Privacy policy

Propalance is a product of Gnanalytica (“we”, “us”), available at propalance.gnanalytica.com and in the Propalance app. It helps real estate developers (“builders”) collect payments and keep their home buyers informed after a booking. This policy explains what personal data Propalance handles, why, who else sees it, and the rights you have. It takes effect on 21 October 2026.

Who is responsible for your data

Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”):

• Buyers’ data. Your builder is the data fiduciary. It decides what to record about your booking and why. Gnanalytica is the builder’s data processor: we handle that data only on the builder’s instructions and only to run Propalance for it.
• Staff accounts and the service itself. For the sign-in accounts of builders’ teams, and for keeping Propalance secure and working, Gnanalytica decides how data is used and is responsible for it.

If you are a buyer, your builder’s own privacy notice also applies. You can contact your builder or us about anything in this policy.

What Propalance handles

• Identity and contact details: names, email addresses, phone numbers, postal address, co-buyers, preferred language and channel, and the company and role of staff.
• Sign-in: with “Continue with Google”, Google shares your name, email address and profile picture. We never receive your Google password or access your Gmail, Drive or other Google data. With an email code, we send a one-time code to your email address.
• Booking and money records: the flat, cost sheet, payment plan, demands, payments, receipts, statements, adjustments and the builder’s bank statement lines used to match payments.
• Payment proofs and documents that buyers or the builder upload, such as transfer screenshots, agreements and letters.
• Home loan details: the lender, loan account number, sanctioned amount, sanction and disbursement letters, the lender’s contact, and the disbursement requests the builder sends to the lender.
• Tax deducted at source (TDS): Form 26QB acknowledgement numbers and Form 16B certificates, which carry PAN numbers.
• Construction progress: photos and updates the builder posts about a project.
• Messages and notifications: demands, receipts, reminders, newsletters and conversations sent by email, WhatsApp, in the app and as push notifications, with their delivery status, and the push token of each device that signs in to the app.
• Requests: site visit and handover appointments, support requests and customisation requests for a flat.
• A progress picture you choose to share: a buyer can create an image of their tower’s progress. It shows the builder, project and stage, and no amounts.
• Records of changes: an audit log of who created, changed or approved what, and when.
• Technical data: sign-in sessions, IP address, browser and device information and service logs.

Why we use it

• To sign you in and show you only the records you are allowed to see.
• To let the builder issue demands and receipts, track payments, home loan disbursements and TDS, and keep buyers informed about construction.
• To send the messages, reminders and newsletters the builder asks Propalance to send, in the channels you have chosen.
• To compute collections and progress analytics for the builder from its own records. These are not shared with anyone else.
• To keep an audit trail that builders and buyers can rely on.
• To secure, maintain and support the service, and to meet legal obligations.

We do not sell personal data, use it for advertising, or combine one builder’s data with another’s. Data received through Google sign-in is used only to identify you and is handled in line with the Google API Services User Data Policy, including its Limited Use requirements.

Service providers

We use these providers to run Propalance. Each processes data only to provide its service to us:

• Supabase: database, sign-in and file storage.
• Vercel: hosting of the web application.
• Google: sign-in, and calendar invitations for visits if a builder connects Google Calendar.
• Expo: delivery of the mobile app and its push notifications, which reach your phone through Apple and Google.
• Resend: email delivery, when a builder turns on email.
• Meta (WhatsApp Business Platform): WhatsApp messages, when a builder turns them on.
• Cloudflare: DNS for gnanalytica.com. It does not receive the data you enter.

We disclose data to authorities only when the law requires it. A builder may share your records with others, for example its lender or auditors, under its own responsibility.

Where data is stored

Our providers may store and process data outside India. Where they do, we rely on their contractual commitments to protect it, and we follow any restrictions the Government of India places on transfers under the DPDP Act.

How long we keep it

We keep data while the builder’s account is active and for as long as it is needed for the purposes above. Financial, tax and real estate records are often required by law to be kept for several years, for example under income tax, GST and RERA rules, so a builder may instruct us to keep them after a booking ends. When a builder closes its account we delete or anonymise its data within a reasonable period, except what we must keep by law.

Security

• Each builder’s records are kept apart by row-level access rules enforced in the database itself.
• Within a builder, each person sees only what their role allows.
• Data is encrypted in transit, and our database provider encrypts stored data.
• Money records are corrected by reversal, never edited away, and each step is logged.

No system is perfectly secure. If a breach affects your personal data, we will inform the builder, and you and the authorities where the law requires.

Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data held about you and how it is used;
• ask for it to be corrected, completed or updated;
• ask for it to be erased, except what must be kept by law, such as receipts, tax records and records required under RERA;
• withdraw consent you gave, for example for WhatsApp or newsletters;
• nominate someone to exercise these rights if you die or cannot do so yourself;
• have your complaint heard by a grievance officer.

Buyers can change contact preferences in the portal and the app. For anything else, write to your builder or to us at sandeep@gnanalytica.com. We will pass requests about a builder’s records to that builder and help it respond.

Grievance officer

Sandeep Polavarapu, Gnanalytica, sandeep@gnanalytica.com. We will acknowledge your complaint and respond within the time the law requires. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

Children

Propalance is not intended for anyone under 18. We do not knowingly create accounts for children. A minor who is a co-owner of a home is represented by their guardian.

Cookies

We use only the cookies and device storage needed to keep you signed in and remember simple choices. We do not use advertising or tracking cookies.

Changes to this policy

We may update this policy as Propalance changes. We will post the new version here with its effective date, and tell account holders about significant changes before they apply.

Contact

Gnanalytica, sandeep@gnanalytica.com, propalance.gnanalytica.com. See also our terms of service.