Privacy Policy
Last updated: August 11, 2026
This Privacy Policy describes how Increatech Business Solution Pvt Ltd ("AirBuild", "we", "us", or "our") collects, uses, and protects your personal information when you use the AirBuild platform and related services (the "Service"). We are committed to protecting your privacy in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.
1. Information We Collect
1.1 Information You Provide
- Account information: Name, email address, and password (hashed).
- Organization information: Organization name, slug, and member roles.
- Payment information: Billing details processed via Razorpay. We do not store full card numbers or banking credentials.
- Profile information: Profile photo (if uploaded via Google OAuth).
1.2 Information Collected Automatically
- Usage data: IP address, browser type, device information, and interaction logs.
- Build metadata: File names, version numbers, platform (iOS/Android), bundle identifiers, and checksums of uploaded builds.
- Download logs: Install link access events, including IP address and timestamp, for analytics and security.
- Cookies: Session cookies for authentication and security.
1.3 Information from Third-Party Services
- Google OAuth: If you sign in with Google, we receive your name, email, and profile photo from Google.
- Razorpay: Payment status and subscription details from Razorpay webhooks.
2. How We Use Your Information
- To provide, operate, and maintain the Service.
- To authenticate users and manage sessions.
- To process subscription payments and issue invoices.
- To send service-related notifications (e.g., build upload confirmations, security alerts).
- To monitor for fraud, abuse, and security threats.
- To provide analytics on app downloads, installs, and build usage.
- To comply with legal obligations under Indian law.
- To improve the Service and develop new features.
3. Legal Basis for Processing
Under the DPDP Act, 2023, we process your personal data based on:
- Consent: You have consented to the processing for the purposes described above.
- Contractual necessity: Processing is necessary to provide the Service under our Terms of Service.
- Legal compliance: Processing is required to comply with Indian laws and regulations.
- Legitimate interests: Processing is necessary for security, fraud prevention, and service improvement.
4. Data Sharing
We do not sell your personal data. We share data only with the following categories of recipients:
- Cloud infrastructure providers: For hosting the Service and storing build files.
- Payment processor (Razorpay): For processing subscription payments.
- Email service providers: For sending transactional and notification emails.
- Law enforcement: When required by Indian law or valid legal process.
5. Data Retention
- Account data: Retained for the duration of your account. Deleted within 30 days of account termination.
- Build files: Retained while your subscription is active. Deleted within 30 days of subscription cancellation.
- Download logs: Retained for 90 days for analytics and security.
- Invoices: Retained for 7 years as required by Indian tax laws (GST).
- Audit logs: Retained for 1 year for security and compliance.
6. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (TLS 1.2+).
- Encryption of data at rest in cloud storage.
- Hashed passwords using bcrypt.
- Malware scanning of all uploaded build files.
- Role-based access control within organizations.
- Regular security audits and vulnerability assessments.
Despite these measures, no system is 100% secure. In the event of a data breach, we will notify affected users and the relevant authorities as required by the DPDP Act, 2023.
7. Your Rights
Under the DPDP Act, 2023, you have the following rights regarding your personal data:
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (subject to legal retention requirements).
- Grievance: File a complaint with our Data Protection Officer.
- Withdrawal of consent: Withdraw consent for processing at any time (note that this may affect your ability to use the Service).
To exercise any of these rights, contact us at privacy@airbuild.dev.
8. International Data Transfers
Your data is primarily stored in cloud infrastructure that may be located outside India. We ensure that such transfers comply with the DPDP Act, 2023 and that appropriate safeguards are in place. By using the Service, you consent to the transfer of your data as described in this policy.
9. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics cookies (if used) are configured with your consent.
10. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
11. Data Protection Officer
Our Data Protection Officer can be reached at dpo@airbuild.dev for any privacy-related concerns, requests, or complaints.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app announcement at least 30 days before the changes take effect.
13. Contact
For any questions about this Privacy Policy, please contact us at privacy@airbuild.dev or write to:
Increatech Business Solution Pvt Ltd
Coimbatore, Tamil Nadu
India