Your information and how it is handled

This policy applies to visitors, registered users, workspace owners, invited family members, people whose information is entered into jewellery records, gift senders or recipients and people who contact support.

A person may appear in a beneficiary, ownership or family record without having their own Ghar Ka Sona login. The account holder who adds another person's information is responsible for having a lawful and appropriate reason to do so.

Account holders provide information such as name, email address, password credentials handled by the authentication provider, verification status and invitation details. This information is used to create accounts, sign users in, send verification and recovery messages and connect users to family workspaces.

Users may enter names and relationships of owners, beneficiaries, family members, dependants, gift senders and recipients. The person entering this information is responsible for having an appropriate reason or permission.

Avoid unnecessary sensitive information. Government IDs, bank details, school details, health information and unrelated private documents should not be uploaded. Other people may contact Ghar Ka Sona about information concerning them, and we may need to verify the request and workspace context before acting.

Jewellery records may include sellers, bill numbers, dates, amounts, weights, purity, components, owners, beneficiaries, possession holders, storage locations, instalments, comments, tags, deleted or archived status and related notes.

These records are user-managed. Ghar Ka Sona does not independently verify jewellery existence, legal ownership, possession, value or insurance acceptance.

Users may upload bills, receipts and jewellery photos. We use file details to store, preview, download, check duplicates and support AI-assisted draft creation when selected.

Documents are provided through temporary access links after permission checks. Do not upload documents you are not authorised to store or share.

Workspaces organise records for a family or group. Workspace information includes names, member roles, invitations, selected active workspace and activity history for selected events.

We process plan tier, subscription dates, plan status, feature limits and AI scan usage. This lets the app apply workspace and feature limits and display AI scan counters.

The service may process timestamps, limited logs, error details, browser performance signals, activity records and abuse-prevention events. This helps with security, reliability, troubleshooting and service improvement.

We do not currently use jewellery records, bills or family information for third-party behavioural advertising.

If you contact us, we may process your message, email address, screenshots, attachments and related account or workspace context so we can respond and keep a record of the enquiry.

• Account creation, authentication and password recovery.
• Email verification, invitations and workspace access.
• Record storage, display, search, filtering and reports.
• Exports, document previews and authorised downloads.
• AI-assisted draft creation from uploaded bills.
• Plan, trial, feature-limit and scan-quota management.
• Support, troubleshooting and duplicate-file detection.
• Security, abuse prevention and protection of the service.
• Legal obligations and protection of users and rights.

We aim to handle personal information responsibly and to respond to valid privacy requests in accordance with applicable obligations. Processing may be needed to provide the service, maintain account security, support family collaboration, investigate misuse, comply with valid legal requests and protect users or the service.

Where European data protection law applies, our legal bases may include performance of a contract, legitimate interests such as security and service operation, compliance with legal obligations and consent where required. Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data for specified service purposes, consent-based purposes where applicable and legitimate uses allowed by law.

If the EU GDPR, UK GDPR or similar European data protection law applies to you, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent where processing is based on consent and complain to a data protection authority.

Some rights are subject to conditions and exceptions. For example, a deletion request may need to respect shared-workspace rights, legal obligations, fraud prevention, payment records, security logs or provider backup cycles. Send requests to legal@gharkasona.com.

If India's Digital Personal Data Protection Act, 2023 applies to you, you may have rights as a Data Principal, including access to information about processing, correction, completion, updating and erasure of personal data, grievance redressal and nomination of another person to exercise rights in permitted circumstances.

We will handle applicable DPDP requests through legal@gharkasona.com after verifying the requester and relevant workspace context. Users who add another person's information to a family workspace must have a lawful reason or permission and should avoid uploading unnecessary personal data.

Authorised workspace members may access information permitted by their role. Owners and administrators can manage selected workspace settings and members. A user may download, copy or share information outside the app.

Removing a user stops future access through the service, but it cannot retrieve copies already downloaded or remembered. Workspace owners are responsible for reviewing membership. Plan changes do not change who legally owns jewellery.

AI extraction assists with creating drafts from bills. Relevant bill content and technical file information may be sent to the configured AI provider through server-side integration. Studio image generation may also send selected user images and prompts to the configured AI provider. The browser does not need direct access to provider credentials.

Output may be incorrect. Users must review and correct extracted values before relying on them. Extracted values may be stored as drafts or confirmed records. Manual entry remains available according to plan rules. Provider processing may occur outside the user's country. See our Security page.

Essential authentication technologies keep users signed in. A workspace preference remembers the selected family workspace. Onboarding progress may be stored temporarily in the browser.

You can block cookies in your browser, but essential features such as sign-in and workspace selection may stop working.

Providers process information under their own terms, contractual arrangements and infrastructure settings.

Payment features use Razorpay where checkout is available and configured. Ghar Ka Sona creates payment orders, verifies payment signatures, records payment status, supports payment history and receipts, and may process refunds or failed-payment records. Razorpay may collect and process payment details under its own terms and privacy notices.

Ghar Ka Sona should not receive complete card, UPI or banking credentials when hosted checkout is used. Payment availability, supported methods, taxes, invoices and refunds may depend on provider configuration and applicable law.

Cloud providers may process information in multiple countries. The location depends on provider and configuration. Users outside India should understand that information may be processed outside their place of residence, and applicable safeguards may differ by region. This policy does not promise data localisation.

For European users, international transfers should use appropriate safeguards where required. For Indian users, cross border processing may be subject to restrictions or conditions notified under Indian law.

• Account and workspace records are retained while active and as needed for operation.
• Archived or soft-deleted records may remain outside normal screens for integrity, support or recovery purposes.
• Uploaded documents are retained while associated records remain, unless deleted through available tools.
• Operational logs are retained for a limited operational period according to service needs and provider configuration.
• Support communications are retained as needed to respond and maintain a record of the enquiry.
• Subscription and usage records may be retained for plan management, fraud prevention and future billing records.
• Legal records may be retained when required to establish or defend rights. We review retention needs as the service develops.

Account deletion is available from profile settings where it is configured. You must confirm your account email. If you own a workspace that still has other members, you may need to transfer ownership or remove those members before deleting the account.

Deletion removes or anonymises local account data, removes owned private workspaces and associated private document files where possible, and deletes the authentication user. Some records may remain in limited form for security, fraud prevention, payment, integrity, legal, support or backup reasons. Deleted records should not remain available to ordinary users through normal screens.

Current exports include an insurance inventory PDF, purchases PDF, workspace backup data and authorised activity or audit CSV where available to the signed-in user.

A complete machine-readable export of every account setting, record and uploaded file is not currently available. Export enquiries may be sent to legal@gharkasona.com.

Users are responsible for keeping records accurate. You can correct many records inside the application, subject to workspace permissions and plan rules. Contact us if you need help with information that cannot be corrected through current tools.

You may ask about access, correction, deletion, export, workspace access, AI processing, account status, data concerning another person or privacy complaints. Send requests from the registered email where possible.

Identity and authority may need to be verified. Ghar Ka Sona will not request passwords or one-time codes. Responses may depend on technical, legal, fraud-prevention and third-party considerations. Requests affecting a shared workspace may require the workspace owner or other context.

The service is intended for adults managing family records. Adults may record information about children or dependants when appropriate. Avoid adding unnecessary information about minors, including identity documents, school details, health information or unrelated sensitive details.

We use technical and organisational safeguards designed to reduce unauthorised access, disclosure, alteration and loss. No online system can guarantee absolute security. Learn more on our Security page.

If ownership or operation of the service changes, relevant information may be transferred as part of that change, subject to appropriate notice and applicable obligations.

Information may be disclosed when reasonably necessary to comply with valid legal process, protect users, investigate fraud or abuse, enforce the Terms, defend legal rights or protect service safety. Notice may not be provided where prohibited or unsafe.

The service may link to third-party websites or services. Their privacy practices are controlled by them, not by Ghar Ka Sona.

This policy may change as features, providers and safeguards change. We will update the date on this page when meaningful changes are made.