Kanavu Illam

We collect only the minimum necessary data to authenticate accounts, analyze floor plans, and generate architectural reports:

• Account Credentials & Profile Data: Full name, email address, phone number, and optional delivery/site address provided directly by you or via Google Sign-In (OAuth) or Supabase authentication. These are used strictly to create, authenticate, and manage your account and deliver requested services.
• Uploaded Floor Plan Drawings: 2D architectural blueprint drawings or sketches uploaded by you. These are used solely for automated geometric contour detection, room boundary segmentation, and text reading.
• Derived Architectural Project Data: 3D parametric CAD coordinates, room dimensions, traditional Tamil Vastu rule scores, estimated material bill of quantities (BOQ), and preliminary structural guidance generated from your uploads. These are saved to your account so you can view, review, and export them at any time in your History tab.
• Payment and Invoicing Records: When you purchase or unlock deliverables, our payment partner (such as Razorpay) provides transaction metadata including transaction ID, order ID, payment status, timestamp, amount, and the user's billing email. These records are retained strictly for order fulfillment, fraud prevention, accounting, and statutory tax (GST) compliance. We never receive, process, or store credit/debit card numbers, CVVs, or UPI PINs on our servers.
• Technical Telemetry & Device Logs: IP address, device operating system version, and standard access logs collected ephemerally for rate limiting, DDoS defense, and server health diagnostics.
• Local Storage: Authentication session tokens and language preferences (English/Tamil) stored locally on your device via local app storage (e.g., SharedPreferences).

Unlike raw blueprint images, the derived architectural models (room polygons, 3D vectors, Vastu scores, and cost estimations) are stored securely in our cloud database (Supabase) under your unique user ID. This enables you to access your projects across app sessions in your History screen. These project results remain stored under your account until you choose to delete them or permanently delete your account.

We work with trusted infrastructure and service providers:

• Supabase Inc.: Cloud database hosting and user authentication.
• Railway Corp.: Secure cloud backend hosting and API pipeline execution.
• Vercel Inc.: Hosting our static web portals and compliance documentation.
• Google LLC: Google OAuth 2.0 user authentication.
• Razorpay Software Private Limited: RBI-authorized payment processing. All payment transaction data is localized and stored within India in compliance with Reserve Bank of India (RBI) mandates.
• OpenRouter Inc.: Ephemeral text queries for live regional construction material prices. Your floor plan drawings, personal identifiers, and private account details are never sent to OpenRouter or external language models.

Our cloud backend and database services are hosted in enterprise data centers. Depending on operational routing, technical data and project calculations may be transferred to or processed on secure servers located outside India, subject to standard encryption and contractual data safeguards.

We retain your personal profile and project history only for as long as your account is active:

• User-Initiated Deletion: You have the absolute right to delete your account at any time. You can trigger deletion within the app under Profile > Delete Account, or via our public web deletion page at Request Account Deletion.
• What is Purged: Deleting your account immediately and permanently removes your profile, authentication credentials, project records, 3D models, and history logs from our database.
• Statutory Retention Exception: Payment and billing records (including transaction IDs and associated billing email) are retained strictly for the statutory duration required by Indian accounting, tax, and GST audit regulations.

In accordance with the Digital Personal Data Protection Act, you possess the right to:

• Access a summary of your personal data processed by us.
• Request correction or updating of inaccurate or incomplete personal data.
• Withdraw your consent at any time and request erasure of your data.
• Nominate another individual in accordance with applicable legal provisions.

Kanavu Illam is designed and intended strictly for adults aged 18 years and above. We do not knowingly solicit or collect personal information from individuals under the age of 18.

We protect your data using industry-standard measures including TLS encryption for data in transit, access controls enforced by our backend and database policies ensuring authorized access to project records, secure session authentication tokens, and rate-limited API endpoints. In the unlikely event of a verified data incident, we will notify affected users and regulatory bodies within the statutory timeline.

In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, the details of our Grievance Officer are:

• Publisher / Entity: Kanavu Illam Technologies
• Grievance Officer: Chandramouli S
• Designation: Grievance Officer
• Address: Kanavu Illam Technologies, Coimbatore, Tamil Nadu 641001, India
• Grievance Email: grievance@kanavuillam.com (cc: support@kanavuillam.com)
• Statutory SLA: Acknowledgment within 24 hours; resolution within 15 days.