Privacy Policy

1. Who we are and scope

This Privacy Policy explains how Dhunna Infra ("we", "us", or "our") collects, uses, shares, and protects personal data when you use the Dhunna Infra operations application at app.dhunnainfra.com, visit this website, or contact us. We are a real-estate company based in Ludhiana, Punjab, India.

We act as the data controller, or "Data Fiduciary" under India’s Digital Personal Data Protection Act, 2023, for personal data collected through this application.

2. Google user data (access, use, store, share)

If you choose "Sign in with Google" on Dhunna Infra, this is how we handle Google user data. This disclosure is for the Google Sign-In scopes we request: openid, email, and profile.

• Access: we access your Google Account name, email address, and profile picture after you approve Sign-In.
• Use: we use that data only to create or link your Dhunna Infra account, authenticate you, and display your identity in the app. We do not use Google user data for advertising, retargeting, credit decisions, or to train non-personalized AI or ML models.
• Store: we store those profile fields in our application database so you can sign in again and so teammates can see who you are. We keep them for as long as your account is active, then delete or anonymise them when the account is closed, unless a longer period is required by law.
• Share: we do not sell Google user data. We share it only with the hosting and database providers that operate Dhunna Infra under contract, or when the law requires it. You may request deletion by writing to support@dhunnainfra.com.
• Protect: we use HTTPS, access controls, and encryption in transit to protect this data. You can revoke Google access at any time in your Google Account permissions.

3. Other information we collect

• Account information: name, email address, role, and profile details used to authenticate and authorize invited staff on Dhunna Infra.
• Workplace operations data: depending on your role, attendance records, site-visit location and selfie check-ins, HR documents, payroll details, tasks, and messages you send through company tools, including WhatsApp desk threads handled by staff.
• Usage data: IP address, approximate location, browser and device type, operating system, and pages viewed, collected automatically to operate and secure the application.
• Cookies: session and preference cookies required to keep you signed in and remember display settings. See section 6.

4. How we use your information

• Authenticate you and keep your Dhunna Infra session secure.
• Operate HR, attendance, payroll, property, lead, visit, invoice, and team workflows.
• Send operational messages you request, including password-reset codes by email.
• Secure, analyse, and improve the application.
• Comply with legal obligations and enforce our Terms of Service.

5. Legal bases for processing

Where the GDPR or similar laws apply, we rely on one or more of the following:

• Consent, for example when you choose Google Sign-In or submit an enquiry.
• Contract, to provide the workplace tools your organisation has asked you to use.
• Legitimate interests, to run, secure, and improve the business, balanced against your rights.
• Legal obligation, for tax, employment, and accounting requirements.

Under the India DPDP Act, we process personal data with your consent or for legitimate uses permitted by the Act.

6. Cookies and analytics

We use a minimal set of cookies required for sign-in, CSRF protection, and remembering theme preference. You can block cookies in your browser; doing so may prevent sign-in. We do not use cookies to build advertising profiles across unrelated websites.

7. How we share your data

We do not sell, rent, or trade your personal data. We share it only with:

• Service providers who help us run the application (hosting, database, email delivery, and related infrastructure) under contracts that require them to protect your data and use it only on our instructions.
• Authorities or advisors where required by law, to establish or defend legal claims, or to protect the rights and safety of others.
• A successor entity in the event of a merger, acquisition, or reorganisation, subject to this Policy.

8. International data transfers

We are based in India and use service providers that may process data in other countries. Where such transfers occur, we take steps to ensure an appropriate level of protection consistent with applicable law, for example contractual safeguards with our providers.

9. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy and as required for legal, tax, employment, and accounting obligations. When data is no longer needed, we delete or anonymise it.

10. Data security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your privacy rights

Subject to applicable law, including the India DPDP Act and the GDPR, you may have the right to:

• Access the personal data we hold about you and request a copy.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data where there is no overriding legal reason to keep it.
• Withdraw consent at any time, without affecting prior lawful processing.
• Object to or request restriction of certain processing, and request data portability.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, contact us using the details in section 16. We will respond within the timeframes required by applicable law.

12. Children’s privacy

Dhunna Infra is a workplace application for adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Third-party links

The application may link to third-party sites. We are not responsible for their privacy practices, and we encourage you to review their policies.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will revise the "Last updated" date above, and material changes will be highlighted on this page.

15. Google API services user data

Dhunna Infra’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data obtained through Sign-In is used only to authenticate you and populate your Dhunna Infra profile. We do not transfer that data to third parties for advertising or to train non-personalized AI or ML models.

16. Contact and grievance officer

For questions about this Policy, or to exercise your rights, contact our privacy team. Under the India DPDP Act, you may also reach our Grievance Officer for data-protection concerns.

Dhunna Infra
Gurmeet Tower, 142J, Gurudwara Rd, Sarabha Nagar, Ludhiana, Punjab 141001, India
Privacy and support: support@dhunnainfra.com