Privacy Policy

Valytica is an AI-assisted property valuation manager for Indian valuers and valuation firms. It is operated by Gnanalytica Technologies LLP (“Gnanalytica”, “we”, “us”), a limited liability partnership registered in India (LLPIN: ACQ-4389; registered office: SY NO 82 B1-205 SRADDHA, WHITECLIFF APT SEEGAHALLI, Bengaluru Rural, SEEGAHALLI POLICE STATION, Bengaluru Rural, Bengaluru Rural- 560115, Karnataka, India). This notice explains what personal data we process across our web app (valytica.in), our Android app and our browser extension, why we process it, and how we protect it, under India’s Digital Personal Data Protection Act, 2023 (DPDP).

We act in two roles. For your own account — your profile, sign-in, billing and consent, and the data we collect when you use the app, including a surveyor’s location, photographs and voice notes — we are the data fiduciary. For the contents of the valuation files a firm creates — the uploaded documents, and the names, addresses and other details of property owners, applicants, borrowers and anyone else they mention — the valuer or firm decides why and how that data is processed and is the data fiduciary; we process it on their behalf, as their data processor, under our Terms of Service. If you are named in a valuation file, please contact the valuer or firm that holds it. If you write to us instead, we will pass your request to them within seven days and help them answer it.

This notice is published in English, Hindi, Telugu and Kannada. Use the language links at the top of this page. If you would rather read it in another language listed in the Eighth Schedule to the Constitution of India, write to us at privacy@gnanalytica.com and we will provide it.

Account and profile. Name, email address, mobile number, city, state, your role, your professional details (IBBI registration number, registered valuers organisation and certificate of practice number) and, if you add them, your signature and stamp images and your firm’s GST details. We use email and (when enabled) mobile to sign you in with one-time codes, and your Google account’s name and email address if you sign in with Google.

People a firm adds. When a firm invites a colleague, we keep the email address the invitation was sent to. When a firm adds a surveyor, it enters the surveyor’s name, mobile number and location; we keep those, together with a record of each access link issued (never the link itself) and of the sessions it opened.

Case and valuation data. What a firm enters or uploads for a valuation: applicant and owner names, property addresses, uploaded documents (sale deeds, tax receipts, approved plans, bank forms and the like), the fields read from them by AI, digital-check results and screenshots of government portal records captured with our browser extension, valuation inputs, comparable properties, and the reports produced. Registered documents often show Aadhaar and PAN numbers. In the text we keep from a document we mask those numbers; the uploaded file itself is kept exactly as it was uploaded.

Browser extension (Valytica Capture). Valytica Capture is an optional Chrome extension that reads a state government land-records or registration portal you are signed into, for a case you choose. It works only on the government portal sites named in its permissions, and only after you start it on a case — by pressing Capture on a check in Valytica, or by choosing the case in its panel; a portal you simply browse to is not read. While it runs, it reads the open page for that check’s fields (table cells and what the search form has selected), and it can type the case’s identifiers — never a person’s name — into the portal’s search form, which goes only to that portal. Nothing from a portal page is sent to Valytica until you press Save (or deliberately take a proof screenshot). On Save it sends, to that case: the values you kept; for each value, the table row it came from, verbatim, which can include other people’s names as printed on the government record; the page’s address and title; a screenshot of the visible portal page, which can show other people’s details; and which of its reading rules matched. We store these with the case in Valytica’s own storage in Mumbai, India, under the same retention as other case data (section 7). It never sends the page’s full HTML or text, or your portal session, cookies or passwords. Telugu, Kannada and Hindi values are translated on your own device by the browser’s built-in translator, with no network call. The extension itself sends nothing to any third party.

Site-visit data. When a site visit is recorded we collect GPS coordinates and their accuracy (to confirm presence at the property within about 200 m), the direction the camera faced, the inspection checklist and notes, site photographs (including any location and time the camera embeds) — which can include a photograph of the owner or the person met at the property, and a photograph of a paper sketch — on-device plot sketches and, if the surveyor chooses to dictate one, a short voice note. A voice note is sent to the AI service described in section 4 to be turned into text; we keep both the recording and its text with the visit. A photograph or a voice note can capture other people, so please tell them before you take it.

Device permissions (mobile). The app asks for Camera (site photos and sketches), Location (to confirm site visits), Microphone (only when you press record for a voice note) and Photos (only to pick an existing picture you choose). Each is used only for its stated purpose and only while you use that feature.

Billing. Wallet balance, free cases remaining, per-case charges and recharges, and the invoices we issue, which carry the name, address and GSTIN they are issued to. Card and UPI details are handled by our payment processor and are not stored by us.

Consent, feedback and history. A record of each version of this notice and of our Terms that you accepted or withdrew, any rating or note you leave about a case, and an activity history of key actions on each case (who did what, and when).

Technical data and cookies. The IP address and the device or browser details that reach our servers, and error and usage logs. We use a sign-in cookie (essential), local browser storage for preferences such as layout and language, and the analytics identifier set by PostHog (section 6). We use no advertising cookies. Our own web addresses never contain names, email addresses or phone numbers.

• To provide the service: create cases, read documents, verify records, record site visits, compute valuations and prepare reports.
• To sign you in, and to keep accounts and firms separate and secure.
• To charge for cases, run your wallet and issue invoices.
• To keep the records a registered valuer must keep, and an activity history of each case.
• To contact you about your cases, your account and changes to this notice.
• To prevent abuse and fraud, and to find and fix faults.
• To meet our legal obligations, including tax records and cyber-security incident reporting.

We process your own data on the basis of the consent you give when you accept this notice, and, where a law requires us to keep or report something (for example tax records), because the law requires it. We process the contents of valuation files on the instructions of the firm that holds them.

We do not sell personal data, use it for advertising, or use case documents to train AI models.

To extract fields from the documents you upload, to describe site photographs and to transcribe voice notes, we send their contents to Google’s Gemini models. These contents include whatever the document states, which usually means the names and addresses of property owners, applicants and other parties. We run this processing on Google’s Vertex AI service in Mumbai, India. If that regional service is not available to us, a request may instead be served from Google’s infrastructure outside India through the Vercel AI Gateway, which the DPDP Act currently permits. This is one setting for the whole service; it is not chosen customer by customer. The processing is solely to provide the features you use.

The AI proposes; you decide. Every field it extracts is shown to you with the passage it came from, and nothing reaches a report until you accept it.

Our database, sign-in and file storage run in Mumbai, India (ap-south-1), and our application functions run in the Mumbai region. Files are kept in encrypted, private storage. The document editor your report opens in is our own deployment of Collabora Online, and it runs in Mumbai too. What we store, we store in India. The processing that takes place outside India is listed in full below, with what each recipient receives.

AI processing, on the occasions it is not served from Mumbai as described in section 4, receives the contents of the documents, photographs and voice notes sent to it, including the personal details of property owners and applicants that those documents state. Google Maps receives the property address and its coordinates, to place the property on a map and to list what is near it.

Our error-monitoring, performance-monitoring and session-recording tooling (Sentry) and our product-analytics tooling (PostHog) both run in the United States. Analytics is limited to page addresses (with case and other identifiers removed), counts and timings, linked to your internal account identifier. Error reports are scrubbed of cookies, request contents, email addresses and IP addresses before they are sent. Session recordings are masked in your browser, so that every word, form entry and image on the screen is hidden before a recording is sent.

The market-comparables lookup (Bright Data) fetches public property advertisements. It receives a locality, area or building name taken from the property’s address (never a door or plot number), the city or district, and the property type. It returns the advertisements as the portal publishes them, which can include the advertiser’s own name or phone number; we keep only each listing’s price, size, type, location, date and links, never the advertiser’s name or contact details, and discard the rest. We keep those listings for seven days, so that a search of the same area by any valuer in that time is answered without asking the portal again; at most five listings from a search are saved on a case.

Expo, in the United States, delivers updates to our Android app. It receives your device’s IP address, platform and app version, and no account or case data.

The captcha-solving services (2Captcha and AntiCaptcha) are also outside India. They are used only if automated portal checks have been switched on for your firm, which they are not by default; portal records are otherwise read in your own browser, where you solve the captcha yourself. They receive no personal data of any kind — only the picture of the distorted characters a government portal shows. Under the DPDP Act, transfers are permitted to any country the Central Government has not restricted; no country is currently restricted.

We share data only with these service providers, which help us run Valytica under written terms and appropriate safeguards:

• Supabase (Mumbai) — database, sign-in and file storage.
• Vercel — application hosting (Mumbai functions) and, when it is used, AI Gateway routing.
• Amazon SES (Mumbai) — email: sign-in codes and invitations.
• Google — Gemini AI processing through Vertex AI in Mumbai (section 4), Google sign-in, Google Maps (map display, address location and nearby places; receives property addresses and coordinates), and Google Cloud Run in Mumbai, which hosts the document editor described in the next entry.
• Collabora Online (our own deployment, Google Cloud Run, Mumbai) — the editor your valuation report opens in. To let you edit the report it receives the report document itself, which contains whatever the report states: owner and applicant names, the property address, deed particulars and the valuation figures. It also receives your own name, so that it can label who is editing. It is software we run on infrastructure we control in India; no copy of the document is sent to Collabora Productions or to any other company.
• Mappls (MapmyIndia) — map display and address location; receives the property address to locate it. India-resident infrastructure.
• MSG91 — SMS one-time codes (when mobile sign-in is enabled).
• Razorpay — payments for wallet recharges; receives your name, email address and mobile number to fill in the payment form.
• 2Captcha / AntiCaptcha (outside India) — solve captcha images during automated state-portal checks, only where those checks are switched on; they receive only captcha image bytes, never your personal data.
• Bright Data (outside India) — fetches publicly listed property advertisements from Indian property portals when a valuer asks for market comparables, and automatically when a property address is accepted on a case or an earlier search is retried. It receives a locality, area or building name from the address (for example “Kukatpally, Hyderabad”) together with the city or district and the property type. It never receives a door or plot number, map coordinates, an owner’s name or any other case detail.
• Sentry (US region, United States) — application error monitoring, performance monitoring, and masked session recording. Reports are scrubbed before they are sent: no cookies, no request bodies, no query strings, no email address and no IP address — only the internal account identifier and the page address (with identifiers removed) where the error occurred. Performance data is timings and page addresses. Session recordings capture the layout of the screen and the actions taken on it, with every word, every form entry and every image hidden before the recording leaves your browser — so names, addresses and document contents are not recorded. We record a small sample of sessions and any session in which an error occurred.
• PostHog (US region, United States) — product analytics. We record which pages are visited (with case and other identifiers removed from the address) and counts of key actions (a case created, a document uploaded, an AI suggestion accepted or rejected, a report finalised, a wallet recharge), linked to your internal account identifier. Automatic capture of on-screen text, form contents and session recording are all switched off, query strings are stripped, and no case, document or customer identifier is sent.
• Expo (United States) — delivers Android app updates; receives the device’s IP address, platform and app version only.

Government land records maps. When a case’s map is shown, our server asks the state’s own map service what it records around the property: the Telangana Remote Sensing Applications Centre (tgracgis.telangana.gov.in) for properties in Telangana, and the Karnataka State Remote Sensing Applications Centre’s K-GIS (kgis.ksrsac.in) for properties in Karnataka. Both are government servers in India. We send only a map rectangle around the property’s location (or the location point itself) and the type of layer asked for, such as lakes, survey parcels, the Section 22-A prohibited-land register, flood areas or master-plan zoning. We do not send the case, the address, the owner’s or applicant’s name, or any other personal data. We do this so the valuer can see official land and planning records next to the property. The Telangana service is reached over plain HTTP, so the rectangle travels unencrypted. The water-body layer bundled with Valytica is answered by our own server and sends nothing to anyone.

We keep your account and case data while your account is active and for as long as we need it to provide the service.

When you close your account, sign-in is disabled at once. After a 30-day grace period (our weekly clean-up can take up to seven days more) we erase your profile and, if you work on your own, delete your cases in full — except the records described next.

A registered valuer must keep the records of each valuation assignment. When a report is finalised, that case is placed under a records hold of three years and three months. If your account is closed while a hold is running, we erase your personal details (name, email, mobile, registration numbers and signature) and the details of your one-person workspace, keep only the finalised cases and their files until each hold ends, and then delete them in full. Cases with no finalised report are not kept because another case is held.

If you work in a firm, the cases you worked on belong to the firm and stay with it when you leave; your own profile is erased as above. A surveyor removed from a firm is erased 30 days after removal. An account whose sign-up is never completed is deleted after 30 days.

Activity history is kept for three years and three months from each entry, with your identity removed once your account has been erased. Payment records and invoices are kept for as long as tax and company law require (currently up to eight years); an invoice keeps the name, address and GSTIN it was issued to. Cached comparables searches are deleted after seven days.

You can ask us to delete your data at any time, subject only to the records we are required by law to keep.

• Access a summary of the personal data we process about you — download it yourself at any time from Account → Your data, or ask us.
• Correct or update inaccurate or incomplete data — most of it from Account, the rest by writing to us.
• Erase your personal data — close your account from Account, or ask us.
• Withdraw your consent at any time, from Account → Consent, where you can also see which version of this notice you accepted and when. Because everything we do with your data is the service itself, withdrawing closes your account as described in section 7. If you are the only admin of a firm that has other members, you first need to make another member admin or remove the members, so that the firm’s records are not left without anyone responsible for them; we will help you do this.
• Nominate another person to exercise your rights if you die or become unable to — write to us with the nominee’s name and contact details.
• Have a grievance redressed by our Grievance Officer (section 12) and, if you are not satisfied, complain to the Data Protection Board of India.

To exercise any right, write to privacy@gnanalytica.com from the email address on your account, or tell us how we can confirm that it is you. We respond within 30 days, and at most within 90 days.

If you are named in a valuation file but do not use Valytica — for example as an owner or an applicant — your rights over that file are exercised through the valuer or firm that holds it (section 1); we pass your request to them.

We encrypt data in transit and at rest, keep each organisation’s data separate with database-level access controls, keep files in private storage reached only through short-lived signed links, mask Aadhaar and PAN numbers in the text we keep from documents, and record key actions in an audit log. No method of transmission or storage is perfectly secure.

If a personal data breach happens, we will tell the affected users and firms without delay, report it to CERT-In within six hours of noticing it, and report it to the Data Protection Board of India as the law requires.

Valytica is a professional tool not directed to anyone under 18, and we do not knowingly collect data from children. Documents in a valuation file can name a minor, for example a co-owner represented by a guardian; that data is processed only as part of the firm’s file (section 1).

We may update this policy as the product evolves. We will revise the effective date above and, for material changes, notify you in the app or by email and ask you to accept the new version. All four language versions are updated together.

Our Grievance Officer is Sandeep, Founder, Gnanalytica Technologies LLP. For questions, requests or complaints about your personal data, write to privacy@gnanalytica.com. We acknowledge every message within 7 days and resolve it within 30 days, and at most within 90 days.

If you are not satisfied with our answer, you may complain to the Data Protection Board of India through the complaint process it publishes.