Privacy Policy

1. Introduction & Scope

Welcome to Theka App ("we", "our", or "us"), accessible via https://thekaapp.com and our associated mobile applications. Theka App is a SaaS-based Construction Workforce, Site Operations, and Contractor Management platform.

This Privacy Policy explains how we collect, store, process, and protect your information when you access or use our website, cloud software, mobile applications, and APIs (collectively, the "Services").

By registering, logging in, or using Theka App, you consent to the practices described in this Privacy Policy. If you do not agree with any terms herein, please discontinue using our Services immediately.

2. Information We Collect

We only collect information necessary to provide you with seamless construction ERP, procurement, workforce tracking, and project management services:

A. Information You Provide to Us Directly

• Account & Profile Details: Your full name, corporate email address, mobile number, company name, office address, and login credentials.
• Company & Workspace Data: Company registration details, GST/Tax identification numbers, authorized workspaces, and designated company administrators.
• Project & Procurement Records: Project sites, materials catalogue, material indent requests, purchase orders (PO), goods receipt notes (GRN), vendor/supplier profiles, site expense logs, and daily progress reports (DPR).
• Workforce & Employee Data: Employee names, contact phone numbers, designated role/designation, allocated project sites, salary/daily wages, attendance logs, and workforce rosters.

B. Payment & Billing Information

When you subscribe to a paid plan or add extra user seats, your payment is processed directly by our secure, PCI-DSS Level 1 certified payment gateway partner, Razorpay. We store transaction IDs, subscription dates, seat allocations, and payment statuses. We do not store your complete credit card numbers, debit card numbers, or banking passwords on our servers.

C. Device & Technical Usage Data

We automatically log standard technical data when you use our website or mobile apps, including your device type, IP address, operating system, browser version, access timestamps, and error diagnostics.

3. Google User Data & OAuth 2.0 Disclosure

Theka App offers the convenience of "Continue with Google" (Google Sign-In) for fast, secure authentication without needing to remember a separate password.

What Google Data We Access:

• Primary Account Email: To verify your identity and match you with your Theka App company or employee workspace.
• Basic Profile Info (Name & Profile Avatar): To personalize your dashboard and user interface.

How We Use Google Data:

• We use your Google profile strictly for account authentication and user profile display.
• No Selling or Advertising: We never sell, license, or share your Google user data with advertisers, data brokers, or third-party marketing entities.
• No Data Scraping: We do not access your Google Drive files, emails, contacts, or search history.

4. How We Use Your Data

We process your data for legitimate operational and business purposes, including:

• To provide, operate, maintain, and enhance the Theka App construction management platform.
• To manage material indents, purchase orders, vendor deliveries, and site approvals.
• To calculate workforce attendance, labor overtime, and site expense budgets.
• To manage your multi-tenant subscriptions, seat limits, and automated billing reminders.
• To send critical operational alerts, OTP verification codes, and invoice receipts.
• To protect against security threats, unauthorized logins, and fraud.

5. Data Sharing & Third-Party Services

We treat your project and business information with the strictest confidentiality. We do not sell or monetize your data. We only share information with vetted infrastructure partners who adhere to rigorous data privacy agreements:

• Payment Gateway: Razorpay Software Private Limited for secure payment processing and subscription billing.
• Authentication: Google OAuth 2.0 for single sign-on verification.
• Cloud Infrastructure & Hosting: Enterprise-grade cloud servers with daily automated backups, strict firewall rules, and SSL/TLS encryption.
• Push Notifications & Communications: Firebase Cloud Messaging (Google) for real-time app notifications, and transactional email/SMS gateways for OTP and purchase order dispatches.
• Legal Compliance: If required by Indian law, judicial summons, or government authorities, we may disclose information solely to comply with lawful warrants.

6. Site Location & Attendance Tracking

The Theka App mobile and web applications may request permission to access your device's geographical location (GPS coordinates) exclusively when performing site-related check-ins, site attendance logging, or geofenced project verification.

Location data is used solely to confirm that the employee or supervisor is present at the designated construction jobsite. We do not perform continuous or 24/7 background location tracking when the application is closed.

7. Data Storage & Security

We implement multi-layered administrative, technical, and physical security measures to safeguard your information against unauthorized access, loss, or alteration:

8. Data Retention & Account Deletion

We retain your personal and construction project data for as long as your company maintains an active account on Theka App, or as necessary to fulfill contractual and legal obligations (such as tax compliance and audit trails for construction procurement).

Right to Account Deletion: Company superadmins and individual users have the right to request full account closure and data deletion. Upon receiving a verified request, we will purge or anonymize your company and employee records within 30 days, except where retention is mandated by law.

9. Your Privacy Rights

Depending on your jurisdiction and under applicable data protection laws (including the Digital Personal Data Protection Act, 2023 and GDPR), you possess the following rights:

• Right to Access: You can view all company profile data, user allocations, and project files directly in your dashboard.
• Right to Rectification: You can edit and update any inaccurate personal, workspace, or billing information.
• Right to Erasure (Right to be Forgotten): You can request permanent deletion of your profile and data.
• Right to Data Portability: You can export project reports, vendor ledgers, purchase orders, and attendance registers in PDF or Excel/CSV formats at any time.
• Right to Withdraw Consent: You can revoke consent for optional features (e.g., location permissions or marketing emails) at any time.

10. Cookies & Local Storage

We use essential session cookies and local storage tokens strictly to maintain your authenticated login session, preserve your active workspace preferences, and ensure CSRF security.

We do not use invasive third-party cross-site advertising cookies or tracking pixels. You can configure your browser to reject cookies, but doing so may prevent you from staying logged into the platform.

11. Contact Us & Grievance Redressal

If you have any questions, concerns, feedback, or grievance regarding this Privacy Policy or our data handling practices, please contact our Data Protection & Grievance Officer: