Privacy Policy
Your privacy matters. Here’s how we handle your data.
Introduction
Welcome to Ghughuti Infra (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Construction Management Platform, including our mobile application (available on Apple App Store and Google Play Store) and our web dashboard (collectively, the “Service”).
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
Scope: This policy applies to all users of the Ghughuti Infra platform, including Super Admins, Project Managers, Site Engineers, Finance personnel, Delivery Persons, Junior Engineers, and Clients.
Information We Collect
We collect the following categories of information to provide and improve our Service:
2.1 Personal Information
| Data Type | Details | Status |
|---|---|---|
| Full Name | Your first and last name, used for account creation and identification within the platform. | Required |
| Email Address | Used for login authentication, account recovery, and sending service-related communications. | Required |
| Phone Number | Used for account identification, WhatsApp-based support, and team communication. | Optional |
| Password | Securely hashed and stored. Used solely for authenticating your account. We never store plaintext passwords. | Required |
| Role / Designation | Your assigned role (e.g., Super Admin, Project Manager, Site Engineer, Finance, Delivery Person, Client, Junior Engineer) used for role-based access control. | Required |
2.2 Location Data
| Data Type | Details | Status |
|---|---|---|
| GPS / Geolocation | Collected when using geo-fenced attendance features (punch in / punch out). Used to verify that employees are physically present at the designated construction site. Location is only accessed when you actively use attendance features. | Required for Attendance |
| Project Geofence Coordinates | Admin-defined geofence boundaries for construction sites stored for attendance validation. | Required |
We do not track your location in the background or when the app is closed. Location data is only collected at the moment of attendance punch-in and punch-out events.
2.3 Photos & Media
| Data Type | Details | Status |
|---|---|---|
| Site Photos | Photos uploaded for project documentation, site maps, and task progress records. | As Needed |
| Delivery Photos | Photos captured by delivery personnel as proof of delivery for materials and purchase orders. | As Needed |
2.4 Operational / Business Data
The following data is generated through your use of the Service and is essential for construction project management:
Attendance Records
Punch-in/out timestamps, duration, GPS coordinates at time of attendance, and status (present, absent, half-day).
Project Data
Project names, descriptions, status, timelines, and associated team members.
Task Data
Task assignments, status updates, categories, and progress records.
Purchase Orders
Purchase order details, approval workflows, vendor assignments, and financial information.
Delivery Records
Delivery tracking, pickup/delivery timestamps, and verification data.
Sub-Contractor Data
Sub-contractor details, attendance, wage reports, and payment records.
Vendor Data
Vendor company details, contact information, and payment records.
Material Catalog
Material names, categories, specifications, and pricing.
Labour / Foreman Records
Worker roster information, daily attendance entries, and monthly wage reports.
2.5 Automatically Collected Data
| Data Type | Details |
|---|---|
| Authentication Tokens | Access and refresh tokens stored locally on your device for maintaining login sessions. Tokens are cleared upon logout. |
| Notification Data | In-app notifications related to project updates, task assignments, attendance alerts, and system messages. |
| Usage Logs | Server-side logs including IP addresses, request timestamps, and API endpoints accessed, used for security monitoring and debugging. |
How We Use Your Information
We use the information we collect for the following purposes:
To provide, operate, and maintain the construction management platform.
To verify your identity, manage login sessions, and protect against unauthorized access.
To enable geo-fenced punch-in/out and verify on-site presence of employees.
To facilitate project tracking, task management, and team collaboration.
To manage purchase orders, vendor payments, sub-contractor wages, and financial reporting.
To send you relevant alerts about project updates, task assignments, delivery status, and system notifications.
To enable WhatsApp-based support and respond to inquiries.
To comply with legal obligations, resolve disputes, and enforce agreements.
To analyze usage patterns and improve the Service’s functionality and user experience.
Where We Store Your Data
Your data is stored and processed using the following infrastructure:
| Component | Provider | Location |
|---|---|---|
| Backend API Server | Render.com (Cloud Hosting) | United States / European Union |
| Database | Managed database hosted on Render.com | United States / European Union |
| File Storage | Cloud storage via Render.com or third-party storage service | United States / European Union |
| Local Device Storage | Browser local Storage (web) / Device storage (mobile) | Your device |
Data Transfers: As our servers are hosted in the US/EU regions, your data may be transferred to and processed in countries outside India. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
Data Sharing & Disclosure
We do not sell your personal data to third parties. We may share your information only in the following circumstances:
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Specific retention periods:
Retained for the duration of your active account. Upon account deletion, personal data is removed within 30 days.
Retained for a minimum of 3 years for compliance with labor regulations.
Purchase orders, payment records, and wage reports are retained for a minimum of 7 years as required by financial and tax regulations.
Retained for the duration of the associated project. Can be deleted by authorized users at any time.
Automatically purged after 90 days.
Cleared upon logout or session expiry.
Your Rights & Data Deletion
You have the following rights regarding your personal data:
Right to Access
You can request a copy of all personal data we hold about you.
Right to Rectification
You can request correction of any inaccurate or incomplete personal data.
Right to Deletion
You can request deletion of your personal data, subject to legal retention requirements.
Right to Data Portability
You can request your data in a structured, commonly used format.
Right to Restrict Processing
You can request that we limit how we process your data.
Right to Withdraw Consent
You can withdraw your consent for data processing at any time.
7.1 Who Can Delete Data
Data deletion rights are governed by role-based access control:
| Role | Deletion Rights |
|---|---|
| Super Admin | Can deactivate/delete any user account, delete projects, tasks, purchase orders, photos, sub-contractor records, vendor records, materials, and all associated data across the platform. |
| Project Manager | Can delete tasks and project-related data within their assigned projects. |
| Individual Users | Can request deletion of their own personal data by contacting the Super Admin or by emailing us directly at ghughutioffice@gmail.com . |
| Clients | Can request account deletion and removal of all personal data by contacting us at ghughutioffice@gmail.com. Deletion will be processed within 30 days. |
How to Request Data Deletion
Send an email to ghughutioffice@gmail.com with the subject line “Data Deletion Request” including your full name and registered email address. We will process your request within 30 days.
Data Security
We implement the following security measures to protect your data:
All data transmitted between your device and our servers is encrypted using HTTPS/TLS (SSL) protocols.
All passwords are securely hashed using industry-standard algorithms. We never store plaintext passwords.
We use JWT (JSON Web Tokens) with access and refresh token mechanisms for secure session management.
Users can only access data permitted by their assigned role, ensuring data isolation and least-privilege access.
Access tokens have a limited lifetime. Expired tokens are automatically refreshed or require re-authentication.
Authentication tokens are stored in your device’s local storage and are cleared upon logout.
Children’s Privacy
Our Service is not directed to children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information promptly. If you believe we have inadvertently collected data from a minor, please contact us immediately at ghughutioffice@gmail.com .
Third-Party Services
Our Service may interact with the following third-party services:
We provide a WhatsApp button for customer support. Clicking it opens WhatsApp’s platform, subject to WhatsApp’s Privacy Policy.
Our backend infrastructure provider. Subject to Render’s Privacy Policy.
We recommend reviewing the privacy policies of these third-party services as their practices are governed by their own policies.
App Permissions
Our mobile application may request the following device permissions:
| Permission | Purpose | When Required |
|---|---|---|
| Location (GPS) | For geo-fenced attendance — to verify your physical presence at a construction site during punch-in/out. | Only when using attendance features |
| Camera | To capture site photos, delivery proof images, and site map documentation. | Only when uploading photos |
| Photo Library / Storage | To select existing photos from your device for upload to the platform. | Only when uploading photos |
| Internet Access | To communicate with our servers for data synchronization and real-time updates. | Always (required) |
Permission Control: You can revoke any permission at any time through your device’s Settings. Please note that revoking certain permissions (e.g., Location) may limit the functionality of specific features (e.g., geo-fenced attendance).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:
We will update the “Last Updated” date at the top of this Privacy Policy.
For material changes, we will notify you via an in-app notification or email.
Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.
Regulatory Compliance
This Privacy Policy is designed to comply with:
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: ghughutioffice@gmail.com
WhatsApp: +91 89793 01078
© 2026 Ghughuti Infra. All rights reserved.
This privacy policy was last updated on September 8, 2026.
