Privacy Policy

The Isha home-automation service is operated by SoVir Technologies LLP (“we”, “us”), the Data Fiduciary for the personal data described here. Hardware is supplied by Voltex.

• Account details: your name and email address, and a securely hashed password.
• Home details your installer or home owner enters: a home name and (optionally) address, the rooms, and the devices in each room.
• Device activity needed to show and control your home, including the state of sensors such as doors, windows and motion while you use the app.
• A mobile number you type at payment, which is passed to our payment processor to complete the payment and is not stored on our servers.
• Technical sign-in records (IP address, browser/device description) kept with your session so we can keep your account secure.

We use this data only to provide the service: to create and secure your account, show and control your home, share access with family members you invite, take subscription payments, and send you service and payment emails. We process it to perform the service you or your home owner have asked for, and with your consent where the law requires it.

We do not sell your data. We share the minimum necessary with:

• PayU (our payment processor) — your name, email, mobile number and the amount, to process a payment on their secure page. Card details are entered on PayU and never reach us.
• Google (Gmail/SMTP) — to deliver account and payment emails to you.

We use no advertising, analytics or tracking services, and the app has no camera, microphone or location access.

We keep your data while your account and home subscription are active. Expired sign-in records, used password-reset links and spent invitations are deleted automatically. When an account is deleted, its personal data is removed and personal details are cleared from our activity logs. Encrypted backups are retained for a short period and then rotated.

Connections use HTTPS. Passwords are hashed, access tokens are stored only as hashes, and each home’s Home Assistant token is encrypted. Access to your home is limited to you and the people you invite, enforced on our servers.

Under the DPDP Act you can:

• Access and correct your account details in the app (Profile), or by contacting us.
• Erase your account and personal data: use “Delete account” in the app, or contact our Grievance Officer. (If you are the only owner of a home, transfer or remove that home first so the household is not locked out.)
• Withdraw consent and raise a grievance, as described below.

The service is intended for adults managing a home. We do not knowingly create accounts for children without verifiable parental consent, and we do not use anyone’s data for tracking or behavioural monitoring of children.

For any question, correction, erasure request or complaint about your personal data, contact our Grievance Officer at privacy@ishaliving.co.in. We will acknowledge and respond within the timelines required by the DPDP Act. If you are not satisfied, you may complain to the Data Protection Board of India.

We may update this policy as the service evolves. We will change the “last updated” date above and, where appropriate, notify you in the app.