Privacy policy

1Who this covers

Your organisation (usually a brand) decides who is invited to NiyamX and what is uploaded to it. For the drawings, standards and store records your organisation puts into the app, we process personal data on your organisation’s behalf and follow its instructions. For your account, billing and visits to this website, we decide how the data is used and are responsible for it.

2What we collect

• Account details: your full name, work email, a password (stored only as a hash by our authentication provider), your organisation and your role.
• Content you upload or create: brand standards and guideline PDFs, store drawings (DXF and PDF), store details and capacity inputs, rules, layout corrections, review comments, submissions and the reports generated from them. Drawings and title blocks can contain names and contact details of architects, consultants and site staff.
• Integration credentials: if your organisation connects Snowflake, the account details and an encrypted private key. The key is encrypted at rest and is not readable from the app once saved.
• Assistant conversations: the questions you ask the in-app assistant and its answers.
• Usage records: which paid AI steps ran, the points they spent and when, and the timestamps of submissions and reviews.
• Technical data: IP address, browser and device type, and server logs created when you use the site, kept for security and troubleshooting.
• Messages you send us by email or phone.

3How we use it

• To run the service: sign you in, read your drawings, measure layouts, check them against your organisation’s rules, and produce findings, reports and seating options.
• To let your team work together: show your submissions, comments and stage to the reviewers and admins in your organisation, as the roles your admin sets allow.
• To meter and bill paid AI steps against your organisation’s points.
• To keep the service secure, prevent abuse and fix problems.
• To answer your questions and tell you about changes to the service or these terms.

We do not sell personal data, we do not use it for advertising, and we do not use your drawings or standards to train AI models.

4AI processing

NiyamX sends parts of your content to OpenAI through its API to read drawings, name areas and equipment, draft rules and judge them against measurements. This includes page images and crops of drawings, extracted text, and the measurements computed from them. Standards PDFs are indexed in an OpenAI vector store so findings and reports can quote the clause they rely on. Under OpenAI’s API terms, data sent through the API is not used to train its models by default. Measurements and compliance scores are computed in our own code, not by the model.

Enterprise customers can run the AI steps on their own model account instead, under their own agreement with that provider.

5Who we share it with

We share personal data only with the service providers that run the product, under contracts that limit their use of it:

• Supabase: database, authentication and file storage.
• Vercel: hosting for the website, app and drawing parser.
• OpenAI: the AI processing described above.
• Snowflake: only if your organisation connects its own Snowflake account, to list and copy the drawings it chooses to import.

Inside the app, what you upload is visible to people in your organisation according to their role: franchisees see only the stores assigned to them, and staff roles see the organisation’s stores, standards and library. We may also disclose data when the law requires it, or to protect our users or the service.

6Where it is stored

Our providers may store and process data outside India, including in the United States and the European Union. Where data leaves India we rely on our providers’ contractual and security commitments, and we will follow any restrictions the Government of India notifies under the DPDP Act.

7How long we keep it

• Account data is kept while your account exists. You can delete your account on your profile page, which removes your profile and sign-in.
• Content your organisation uploads is kept for as long as the organisation uses the service, so its approved drawings, revisions and review history stay intact. Ask your organisation’s admin, or us, to delete it.
• Usage and billing records are kept as long as tax and accounting law requires.
• When an organisation stops using the service, we delete its content within 90 days of a written request, except where the law requires us to keep it.

8Security

Data is encrypted in transit, and access is limited by organisation and role with database row-level security. Integration keys are encrypted with a separate key. Our drawing parser cannot be called from the browser and only accepts files from our own storage. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

9Cookies

We use only the cookies needed to keep you signed in and to secure your session. We do not use advertising or cross-site tracking cookies.

10Your rights

Subject to the law, you can ask us for a summary of the personal data we hold about you and how it is used, ask us to correct, complete, update or erase it, withdraw consent you have given, and nominate someone to exercise these rights if you die or become unable to. If your data is held for your organisation, we may pass the request to its admin. We will reply within 30 days.

11Children

NiyamX is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children.

12Changes to this policy

We will update the date at the top when this policy changes, and tell signed-in users about significant changes in the app or by email before they take effect.

13Contact and grievances

For questions, requests or complaints about personal data, write to our grievance officer, Jash Shah, at info@nirmaanx.in or call +91-70411-80305. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.