Privacy Policy

This policy explains what personal data ARCHINEXT ("we", "us") collects when you visit archinext.in or use Site Intelligence at app.archinext.in (together, the "Services"), why we collect it, and the choices you have. ARCHINEXT is based in Hyderabad, India, and acts as the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023.

1. Data we collect

When you create and use an account

• Account details: your name, email address, account type (individual or organisation) and organisation name if you give one. Your password is stored only as a salted one-way hash (argon2id); we cannot read it.
• Sign in with Google: if you choose it, Google shares your name, email address, whether that address is verified, and your profile picture. We do not receive your Google password and we ask for no other Google data.
• College email (Education plan): the college address you verify and its domain, to confirm eligibility for one year.
• Workspace and project content: projects, saved studies (site locations, study areas and settings), booklet layouts, team invitations and the roles you assign.
• Plan and usage records: your plan, when it started and ends, project allowances used, and an audit log of account and administrative actions.
• Security data: sign-in sessions (stored as hashed tokens), failed sign-in counts, and the IP address and time of security-relevant actions.

Automatically, when you use the Services

• Request logs: which kind of page or API route was called, the response status and how long it took. Logs record route patterns, not the identifiers or search terms inside them, and are kept for up to one year.
• Error reports: if the app fails in your browser, it sends the error message, the screen where it happened, the browser type and the app version. Tokens and query strings are removed first. Kept for up to one year.

The website archinext.in itself has no accounts, no analytics, no advertising and no tracking cookies. Its contact boxes do not send anything to us: they open your own email or WhatsApp with your message, and you decide whether to send it.

2. Cookies

Site Intelligence uses one strictly necessary cookie to keep you signed in. It is HttpOnly (not readable by scripts), sent only over HTTPS to app.archinext.in, lasts up to 30 days from your last visit and at most 90 days. We use no advertising or third-party tracking cookies. The browser may also keep app preferences in local storage on your device.

3. How we use your data

• To create and secure your account, sign you in and keep your projects (performance of our contract with you).
• To apply your plan, including allowances, study-area limits and Education verification.
• To send service emails: confirming your address, password resets, invitations, verification codes and security notices. We do not send marketing email without your consent.
• To keep the Services working and safe: detecting abuse, rate limiting, fixing errors and measuring performance.
• To meet legal obligations and enforce our Terms.

We do not sell personal data, use it for advertising, or use your projects to train AI models.

4. Site analyses and outside data sources

To analyse a site, Site Intelligence sends the site's coordinates and study area, not your name or email, to public data providers, mostly from our servers. These include OpenStreetMap services (Nominatim, Overpass), Open-Meteo, NASA POWER, Copernicus, Overture Maps, Google Open Buildings, ISRIC SoilGrids, WorldPop, NRSC Bhuvan and the Airports Authority of India. Your browser also loads map tiles directly from map tile providers, which see your IP address as for any website.

5. Who we share data with

Only service providers that help us run the Services, under contract and only for that purpose:

Within a team workspace, members can see each other's names, email addresses and roles, and the projects shared with them. We may disclose data if Indian law requires it, or to protect the rights and safety of our users or the public.

6. How long we keep data

• Account, workspace and project data: while your account is active. You can delete your account yourself on the Account page in Site Intelligence (we email you a link to confirm), or ask us to do it, and we delete it from the live database within 30 days. After deletion we keep only a one-way hash of your email address and the number of free projects it had used, so the free allowance cannot be reset by registering again.
• Database backups: daily backups for up to one year and monthly backups for up to three years, encrypted and access-restricted, then deleted automatically. Deleted data is not restored from backups except to recover from a failure.
• Request logs and error reports: up to one year. Audit and plan records as long as needed for security, billing and legal purposes.

7. Security

Data is encrypted in transit (HTTPS with HSTS) and at rest. The servers accept no direct logins from the internet, and administrative access is limited and logged. Passwords are hashed and sessions are stored as hashes. Accounts lock for 15 minutes after repeated wrong passwords. No system is perfectly secure. If a breach affects your data, we will inform you and the Data Protection Board of India as the law requires.

8. Your rights

You may ask to access a summary of your personal data, correct or update it, delete it, or withdraw a consent you have given. You may also nominate a person to exercise these rights if you die or become incapacitated, and raise a grievance with us. You can change most account details, and delete your account, yourself on the Account page. For anything else, write to manan@archinext.in from your account's email address. We reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

9. Children

The Services are meant for adults and professionals. You must be 18 or older, or have verifiable consent from a parent or guardian, to create an account. We do not knowingly process children's data without that consent, and we never track or target children.

10. Google user data

Site Intelligence's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google sign-in data only to create and sign in to your account, and we do not transfer it to others except as needed to provide the Services or as required by law.

11. Changes

We will post any change here with a new date. If a change materially affects how we use your data, we will tell you by email or in the app before it takes effect.

12. Contact and Grievance Officer

Manan Mantri, ARCHINEXT, Hyderabad, Telangana, India. Email manan@archinext.in, phone +91 9000217008.