Privacy Policy

Valytica (“Valytica”, “we”, “us”) is an AI-assisted property valuation manager for Indian valuers and valuation firms, operated by Gnanalytica. This policy explains what personal data we process across our web app (valytica.gnanalytica.com) and our Android app, and how we protect it. We act as a data fiduciaryunder India’s Digital Personal Data Protection Act, 2023 (DPDP).

Account & profile. Name, email address, mobile number, city, state, professional registration number (e.g. IBBI/RV), firm name, and your role. We use email and (when enabled) mobile to sign you in via one-time codes, and Google account details if you sign in with Google.

Case & valuation data you enter or upload. Applicant and owner names, property addresses, uploaded property documents (sale deeds, tax receipts, approved plans, bank forms, etc.), AI-extracted fields, digital-check results, valuation inputs, and generated reports.

Site-visit data (mobile). When a surveyor records a site visit, we collect GPS coordinates and accuracy (to verify presence at the property within a ~200 m geofence), inspection checklist responses and notes, site photographs (including any GPS/timestamp embedded by the camera), and on-device plot sketches.

Device permissions (mobile). The app requests Camera (to capture site photos and plot sketches) and Location (to verify site visits). These are used only for the stated purpose and only while you use the relevant feature.

Billing. Wallet balance, plan, and per-report transactions. Card/UPI payment details are handled by our payment processor and are not stored by us.

Operational logs. Audit logs of key actions (for security and compliance) and standard technical logs. We do not place names, emails, or phone numbers in URLs.

• To provide the service: create cases, extract fields, verify records, record site visits, compute valuations, and generate reports.
• To authenticate you and keep your account secure.
• To process per-report billing and maintain your wallet.
• To maintain audit trails required for valuation compliance.
• To communicate with you about your cases and account.

We do not sell your personal data or use it for advertising.

To extract fields from your uploaded documents and assist with insights, document contents and images are processed by Google’s Gemini models via the Vercel AI Gateway. This processing is solely to provide the extraction/assistance features you request. We are migrating AI processing to an India-region endpoint for bank-panel customers; until then, AI inference may be served from Google’s global infrastructure, which DPDP currently permits.

Our database, authentication, and file storage run on infrastructure located in Mumbai, India (ap-south-1), and our application functions run in the Mumbai region. Files (documents and photos) are stored in encrypted, private storage. We are committed to keeping customer data in India, except for the limited AI inference described above.

We share data only with service providers that help us run Valytica, under appropriate safeguards:

• Supabase (Mumbai) — database, authentication, file storage.
• Vercel — application hosting (Mumbai functions) and AI Gateway routing.
• Amazon SES (Mumbai) — transactional email (sign-in codes).
• Google — Gemini AI processing and Google sign-in.
• Mappls (MapmyIndia) — map display and address geocoding; receives the property address to locate it. India-resident infrastructure.
• MSG91 — SMS one-time codes (when mobile sign-in is enabled).
• Razorpay — payment processing (when wallet recharge is enabled).
• 2Captcha / AntiCaptcha — solve captcha images during state-portal checks; they receive only captcha image bytes, never your personal data.

We retain your account and case data for as long as your account is active and as required to provide the service and meet legal/valuation record-keeping obligations. You may request deletion of your account and associated personal data, subject to records we must retain by law.

• Access a summary of the personal data we process about you.
• Correct or update inaccurate or incomplete data.
• Request erasure of your personal data.
• Nominate another person to exercise your rights in case of incapacity.
• Grievance redressal (see below).

To exercise any right, contact us at privacy@gnanalytica.com.

We use encryption in transit and at rest, row-level access controls so each organisation can only see its own data, private file storage with time-limited signed links, and audit logging. No method of transmission or storage is perfectly secure, but we work to protect your data and notify you of material breaches as required by law.

Valytica is a professional tool not directed to anyone under 18, and we do not knowingly collect their data.

We may update this policy as the product evolves. We will revise the effective date above and, for material changes, notify you in-app or by email.

For questions, requests, or complaints about your data, contact our Grievance Officer at privacy@gnanalytica.com. We will acknowledge and respond within the timelines required under DPDP.