Privacy Policy

Last updated: January 1, 2025

GDPR-Aligned Google Play Compliant Android Data Safety

1. Introduction

We are a technology company headquartered in Bengaluru, Karnataka, India. We develop and operate the TAT platform — a suite of software products including Construction ERP, MEP Field Management, and an Interior Design ERP solution — delivered as a web application and Android mobile application.

This Privacy Policy explains what information we collect from users of our platform (including the Android app distributed via Google Play), how we use that information, with whom we share it, and what rights you have over your data. It applies to all individuals who access or use our services, including field workers, site supervisors, project managers, and company administrators.

By using our application or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the TAT application and services. This policy has been prepared in compliance with the Information Technology (Amendment) Act 2008, the Digital Personal Data Protection Act 2023 (India), and aligns with the principles of the General Data Protection Regulation (GDPR) and Google Play's Data Safety requirements.

2. Information We Collect

2.1 Personal Information

When you register or use the TAT platform, we may collect the following personal details:

  • Identity information: Full name, employee ID, designation, and department.
  • Contact information: Email address, mobile phone number, and WhatsApp number (where provided).
  • Account credentials: Username and encrypted password. We never store passwords in plaintext.
  • Profile information: Profile photograph (optional), date of joining, and role within your organisation.
  • Financial information: Bank account details and UPI identifiers, collected only for payroll processing and submitted only through your company administrator.

2.2 Location Data

The TAT app collects precise GPS location data for attendance verification and geo-fencing purposes. Specifically:

  • Location is captured at the exact moment you clock in or clock out at a project site.
  • The app does not collect location data continuously in the background.
  • Geo-fence boundaries are configured by your company administrator to correspond to specific project sites.
  • Location coordinates are stored along with the timestamp of the attendance event and linked to your employee profile.

2.3 Device Information

We collect certain technical information about the device you use to access our app, including:

  • Device model, manufacturer, and operating system version.
  • Unique device identifiers (Android ID, READ_PHONE_STATE) used for security and to prevent multiple simultaneous sessions.
  • App version, crash reports, and performance logs to help us improve stability.
  • Network type (Wi-Fi or mobile data) at the time of sync.

2.4 Photos and Media

With your permission, the app can access your device camera to capture site photographs for project documentation purposes. Photos captured through the app are:

  • Tagged with metadata including timestamp, GPS coordinates, and project/task reference.
  • Uploaded to our secure cloud storage and associated with the relevant project record.
  • Accessible only to authorised team members and company administrators within your organisation.

2.5 Usage Analytics

We collect anonymised analytics data about how users interact with our app and web platform. This includes screen views, feature usage frequency, session duration, and error events. This data cannot be used to personally identify you and is used solely to improve product quality.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service delivery: To operate and provide the features of the TAT platform, including project management, attendance tracking, material management, and reporting.
  • Attendance verification: To confirm your presence at a designated project site using GPS geo-fencing, preventing proxy attendance and ensuring accurate payroll inputs.
  • Project management: To link your work activities — task completions, punch list items, material requests — to the relevant project records.
  • Payroll processing: To calculate wages based on verified attendance records, applicable shift rates, and deductions as configured by your employer.
  • Communication: To send push notifications for task assignments, attendance alerts, policy updates, and system announcements.
  • Security: To detect and prevent fraud, unauthorised access, and misuse of the platform.
  • Product improvement: To analyse usage patterns and improve the performance, reliability, and features of our software.
  • Legal compliance: To fulfil our obligations under applicable law, including responding to lawful requests from government authorities.

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. We may share your data in the following limited circumstances:

  • Your employer / company: Your attendance records, task completions, photos, and work data are accessible to authorised administrators within your employing organisation on the TAT platform. This is a core function of the service.
  • Cloud hosting providers: We use reputable cloud infrastructure providers (such as Amazon Web Services or equivalent) to host and process your data. These providers are bound by data processing agreements and industry-standard security requirements.
  • Analytics tools: We may use anonymised, aggregated analytics services (such as Firebase Analytics) to understand app usage. No personally identifiable information is shared with analytics providers.
  • Legal obligations: We may disclose information when required by law, court order, or government authority, or when necessary to protect the rights, property, or safety of Sarvaantar, our users, or others.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change via the app or email.

5. Location Data – Detailed Disclosure

Because location data is particularly sensitive, we provide additional transparency:

  • When collected: Location is captured only at clock-in and clock-out events. No background tracking occurs.
  • Purpose: Exclusively for geo-fenced attendance verification to ensure workers are physically present at the assigned project site.
  • Who can see it: Your location event data (not real-time tracking) is visible to your company's HR and project administration team.
  • How to disable: You may revoke location permission at any time through your Android device settings (Settings > Apps > TAT > Permissions > Location). Note that disabling location will prevent GPS-based attendance check-in from functioning.
  • Retention: Location-tagged attendance records are retained for the duration of your company's active subscription and deleted as per the data retention schedule described in Section 7.

6. Camera & Photos

Camera access is used solely for site documentation within the TAT app. We do not access your personal photo gallery or camera roll. Photographs taken within the app are:

  • Stored securely on our cloud servers with encryption at rest.
  • Linked to specific projects, tasks, or punch list items for audit purposes.
  • Accessible only to authorised project team members and company administrators.
  • Not used for any purpose other than project documentation and quality assurance.

You may revoke camera permission via Android device settings at any time. This will prevent photo uploads but will not affect other app functions.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide you with services. Specific retention periods are:

  • Active subscription: All personal data, attendance records, and project data are retained throughout the period of your company's active subscription.
  • Post-subscription / account closure: Upon closure of a company account, personal data will be deleted or anonymised within 90 calendar days.
  • Individual deletion requests: Upon a verified individual data deletion request, personal profile information will be deleted within 30 days. See our Data Deletion Policy for full details.
  • Financial records: Payroll and financial records may be retained for up to 7 years to comply with Indian accounting and tax regulations, even after account closure.
  • Legal holds: Data subject to a legal hold or regulatory investigation will be retained until the matter is resolved.

8. Your Rights

Depending on your jurisdiction and applicable law, you may have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to correction: Request correction of inaccurate or incomplete personal data.
  • Right to deletion: Request deletion of your personal data, subject to legal retention requirements. Visit our Data Deletion page to submit a request.
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to object: Object to processing of your personal data in certain circumstances.
  • Right to restrict processing: Request that we limit how we use your data while a dispute or investigation is pending.

To exercise any of these rights, contact us at admin@sarvaantar.ai. We will respond within 30 days of receiving a verified request.

9. Data Security

We take the security of your personal data seriously and implement technical and organisational measures to protect it:

  • Encryption in transit: All data transmitted between the app, web browser, and our servers is encrypted using TLS 1.2 or higher.
  • Encryption at rest: Data stored on our servers, including photos, documents, and personal records, is encrypted using AES-256.
  • Access controls: Access to personal data is restricted on a need-to-know basis. Company administrators can only access data for their own employees. Sarvaantar staff access is logged and audited.
  • Authentication: We enforce strong password policies and support multi-factor authentication for administrator accounts.
  • Infrastructure security: Our cloud infrastructure is hosted in ISO 27001-certified data centres with physical and network security controls.

While we implement robust safeguards, no method of electronic transmission or storage is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

10. Children's Privacy

The TAT platform is designed exclusively for business use by employed adults. Our services are not directed at, intended for, or designed to attract individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at admin@sarvaantar.ai and we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page.
  • Notify active users via an in-app notification or email.
  • In cases of significant changes, request renewed consent where required by law.

Continued use of the TAT platform after the effective date of any updated policy constitutes your acceptance of the changes.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data handling practices, please contact our Data Protection team:

  • Email: admin@sarvaantar.ai
  • Company: Sarvaantar AI Solutions Pvt. Ltd.
  • Address: I2-301, Godrej Eternity, Holiday Village Rd, Mallasandra, Thallaghattapura, Bengaluru 560 109, Karnataka
  • Response time: We aim to respond to all privacy-related enquiries within 5 business days.