Privacy Policy

This Privacy Policy explains how Nirmify ("Nirmify", "we", "us") collects, uses, shares, and protects information when you use our website, web application, and mobile application (together, the "Service"). By using the Service, you agree to the practices described here.

If you have questions about this policy or want to exercise any of the rights described below, contact us at ramesh.jhoney@gmail.com.

The Service is used by design and construction studios ("studio accounts"), the team members a studio invites, and — through a limited client portal — the studio's own clients. This policy covers all of them. For data a studio enters about its own team members or clients (see Section 6), the studio is the data controller and Nirmify acts as a data processor on the studio's instructions.

Account information. When you sign in, we collect your name and email address, either from Google Sign-In (which may also share your Google profile photo) or from the email/password you register with us.

Studio operational data. Data you or your team enter to run your studio: projects and budgets, daily site reports and attendance, finance transactions and approvals, material requests, leads and appointments, quotations and GST invoices, and your studio's business profile (name, address, GSTIN, letterhead).

Files you upload. Site photos attached to daily reports and receipt images attached to finance entries, stored via Amazon S3.

Payment information. Subscription payments are handled entirely by Razorpay, our payment processor. We never see or store your card, UPI, or bank account details — we only receive the resulting subscription status and invoice records from Razorpay.

Technical & diagnostic data. Device and browser type, IP address, and crash/error diagnostics (via Sentry) that help us find and fix problems.

Cookies. The web app sets one essential session cookie to keep you signed in. We don't use third-party advertising or tracking cookies.

• To provide, operate, and maintain the Service, including keeping you signed in across sessions.
• To process subscription payments and generate GST-correct invoices and quotations on your behalf.
• To respond to support requests sent by email or WhatsApp.
• To monitor for errors, abuse, and security issues, and keep the Service reliable.
• To send account and billing notices — trial ending, payment due, subscription status.

We do not sell personal data, and we do not use your data for third-party advertising.

We share data only with the service providers ("sub-processors") that help us run the Service, each bound by their own data-processing terms:

• Firebase (Google) — authentication (Google Sign-In and email/password).
• Razorpay — subscription payment processing.
• Amazon Web Services (S3) — storage for uploaded photos and receipts.
• Neon — database hosting.
• Railway and Vercel — application and website hosting.
• Sentry — error monitoring and crash diagnostics.

We may also disclose information if required by law, or to protect the rights, safety, or property of Nirmify, our users, or the public.

If you use Nirmify to manage your own team's attendance, a client's contact details in the CRM, or a client portal invite, your studio is responsible for having the right to collect and share that information with us, and for complying with any notice or consent requirements that apply to your own employees and clients. We process that data only to provide the Service to your studio.

We keep your data for as long as your account is active, plus a reasonable period afterward for accounting, legal, and dispute-resolution purposes. If you ask us to delete your account, we delete or anonymize personal data within a reasonable time, except where we're required to retain records (e.g. GST invoices) under applicable law.

The fastest way to delete your account is the Delete account button in the mobile app's Settings screen — it permanently deletes your account immediately, no waiting on a request. It's blocked only if you own a studio with other active team members still in it, so their data isn't wiped out from under them; remove them first, or contact us to transfer ownership.

You can also ask us to access, correct, export, or delete your personal data at any time by emailing ramesh.jhoney@gmail.com. We'll respond within a reasonable time, and no later than 30 days. Deleting a studio account also removes the studio's operational data, subject to the retention exceptions in Section 7.

The Service is intended for business use by adults running or working at a design or construction studio. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

We use industry-standard measures to protect your data — encrypted connections (HTTPS) for all traffic, encrypted credential storage, and access controls limiting who can reach production data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

Our hosting providers operate infrastructure in multiple regions, so your data may be processed on servers outside your own country. Where that happens, we rely on our providers' own security and compliance safeguards to protect it in transit and at rest.

We may update this policy from time to time. We'll update the "Last updated" date above, and for material changes, we'll make reasonable efforts to notify active accounts by email or in-app notice.

Questions about this policy or your data: ramesh.jhoney@gmail.com or WhatsApp +91 75693 10162.