Privacy Policy

This Privacy Policy explains how GharDesk (“GharDesk”, “we”, “us”, “our”), a property- and tenant-management application operated by Varlora, collects, uses, stores, and protects information when you use our website, web app and mobile app (together, the “Service”). We are committed to handling your information responsibly and in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

On this page:
Who we are What we collect How we use it Your tenants’ data Storage & security Sharing Retention Your rights Deleting your account Contact

1. Who we are

The Service is provided by Varlora (“the Company”). For any privacy question or request, you can reach us at hello@ghardesk.app.

2. Information we collect

a) Account information

When you create a GharDesk workspace, we collect your name, username, email address and phone number so we can create and secure your login and contact you about your account.

b) Business data you enter

GharDesk is a tool you use to run your property business. The information you enter is stored so the Service can work. This may include:

Tenant details you record — names, phone numbers, email, address, date of birth, occupation, and government ID details and photographs (such as Aadhaar numbers and ID-proof images) that you choose to add;
Property, room and bed records;
Rent, deposits, payments, payment screenshots, expenses and financial records;
Staff and worker records and attendance;
Documents you generate (admission forms, receipts, agreements) and images you upload (tenant photos, property letterheads/logos).

Important: Government identifiers such as Aadhaar are sensitive. You decide whether to record them. You are responsible for collecting and storing such information lawfully and with the individual’s consent. See our Terms of Service.

c) Technical information

To keep the Service running and secure, we process basic technical data such as your device/browser type and log information about sync activity. We do not use third-party advertising or analytics trackers, and we do not sell your data.

3. How we use your information

To provide, operate and maintain the Service and your workspace;
To authenticate you and keep your data isolated and secure;
To sync your data across your devices and back it up;
To send you essential account, security and service messages;
To provide support when you contact us;
To comply with legal obligations.

We use your information only to provide the Service to you. We do not sell, rent, or use your business data or your tenants’ data for advertising or profiling.

4. Your tenants’ and staff data (our role)

When you record information about your tenants, staff or workers, you are the data fiduciary/controller of that information and GharDesk acts as a processor that stores and processes it on your behalf and under your instructions. You are responsible for having a lawful basis (such as consent) to collect and store this information, and for responding to requests from those individuals. We will assist you where reasonably required.

5. Where your data is stored & how we protect it

Your data is stored in a managed cloud database and file storage provided by our infrastructure partner Supabase, on secure servers currently located in the Asia-Pacific region. Our website and app are delivered through Vercel.
Each workspace is protected by row-level security isolation, so one customer can never access another customer’s data.
All data is transmitted over encrypted HTTPS connections.
Access to production systems is restricted and protected by authentication.

No method of transmission or storage is 100% secure, but we take reasonable technical and organisational measures to protect your information.

We do not sell your data. We share information only with service providers who help us run GharDesk, strictly to provide the Service:

Supabase — database, authentication and file storage;
Vercel — website and app hosting/content delivery;
An email delivery provider — to send account and service emails.

We may also disclose information if required by law, regulation, legal process, or to protect rights, safety and security.

7. Data retention

We keep your data for as long as your workspace is active. If you delete your account, your data is removed as described below. We may retain limited records where required to comply with legal obligations.

8. Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

Access and export your data — GharDesk lets you export everything to Excel/JSON and your photos as a ZIP, at any time, from Settings;
Correct inaccurate data — you can edit your records directly in the app;
Delete your data and account (see below);
Withdraw consent or raise a grievance by contacting us.

9. Deleting your account & data

You can delete your account and all associated data yourself, at any time, from Settings → Delete Account inside the app. Before deletion we prompt you to download a backup. Once confirmed, your workspace records and uploaded files are permanently removed and your login is deactivated. This cannot be undone.

If you need help, email hello@ghardesk.app and we will action verified deletion requests within a reasonable period.

10. Children

GharDesk is a business tool intended for property owners and managers and is not directed at children. It is not intended for use by anyone under 18.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date. Significant changes will be communicated where appropriate.

12. Contact & grievances

For any privacy question, data request, or grievance under the DPDP Act, contact:

GharDesk (operated by Varlora)
Email: hello@ghardesk.app