Privacy Policy

1. Who we are

Pakka is a product of Ensemblon Automation Design and Entertainment Private Limited (CIN U74900KA2010PTC054827), No. 11, 80 Feet Road, S.T Bed, Koramangala, Bangalore 560034, Karnataka, India ("Pakka", "we", "us").

Pakka is a software platform for interior and design-build firms, based in Bengaluru, India. For data you give us directly (for example when you apply to join or create an account), we decide how it is used and are the "data fiduciary" under the DPDP Act. For data a firm puts into Pakka about its own projects, clients, vendors and team, the firm decides what goes in and we process it on the firm's behalf.

Questions or requests: email start@pakka.work.

2. What we collect

• Account and application details: your name, work email, mobile number, firm name, city, role, team size, project details you share in an application, and your password (stored only in hashed form).
• Project data a firm adds: leads, quotes, BOQs, drawings, photos, videos, voice notes, tasks, QC records, measurements, invoices, payment records and bank references entered by the firm, and the names and contact numbers of the firm's team, clients and vendors.
• WhatsApp messages sent to Pakka: messages, voice notes, photos and taps that a firm's team, clients or vendors send to Pakka's WhatsApp number, with the sender's phone number and time.
• WhatsApp Business numbers a firm connects: if a firm connects its own WhatsApp Business number to Pakka, we receive the messages that number sends and receives through Pakka, and, only if the firm agrees during setup, its recent WhatsApp Business app chat history (up to the last 6 months) and its WhatsApp contacts. We use these only to show the firm its conversations in Pakka and to send messages the firm asks for.
• Usage data: pages visited, device and browser type, approximate location from the IP address, and actions in the product, used to keep it secure and improve it.
• Website: we use privacy-friendly analytics that count visits without advertising cookies. If you arrive through a link with a referral code, we keep that code for your visit so the right person is credited.

3. Why we use it

• To run the service: create accounts, deliver the features a firm uses, send the messages and updates it asks for, and provide support.
• To send messages from a firm's own WhatsApp number on the firm's behalf, such as updates to its clients, when the firm has connected that number and turned those messages on. Anyone can reply STOP or tap 'Stop messages' and Pakka will not message them again on behalf of that firm.
• To review applications to join Pakka, including the founding programme, and to contact you about them by email, phone or WhatsApp.
• To keep Pakka secure: verify WhatsApp messages, log who changed money and status records, detect misuse and prevent fraud.
• To improve the product, using usage patterns and feedback.
• To meet legal obligations, such as tax and accounting records for our own billing.
• We do not sell personal data, and we do not use a firm's project data to advertise to anyone.

4. AI features

Some features use AI models to transcribe voice notes, draft quote lines, read floor plans and answer questions from drawings. Content is sent to the model provider only to produce that result. Pakka's AI drafts; a person confirms anything that moves work or money. We do not allow providers to use a firm's data to train their public models where the provider offers that choice, and we choose providers that commit to this.

5. Who we share it with

Only with service providers that help us run Pakka, under contracts that limit their use of the data, and only as much as each needs:

• Cloud hosting and database providers that store and serve the platform and website.
• Meta Platforms, to send and receive WhatsApp messages through the WhatsApp Business Platform, both from Pakka's number and from WhatsApp Business numbers that firms connect to Pakka.
• AI model providers, for the features described above.
• Email and messaging providers, to send account and onboarding messages.
• Analytics providers, in aggregated or pseudonymous form.
• Authorities, if the law requires it, and a buyer or successor if Pakka's business is transferred, with this policy continuing to apply.

6. Inside a firm: who sees what

Each firm controls access for its own users. Pakka's permissions limit what each role sees: site engineers do not see money, vendors do not see a firm's client rates, and clients see only the progress a firm chooses to share. Shared links expire and can be switched off.

7. Where data is stored

Data is stored with reputable cloud providers and may be stored or processed outside India. Where it is, we use providers with strong security commitments, and we comply with any restrictions the Government of India places on transfers.

8. How long we keep it

• Account and project data: while the firm's account is active. When a firm closes its account, we keep its data for 30 days so it can be exported, then delete it, except what the law requires us to keep.
• Data from a connected WhatsApp number: while the number stays connected. When a firm disconnects it (in Pakka or in the WhatsApp Business app), we stop receiving new messages and delete the synced chat history and contacts within 30 days, unless the firm asks us to keep them with its project records.
• Applications: until you ask us to remove them, or 24 months after our last contact with you.
• Security logs: up to 12 months.

9. How we protect it

Each firm's data is kept separate and every request is checked against the firm and the person asking. Data is encrypted in transit. Payment steps need a second person and a bank reference, and changes to money records are logged. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

10. Your rights

Under the DPDP Act you can ask us for a summary of your personal data and how it is used, ask us to correct, complete or erase it, withdraw consent you gave us, and nominate someone to act for you. If your data is in Pakka because a firm added it (for example as its client or vendor), please contact that firm first; we will help them respond.

To use these rights, email start@pakka.work. We reply within 30 days.

See also our Data deletion page: pakka.work/data-deletion.

11. Grievances

If you are unhappy with how we handled your data, write to our Grievance Officer at start@pakka.work. We acknowledge within 48 hours and aim to resolve within 30 days. If you are still not satisfied, you may approach the Data Protection Board of India.

12. Children

Pakka is a business service for adults. We do not knowingly collect data from anyone under 18.

13. Changes

We will post any changes here with a new date, and tell account holders by email about important ones.