Privacy Notice
1. Who we are
Spacevera is provided by DevHeal Labs AI Private Limited (CIN U62011TS2026PTC219968), IDA Mallapur, Hyderabad, Telangana, India ("we"). Spacevera is sold to construction companies ("customers").
2. Our role
- For account, billing and security data, we decide how the data is used and act as data fiduciary (controller).
- For data a customer puts into Spacevera, such as project records, documents and drawings, the customer decides how it is used. We act as its data processor under the Data Processing Addendum. Please send requests about that data to your company first.
3. Personal data we handle
| Data | Purpose |
|---|---|
| Name, work email, company, role, password hash | Create and secure your account |
| Google or Microsoft sign-in identifiers, if you use single sign-on | Sign you in |
| Your Gmail address and Google's permission to send e-mail for you, if you connect Gmail | Send e-mail from your own address when you choose to |
| Actions in the service, IP address, device and request details | Security, audit trails, troubleshooting |
| Plan, seats and usage | Provide the service, billing, fair use |
| Personal data inside customer content, such as names in contracts or site records | Provide the service on the customer's instructions |
We do not sell personal data, and we do not use it for advertising.
4. Legal basis
We process personal data with your consent, or for a legitimate use allowed by law, including providing the service you asked for, meeting legal duties and protecting the service. If you are in the EEA or UK, our bases are contract, legitimate interests, legal obligation and consent.
5. Sharing
We share data only with the subprocessors listed, with your company's authorized users, and when the law requires it. AI features send only what is needed to answer the request; see the AI Notice.
If you connect your Gmail account, e-mails you choose to send from Spacevera, including recipients, subject, message and attachments, are sent through Google, which processes them at your instruction. If an owner or admin chooses their connected Gmail as the company sending mailbox, automatic notifications to colleagues are sent through Google the same way. We keep a record of who sent what to whom, with the subject, but not the message text. You can disconnect Gmail at any time in Settings, which also asks Google to remove Spacevera's access.
6. Transfers
Our servers are in Hyderabad, India. Some subprocessors process data in other countries, including the United States. We use contracts and safeguards appropriate to the transfer, and follow any restrictions set under Indian law.
7. Retention
- Account and customer data: for as long as the customer's subscription is active, then deleted within 30 days of a verified request, unless the law requires us to keep it.
- Backups: kept for 14 days, then removed.
- Security and audit logs: kept as long as the law requires, including 180 days where Indian rules apply.
8. Security
We use encrypted connections, hashed passwords, access controls by role, separation between customers, and audit logs. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
9. Your rights
Subject to law, you may ask to access, correct or erase your personal data, withdraw consent, name someone to act for you, and raise a grievance. Withdrawing consent does not affect earlier processing. Contact [email protected]. We respond within the time the law sets. If you are not satisfied, you may complain to the Data Protection Board of India or your local authority.
10. Grievance Officer
Grievance Officer, DevHeal Labs AI Private Limited, IDA Mallapur, Hyderabad, Telangana, India. Email: [email protected].
11. Cookies
We use only cookies needed for the service to work. See the Cookie Notice.
12. Children
Spacevera is a business service and is not meant for anyone under 18.
13. Changes
We will post updates here with a new version date, and tell customers about material changes in advance.