This Privacy Policy explains how GharDesk (“GharDesk”, “we”, “us”, “our”), a property- and tenant-management application operated by Varlora Enterprises, collects, uses, stores, and protects information when you use our website, web app and mobile app (together, the “Service”). We are committed to handling your information responsibly and in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).
The Service is provided by Varlora Enterprises, a sole proprietorship (proprietor: BADA RAM) based in Bengaluru, India (“we”, “us”). For any privacy question or request, you can reach us at support@ghardesk.com.
Our role depends on the data:
When you start a free trial or create a workspace, we collect your name, email address, mobile number (optional), business / PG name, a password (stored only in protected, hashed form) and the usernames and logins of the staff you add. We also keep a record of when you accepted these Terms and this Policy, and which version, and a sales-enquiry record of your sign-up so we can help you get started.
GharDesk is a tool you use to run your property business. The information you enter is stored so the Service can work. This may include:
When you pay for a plan online, the payment is handled by Razorpay. We receive confirmation of the payment (plan, period, amount and payment reference), not your card, UPI or bank details, which are handled by Razorpay under its own privacy policy.
To keep the Service running and secure, we process basic technical data such as your device/browser type, IP address and log information about sign-ins and sync activity. We do not use advertising trackers, and we do not sell your data. On our public website pages (not inside the app) we count page visits with Vercel Web Analytics, which does not use cookies and does not build a profile of you; it records things like the page opened, the country, the device type and the website you came from.
| What we do | Why we are allowed to (legal basis) |
|---|---|
| Provide, operate and secure the Service and your workspace; sync and back up your data; authenticate you | To perform our contract with you |
| Send essential account, security, billing and service messages; give support | Contract; our legitimate interest in running the Service |
| Contact you about your trial and help you get started (section 4) | Your consent when you sign up; our legitimate interest. You can opt out at any time |
| Keep the Service safe, prevent fraud and abuse, fix faults | Legitimate interest |
| Keep payment and tax records; respond to lawful requests | Legal obligation |
We use your information only for these purposes. We do not sell, rent or share your business data or your tenants’ data for advertising or profiling, and we do not make automated decisions that have legal effects on you.
When you sign up, or ask for a call back on our website (we keep the name and mobile number you enter, and the page you were on, only to contact you about GharDesk), we may contact you by email, phone call or WhatsApp message to help you set up, answer questions about your trial and tell you about plans. We do not send messages unrelated to GharDesk and we do not give your contact details to others for their marketing. To stop these messages, reply “STOP” or email support@ghardesk.com. You will still receive essential account, security and billing messages. If you create a workspace, we may keep a sales-enquiry record (your name, contact details and sign-up note) to follow up; it is deleted if you delete your account (section 11).
To help us sort enquiries by relevance, we may use a scoring tool. It receives only the type and size details and the text of the enquiry, never your name, phone number or email address.
When you record information about your tenants, staff or workers, you are the data fiduciary/controller of that information and GharDesk acts as a processor that stores and processes it on your behalf and under your instructions. You are responsible for having a lawful basis (such as consent) to collect and store this information, for telling those people how you use it, and for responding to their requests. As your processor, we commit to:
International transfers. Our service providers may process data in countries other than where you live. Where that happens we rely on contractual and technical safeguards offered by those providers, so your data stays protected to a similar standard.
If something goes wrong. No method of transmission or storage is 100% secure. If a security breach affects your personal data, we will tell you without undue delay (and, where the law requires, the authorities), explain what happened and what you can do.
We do not sell your data and we do not “share” it for advertising. We share information only with service providers who help us run GharDesk, strictly to provide the Service, under contracts that require them to protect it:
We may also disclose information if required by law, regulation, legal process or a lawful request from a public authority, to protect rights, safety and security, or as part of a merger or sale of our business (in which case this Policy continues to apply and we will tell you first).
We do not use advertising or tracking cookies, and our visit counter on the public website does not use cookies either. We use only what is needed to run the Service: your sign-in session and a local copy of your workspace data on your device (so it opens quickly and keeps working offline), your language choice on our website, and the app’s own cached files. These stay on your device and you can clear them in your browser, but then you will need to sign in again.
Depending on where you live, and subject to applicable law (including India’s Digital Personal Data Protection Act, 2023, and, where they apply to you, the EU/UK GDPR and the California CCPA/CPRA), you have the right to:
How to use your rights: email support@ghardesk.com from the address on your account. We may ask you to verify who you are. We will acknowledge within 7 days and respond within 30 days. It is free, unless a request is clearly excessive. We will not treat you worse for using your rights. If you are a tenant or staff member of a GharDesk customer, please contact that customer first, because they control your data; we will help them respond.
No sale, no sharing for advertising. We have not sold or shared personal information for advertising in the last 12 months, and we do not intend to.
You can delete your account and all associated data yourself, at any time, from Settings → Delete Account inside the app. Before deletion we prompt you to download a backup. Once confirmed, your workspace records, uploaded files, backup copies, your sign-up and sales-enquiry record, and your login are permanently removed. This cannot be undone.
What stays: records of payments you made to us, which the law requires us to keep (section 9), and any copies you downloaded yourself. If you need help, email support@ghardesk.com and we will action verified deletion requests within 30 days.
GharDesk is a business tool intended for property owners and managers and is not directed at children. It is not intended for use by anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us data, tell us and we will delete it.
We review this Policy at least once a year and whenever we change how we use data or add a new service provider. We will post the updated version here with a new “Last updated” date. For significant changes, we will also tell you by email or in the app before they take effect. We record which version you accepted when you sign up.
For any privacy question, data request, or complaint, including under the DPDP Act, contact our Grievance Officer:
Grievance Officer, GharDesk (operated by Varlora Enterprises (Proprietor: BADA RAM)), Bengaluru, India
Email: support@ghardesk.com
We acknowledge within 7 days and resolve within 30 days. If you are not satisfied, you may complain to your local data-protection authority.