Hemadri Privacy Policy
This Privacy Policy describes how Hemadri Geospatial ("Company", "we", "us" or "our") collects, uses, shares and retains personal data in connection with Hemadri MapLens (the "Service"), and the rights available to individuals ("you") under the Digital Personal Data Protection Act, 2023 and the rules made thereunder (together, the "DPDP Act").
1. Scope and Roles
1.1 Account and billing data. In respect of the account and billing data described in Section 2, the Company acts as the Data Fiduciary and determines the purpose and means of processing.
1.2 Customer Data. Survey data uploaded by a customer organisation, including maps, models, photographs and drawings, may incidentally contain personal data, such as persons or property visible in an image. The customer organisation determines what is uploaded and to whom it is made available, and the Company processes such data solely to provide the Service. Requests concerning such data should be addressed in the first instance to the organisation that uploaded it.
2. Personal Data We Collect
| Category of data | Source | Purpose of processing |
|---|---|---|
| Username, display name, email address, profile picture, organisation and role. Passwords are stored only in irreversibly hashed form. | The Organisation Admin, or the individual | Authentication and provision of access to the organisation's projects |
| Billing details: legal name, address, GSTIN or state, and an email address for receipts | The Organisation Admin making payment | Issue of GST tax invoices, receipts and Subscription notices |
| Payment records: amount, date, plan and Razorpay reference. Card and bank account details are not collected. | Razorpay | Activation of Subscriptions, maintenance of accounts and compliance with tax law |
| Registration details: name, organisation, email address and username, and the one-time code sent to verify the email address | The individual, via our website | Creation of the account. Registrations that are not verified are deleted after 15 minutes. |
| Activity records: the account, organisation, action taken (such as signing in or out, uploading, editing, processing, downloading or deleting), the file or item concerned, the time, IP address, approximate country and browser type | The individual's use of the Service | Security, support, investigation of misuse and resolution of disputes |
| Error reports: technical details of errors encountered in the Service, with the page, time, account name, IP address and browser type | The individual's browser and our servers | Diagnosis and correction of faults |
| IP address and counts of failed sign-in attempts and requests | The individual's browser | Prevention of unauthorised access and abuse. These counts expire within one hour. |
We do not use advertising or tracking cookies, and we do not sell personal data.
3. Local Storage
The Service stores a sign-in token and certain display preferences, such as the layers that are open, in your browser's local storage. This information remains on your device and is removed when you sign out or clear your browser data.
4. Disclosure to Third Parties
4.1 We disclose personal data only to the following service providers, each to the extent necessary for the service it provides to us:
- Cloudflare, for hosting of the application server, storage of files and account records, and delivery of email;
- Netlify, for serving the Service's web pages;
- Razorpay, for payment processing;
- Google Workspace, for receipt of and response to email; and
- providers of map tiles and software libraries (such as Esri and OpenStreetMap basemaps), which are loaded directly by your browser and accordingly receive your IP address.
4.2 We disclose personal data to governmental or regulatory authorities only where required by law.
4.3 Certain of these service providers store data outside India. Any such transfer is made in accordance with the DPDP Act.
5. Retention
We retain personal data only for as long as necessary for the purposes set out in this Policy, as follows:
- account information, for as long as the account exists; an account removed by an Organisation Admin is deleted;
- billing and payment records, including invoices, for eight (8) years, as required by Indian tax law;
- registrations that are not verified, for fifteen (15) minutes;
- activity records, for one hundred and eighty (180) days, and error reports, for sixty (60) days; and
- Customer Data, as set out in Clause 7 of our Terms of Service.
6. Your Rights
Subject to the DPDP Act, you have the right to:
- obtain a summary of the personal data we process about you and the processing activities undertaken;
- request the correction, completion or updating of your personal data, and its erasure where it is no longer necessary for the purpose for which it was collected;
- withdraw your consent where processing is based on consent;
- nominate another individual to exercise these rights on your behalf; and
- have your grievances redressed.
Requests may be sent to support@hemadri3d.com and shall be responded to within thirty (30) days. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.
7. Security
We implement reasonable security safeguards to protect personal data, including encryption of data in transit, hashing of passwords, logical separation of each organisation's data, and processing of payments exclusively by our payment processor. In the event of a personal data breach, we shall notify affected individuals and the Data Protection Board of India as required by law.
8. Grievance Officer
In accordance with applicable law, the Grievance Officer is: Nikhil Yadav, Hemadri Geospatial, Plot 2B, S.No. 67, Vidyanagar, Pune 411032 · support@hemadri3d.com · +91 82084 31360.
9. Changes to this Policy
We may update this Policy from time to time. The revised Policy shall be published on this page with a new version date, and Organisation Admins shall be notified of material changes by email.