Privacy Policy

Effective date: October 28, 2026

1. Who we are

Rekhilo ("Rekhilo", "we", "us") operates the Rekhilo business operating system available at nakksha.in. For any privacy-related question you can reach us at admin@nakksha.in.

2. Information we collect

We collect only the information needed to create and operate your private workspace.

Account information

• Name
• Email address
• Basic Google profile information (name, email, profile picture) when you sign in with Google

Business information you add

• Company name, address, GST number, contact details, logo
• Client and relationship records you create
• Quotations, invoices, and financial records
• Notes, voice notes, calendar entries, and project communication
• Documents you upload to your workspace

Contact form messages

• Messages you send through our contact form: your name, email, optional phone and studio name, and your message. We use them only to reply to you.

Security and device information

• Browser, operating system, device type, and a non-identifying device fingerprint, used to detect suspicious sign-ins
• Login activity (success/failure, timestamps) for your own audit log

3. Why we collect this information

• Identity & account security — Google Sign-In verifies you are the legitimate account holder; your 4-digit workspace PIN protects access to your data.
• Workspace personalization — your company information is used to populate quotations, invoices, and the workspace UI.
• Business operations — client, quotation, and financial data is stored so you can run your practice from one place.
• Notifications — we send sign-in alerts, renewal reminders, and security notifications relevant to your account.
• Service improvement — anonymous, aggregated usage signals help us improve reliability and UX. We do not profile individuals.

4. How your data is protected

• Encrypted in transit — all traffic uses TLS (HTTPS).
• Encrypted at rest — data is encrypted on disk in our managed cloud database.
• Secure authentication — Google Sign-In + a workspace PIN you set. PINs are hashed; we never store them in plain text.
• Access controls — access to workspace records is governed by account ownership and studio membership permissions.
• Recorded activity — login activity and account security events are recorded for review.

5. Who can see your data

Workspace access depends on your account and studio membership permissions. Authorised studio members may access records available to their role.

6. Sharing with third parties

We never sell your data. We rely on a small number of vetted infrastructure providers to deliver the service:

• Google Identity — to verify your identity at sign-in.
• Managed cloud database & file storage — to securely host your workspace.
• Payments are currently collected offline against a receipt. When online payments are enabled, they will be processed by Razorpay, and card details will be handled by Razorpay, never stored by us.

Each provider only receives the minimum information needed to perform its function.

AI assistant

When you use the assistant, what you send it is processed by Google Gemini models through our AI provider to produce a reply. Your conversations are saved in your workspace so you can come back to them. Changes it suggests are made only after you approve them. We do not use your data to train AI models.

Google Calendar

If you connect Google Calendar, Rekhilo uses the calendar.events permission only to add, update and remove the events Rekhilo puts in your calendar. You can turn sync off at any time. Rekhilo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data ownership

You own your business data. You can export your data from inside Settings → Data & Ownership at any time.

8. Data deletion

You can permanently delete your entire workspace and all associated data from Settings → Data & Ownership using the workspace kill switch. This action removes your relationships, clients, quotations, invoices, files, notes, security events and account record. Deletion is immediate and irreversible.

9. Data retention

We retain your data only while your workspace exists. If you delete your workspace, your data is removed from production systems immediately and from routine backups within 30 days.

10. Your rights

You can access, correct, export, or permanently delete your data at any time from inside the app. For any other privacy request, contact admin@nakksha.in.

11. Children

Rekhilo is a professional tool and is not intended for users under 18.

12. Changes to this policy

If we make material changes to this policy we will notify you inside the app and update the effective date at the top of this page.

13. Contact

Questions or requests: admin@nakksha.in.