Privacy Policy

VSquare ERP is an internal enterprise resource planning platform operated by V Square Infra (“we”, “us”, “our”). The application is provided to employees, contractors, project managers and authorised site personnel of V Square Infra and its client projects to manage day-to-day construction site operations, stock, procurement, daily progress reports (DPRs) and billing.

VSquare ERP is not a consumer product. Accounts are created only by administrators; there is no public sign-up.

• Authenticate you and enforce role-based access control.
• Record and attribute operational entries (DPRs, dispatches, stock movements, approvals) to the correct user, project and timestamp.
• Send transactional push notifications about work assigned to you or awaiting your approval.
• Maintain audit trails required by internal governance and client reporting obligations.
• Detect abuse, debug failures, and improve system reliability and security.

We do not sell your data, and we do not use it for advertising or profiling.

We process personal data on the basis of (a) the employment or contractual relationship between you and V Square Infra or the project you are assigned to; (b) our legitimate business interests in operating and securing the platform; and (c) compliance with applicable law (including audit and tax record-keeping obligations).

Your data is shared only with:

• Authorised personnel of V Square Infra and the specific project(s) you are assigned to, on a role-based need-to-know basis.
• Infrastructure sub-processors that host or transmit the data on our behalf:
  • Microsoft Azure — application & database hosting (region: India).
  • Google Firebase Cloud Messaging — delivery of push notifications to Android devices.
  • Google Play Services — Android app distribution and integrity checks.
• Government or law-enforcement authorities when we are legally required to disclose (e.g. valid court order).

We do not sell, rent, or trade personal data to third parties.

• Transport encryption (HTTPS / TLS) for all traffic.
• Passwords stored only as bcrypt hashes.
• Role- and project-scoped access enforced on every API request.
• Short-lived JWT sessions (1 hour expiry with 30-minute refresh) delivered via HTTP-only cookies.
• CSRF, rate-limiting and content-security-policy protections on write endpoints.
• Encrypted backups of the operational database.

No system is perfectly secure. If you suspect a breach or a compromised account, contact us immediately at infodesk@vsquareinfra.com.

Operational records (DPRs, stock ledgers, procurement, billing) are retained for the life of the project plus the period required for audit, tax and statutory compliance under Indian law — typically not less than eight (8) years.

Account credentials are retained while your account is active. Deactivated accounts are archived; the login is disabled immediately, but the identifying fields are preserved so that historical entries remain attributable in the audit trail.

Diagnostic logs are rotated automatically and retained for a maximum of 90 days.

Subject to applicable law, you may:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your account and personal data, subject to the retention obligations described in Section 7 (audit records tied to project work cannot be deleted until their statutory retention period expires; they can be de-linked from your identifiers).
• Withdraw consent to push notifications at any time.
• Raise a complaint with the applicable data-protection authority.

To exercise any of these rights, email infodesk@vsquareinfra.com from the address on file with your organisation. We aim to respond within 30 days.

• CAMERA — capture site photographs for DPRs, stock receipts and dispatches.
• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION — tag on-site check-ins and geo-locate site entries at the moment of submission.
• READ_MEDIA_IMAGES / storage — allow you to attach existing photos from your device to a submission.
• POST_NOTIFICATIONS — display push notifications for approvals, assignments and stock alerts.
• INTERNET / ACCESS_NETWORK_STATE — communicate with the VSquare ERP server and handle offline behaviour.

You may revoke any of these permissions at any time from your device Settings; the corresponding feature will stop working until the permission is granted again.

VSquare ERP is intended solely for adult professional users (18 years or older). We do not knowingly collect personal data from children.

Data is hosted in India. Push-notification metadata may transit through Google’s global infrastructure for delivery. Where data is transferred outside your country, we rely on the sub- processor’s standard contractual safeguards.

We may update this policy from time to time. The “Effective date” above always reflects the current version. Material changes will be communicated in-app or by email to registered users.

V Square Infra
67/77, Sarvamangala Colony,
Ashoka Colony, Ashok Nagar,
Chennai — 600 083,
Tamil Nadu, India
Email: infodesk@vsquareinfra.com