Privacy Policy

Rebota ("Rebota", "we", "us", "our") provides a construction progress, cost and billing dashboard ("Service") to contractors and construction businesses through the website rebota.in. This Privacy Policy explains what information we collect from you, how we use it, and the choices you have. By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

a) Information you give us directly

• Account information: name, email address, phone number, company/firm name, and a securely hashed password.
• Project & business data: project names, contract values, client details, activities, daily site logs, labour and material entries, measurement book entries, bills/invoices, inventory records and any notes you add.
• Site photographs: images you upload against a daily site log entry for progress documentation.
• Support communication: any information you share when you contact us for support.

b) Information collected automatically

• Login timestamps, session identifiers and basic device/browser information, used to keep your account secure and improve the Service.
• Standard web server logs (IP address, pages requested, date/time) collected by our hosting provider for security and abuse prevention.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you when you log in;
• Provide the core functionality of the Service — storing and displaying your projects, site logs, progress, cost, billing, inventory and measurement book data back to you;
• Generate the PDF-style reports you request from within the dashboard;
• Process subscription payments and send related receipts/notifications;
• Send important account, billing or security notices;
• Respond to support requests;
• Monitor, secure and improve the Service, and prevent fraud or misuse.

We do not sell your personal data or your project/business data to third parties, and we do not use your construction project data to train external advertising profiles.

3. Payment & Billing Data

Subscription payments on Rebota are processed by Razorpay, a RBI-authorised payment aggregator. When you make a payment, your card, UPI or net-banking details are entered directly on Razorpay's secure payment page and are processed and stored by Razorpay in accordance with applicable RBI guidelines and PCI-DSS standards.

Rebota does not receive or store your full card number, CVV or net-banking credentials on our servers. We only receive a payment confirmation, transaction reference ID, amount and status from Razorpay, which we use to activate or extend your subscription and to maintain your billing history inside your account.

4. Sharing & Disclosure

We share information only in the following limited circumstances:

• Service providers: our hosting provider (for running the application) and Razorpay (for payment processing), each bound by their own security and confidentiality obligations.
• Legal requirements: if required to do so by law, court order, or a valid request from a government or regulatory authority.
• Business transfers: if Rebota is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to confidentiality commitments.
• With your consent: in any other case, only with your explicit permission.

5. Cookies & Session Data

We use a session cookie strictly necessary to keep you logged in while using the dashboard. This cookie is marked HttpOnly and SameSite=Lax and is deleted when you log out or your session expires. We do not currently use third-party advertising or tracking cookies on the application.

6. Data Security

We take reasonable technical and organisational measures to protect your information, including: passwords stored using one-way industry-standard hashing (never in plain text), HTTPS encryption in transit, restricted server-side access to the database, and security headers on every page. No method of transmission or storage is 100% secure, and while we work hard to protect your data, we cannot guarantee absolute security.

7. Data Retention & Deletion

We retain your account and project data for as long as your account is active, so that your dashboard and historical reports remain available to you. If you wish to permanently delete your account and associated data, write to us at support@rebota.in from your registered email address. We will action verified deletion requests within a reasonable time, except where we are required to retain certain records (e.g. billing records) to comply with tax or accounting law.

8. Your Rights

Subject to applicable law, you have the right to:

• Access and review the personal information we hold about you (most of this is already visible inside your Settings page);
• Correct inaccurate information (via Settings, or by writing to us);
• Request deletion of your account and data, as described above;
• Withdraw consent for non-essential processing, where applicable.

9. Children's Privacy

Rebota is a business tool intended for use by contractors, engineers and construction businesses. It is not directed at, and we do not knowingly collect personal information from, individuals under the age of 18.

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal/regulatory reasons. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are:

For any privacy-related questions or complaints, please write to us and we will respond within a reasonable timeframe.