
• —Following up with useful construction timing reminders related to your phase (you can opt out at any time)
• —Improving our IS code calculations and material rate databases
• —Responding to support and contact requests
• —Internal analytics to understand which tools are used most (aggregate, not individual)

We do not use your data for targeted advertising. We do not sell your project information to contractors, builders, or material suppliers. Your estimate is your property.

Your data is stored in Supabase, a PostgreSQL database service. Supabase hosting region may vary; we select regions that comply with applicable data residency considerations. As India-specific Supabase regions become available, we will migrate to them.

PDF reports are stored temporarily in Supabase Storage and are accessible only to you via a secure link. We do not make your reports publicly accessible.

• —Razorpay — payment processing. Razorpay is PCI-DSS compliant. Your payment card data never passes through NirmanShastra servers.
• —Resend — transactional email delivery (your PDF report, contact confirmations). Resend processes your email address to deliver messages on our behalf.
• —Supabase — database and authentication. Supabase processes your registration data to provide the service.
• —Vercel — hosting and deployment. Vercel may log request metadata (IP address, browser agent) as part of standard infrastructure logging.

We do not integrate with advertising networks, social media trackers, or data brokers. We do not share your data with any party not listed above.

NirmanShastra uses cookies for session management only — to keep you logged in during your session. We do not use advertising cookies, cross-site tracking cookies, or analytics cookies from third parties.

The admin session cookie (adminSession) is used for site administration only and expires after 24 hours.

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable privacy principles, you have the right to:

• —Request a summary of the personal data we hold about you
• —Request correction of inaccurate personal data
• —Request deletion of your personal data and all associated estimates
• —Withdraw consent to marketing emails at any time via the unsubscribe link in any email we send
• —Lodge a complaint with the Data Protection Board of India once the Board is constituted under the Act

To exercise any of these rights, email reports@nirmanshastra.in with the subject line "Privacy Request — [your name]". We will respond within 30 days.

Registration and estimate data is retained for up to 3 years from the date of last activity, to allow you to retrieve historical reports. After that, data is deleted unless you request earlier deletion.

Email delivery logs are retained by Resend per their own retention policy (typically 30 days).

We may update this policy as our services change or as implementing rules under the DPDP Act 2023 are notified. Material changes will be communicated via email to registered users. The effective date at the top of this page reflects the most recent update.