Privacy Policy

Account information

• Email address (used to create and identify your account)
• Password (stored hashed — we never see your plain-text password)
• Role (homeowner or builder) chosen at sign-up

Property and floor plan data

• Floor plan images or PDF files you upload
• Property address, city, state, country, and pin code
• Property type, number of floors, and orientation details
• Room directions, corrections, and notes you enter in the wizard
• Life concerns and personal priorities you optionally share

Usage and technical data

• IP address (used for rate-limiting; not linked to your account)
• Browser type and device information (via standard HTTP headers)
• Pages visited and actions taken within the app (server logs)

• To provide the Vastu analysis service — including AI-powered room detection and report generation
• To create and manage your account and authenticate you securely
• To deliver analysis reports by email when requested
• To process payments for paid scan credits
• To enforce rate limits and prevent abuse of the API
• To diagnose errors and improve service reliability
• To comply with legal obligations

We do not sell your personal data. We do not use your floor plans or property details for advertising. We do not use your data to train our own AI models.

VastuScore uses Claude, an AI model provided by Anthropic, PBC(anthropic.com), to analyse floor plans and generate Vastu reports. When you submit a floor plan for analysis, the following data is transmitted to Anthropic's API:

• Your floor plan image or PDF (during the room-detection step)
• Structured room data derived from the image (during the report-generation step)
• Property details such as city, state, property type, and north direction
• Any notes or life concerns you optionally provided

Anthropic processes this data to generate AI responses. Anthropic's own privacy policy governs their handling of API data — please review it at anthropic.com/privacy. Anthropic states that API inputs and outputs are not used to train their models by default.

Important: Do not upload floor plans containing sensitive information (e.g., security layouts, classified premises) as the image is transmitted to a third-party AI service.

Your data is stored using Supabase (supabase.com), a managed database and storage platform. Floor plan images are stored in a private, access-controlled storage bucket — they are never publicly accessible. Access requires a short-lived signed URL generated server-side.

All data in transit is encrypted using TLS. Passwords are hashed using industry-standard algorithms. We do not store payment card numbers — payment processing is handled entirely by Razorpay (see below).

Supabase's privacy policy is available at supabase.com/privacy.

Payment processing for scan credits is handled by Razorpay Software Private Limited. VastuScore does not collect, store, or process your credit card, debit card, UPI, or banking details. All payment data is entered directly into Razorpay's secure checkout and governed by Razorpay's Privacy Policy.

We receive a payment confirmation and your order details (amount, currency, payment ID) from Razorpay, which we store to credit your account with scan credits.

Transactional emails (account confirmation, report delivery) are sent via Resend(resend.com). Your email address is shared with Resend solely for the purpose of delivering these emails. Resend's privacy policy is available at resend.com/privacy.

• Account data: Retained while your account is active. Deleted within 30 days of an account deletion request.
• Floor plan images: Retained for as long as your account is active, so you can re-analyse or reference past scans. Deleted when you delete the property or your account.
• Analysis reports: Retained in your account until you delete them or close your account.
• Server logs and IP records: Retained for up to 90 days for security and abuse-prevention purposes.
• Payment records: Retained for 7 years as required by applicable financial regulations.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at support@vastuscore.ai. We will respond within 30 days. For Indian residents, these rights align with the Digital Personal Data Protection Act, 2023 (DPDPA). For EU/EEA residents, these rights are governed by the General Data Protection Regulation (GDPR).

VastuScore uses session cookies and browser local storage to keep you signed in and remember your preferences (such as language selection). We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can clear cookies and local storage through your browser settings at any time, but doing so will sign you out.

VastuScore is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If we make material changes, we will notify registered users by email at least 14 days before the changes take effect. Continued use of VastuScore after that date constitutes acceptance of the revised policy.

For any privacy-related questions, requests, or concerns, please contact us at:

Also see our Terms of Service.