Privacy Policy
Last updated 8/12/2026
Who we are
VastuLens is operated by Karthikeyan Natarajan, a sole proprietor trading as VastuLens. We are the data controller for the personal data described here and decide how and why it is processed. Contact: privacy@vastulens.ai
What we collect and why
- Account data — name, email address, login identifiers (including Google sign-in identifiers or phone number where used). Purpose: creating and securing your account. Legal basis: performance of our contract with you.
- Floor plans and derived models — the drawings you upload and the structured plan model extracted from them. Purpose: producing your analysis and reports. Legal basis: performance of our contract.
- Analyses, reports and chat messages — the output you generate and your questions about it. Purpose: delivering and storing your reports. Legal basis: performance of our contract.
- Transaction records — credit purchases, credit balance and order references received from Razorpay. Purpose: fulfilling purchases, accounting and support. Legal basis: contract and legal obligation.
- Usage, device and log data — IP address, browser/device information, product events and error logs. Purpose: security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.
- Support messages — what you send us. Purpose: answering you. Legal basis: legitimate interests.
- Marketing emails — sent only where you have opted in. Legal basis: consent, withdrawable at any time.
How plans are stored and secured
Uploaded drawings are held in private storage. Only your account can read them, enforced by row-level security and per-user storage policies. We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest by our hosting provider, and least-privilege access controls.
Who we share data with
- Razorpay — our payment gateway. Razorpay collects and processes the payment, billing and tax data needed to take your payment, issue receipts and handle refunds and chargebacks, and shares order references and payment status with us. Razorpay handles that data under its own privacy policy.
- Infrastructure and service providers — hosting, database and object storage, email delivery, and product analytics/error monitoring, acting as processors on our instructions.
- AI providers — drawings are sent solely to extract geometry, and report facts solely to generate narrative text. They are not used to train third-party models.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where required by law or to protect our legal rights.
We do not sell your personal data.
International transfers
Our providers may process data outside your country. Where that happens we rely on appropriate safeguards, such as standard contractual clauses or an adequacy decision.
How long we keep data
Account data, floor plans, analyses and chat history are kept while your account is active and for up to 90 days after you delete the item or close your account, to allow for accidental-deletion recovery, after which they are deleted or anonymised. Transaction and invoicing records are kept for up to 8 years where tax and accounting law requires it. Security and error logs are kept for up to 12 months.
Your rights
Subject to applicable law, you may request: access to your data; correction of inaccurate data; erasure; a portable export; restriction of or objection to processing (including processing based on legitimate interests); and withdrawal of consent for marketing at any time. You can delete an analysis or your account from within the app at any time — deleting an analysis removes its stored plan, findings and chat history, and deleting your account removes associated data subject to the retention periods above. To exercise any right, email privacy@vastulens.ai; we respond within one month. If you are in the UK/EEA you may also complain to your supervisory authority.
Cookies
We use essential cookies and local storage to keep you signed in and to remember preferences. We use limited analytics storage to understand product usage. We do not use advertising cookies. You can clear or block cookies in your browser, though essential cookies are required for sign-in to work.
Contact
Privacy questions: privacy@vastulens.ai