1. Who we are

GRIHATEK IT SOLUTIONS PRIVATE LIMITED ("GrihaTEK", "we", "us") is a company registered in India (CIN U62091WR2026PTC295515) with its registered office at 303 FL-303, Block-A, T-7, Soul, Shyamnagar, North 24 Parganas, West Bengal 700135. We design, build and install smart home automation systems.

2. What data we collect

We collect only what is necessary to respond to your enquiry:

• Contact form: name, phone number, email address, and a description of your requirement.
• Assistant chat: messages you send, and any name/phone/email you share if you request a callback.
• Technical data: IP address (for rate limiting), browser type, and session cookies.

Assistant chat: conversations are persisted server-side so the assistant can remember context within a session. Messages are processed by a self-hosted language model and may contain whatever you type. Please do not enter sensitive personal information — such as financial details, ID numbers or health information — in the chat.

3. Analytics and cookies

We use Google Tag Manager and Google Analytics 4 to understand how visitors use our site. We do not send personal information (names, phone numbers, or email addresses) to Google. Analytics uses pseudonymous identifiers (client IDs stored in cookies such as _ga) rather than direct identifiers.

We use cookies only for:

• Analytics (with your consent — you can decline)
• Admin session authentication (after you log in)
• Rate limiting and security

You can manage your consent preference using the banner at the bottom of the page.

Cross-border transfer: Google processes analytics data outside India.

4. How we use your data

• To contact you about your enquiry
• To prepare an estimate or proposal
• To create a lead in our business system (ERPNext)
• To improve our website and services

We do not sell, rent, or share your personal data with third parties for marketing.

5. Data retention

Enquiry data is retained for as long as necessary to fulfil your request and comply with legal obligations. Analytics data is retained for 14 months.

6. Your rights under India's DPDP Act, 2023

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• Register a grievance with the Data Protection Board of India

To exercise these rights, email us at contact@grihatek.com.

Grievance Officer: If you have a concern about how we handle your personal data, you may contact our Grievance Officer at contact@grihatek.com. We will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days.

7. Data security

We use industry-standard measures including HTTPS, signed session cookies, rate limiting, and access controls.

8. Third-party services

We use the following services:

• Google Analytics 4 — pseudonymous traffic analytics
• Google Tag Manager — tag management (no PII sent)
• ERPNext — our internal business system for lead management
• LiteLLM (self-hosted) — powers the assistant chat
• Slack — enquiry notifications are posted to a private Slack workspace. The notification includes your name, phone number, email address and a preview of your requirement.

9. Installation and on-site data

When we carry out a site survey or assessment we may take photographs and notes about your premises to prepare an accurate proposal. These are stored in our internal business system and are not published.

GrihaTEK does not receive, store or have access to footage or sensor readings from an installed system. We operate no service that collects it, and our systems have no facility to receive it.

Systems we install (including RoomGuardian and any CCTV or door-camera units) are designed to run locally, with recording, automation and sensor processing on equipment inside your own home.

Keeping a system local depends on the site network being built for it, including network segregation on suitable equipment. That forms part of the installation scope and is confirmed with you before work begins. Where you choose a device or integration that uses its own manufacturer cloud, any data that device sends is governed by the terms of that manufacturer rather than by this policy.

10. Children

Our website and services are not directed at children under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date.

12. Contact us

For privacy questions or data requests, email contact@grihatek.com or call +91 97499 96520.