Privacy Policy

1. Who we are

TierInfra is a construction management service (website const.tierinfra.com, the TierInfra Android app and its server api.tierinfra.com) operated by TIER INFRA, Gorakhnath Road, Gorakhpur, Uttar Pradesh, India (“we”, “us”). This policy explains what personal data the service collects, why, and the choices you have.

TierInfra is used by construction companies and their staff. There is no public sign-up: accounts are created by a company's administrator. Each company's data is kept in its own separate database, and the company's administrator decides who can see what.

2. What we collect

Your account

• Name, e-mail address, mobile number (optional), your role and which companies you can work in.
• Your password, stored only as a one-way hash (we can't read it).
• Sign-in records: date and time of each attempt, whether it succeeded, the IP address and whether it came from the website or the app; failed attempts are counted to lock the account for a while after too many.

Location (Android app, Punch In / Out only)

• Your precise GPS location and its accuracy, only while the Punch In / Out screen is open, to check that you are at the site when you punch in or out. The punch is saved with its time, the site and your distance from it. Project managers can also save a site's location from this screen.
• The app never reads your location in the background, and refuses locations from mock-location apps.

Photos and camera

• Site photos you take with the camera or choose from your gallery for daily progress reports, with their captions. The app doesn't add your location to photos, but if your phone's camera app is set to save the location inside photos, it stays in the photo file.

Notifications

• A push notification token (from Expo's push service), the device platform and the app version, to send you work notifications such as approvals. The token is removed when you sign out.

Work records you and your colleagues enter

Daily progress reports, labour attendance, material receipts and issues, requisitions, approvals, drawings and documents, bills, payments and accounts. Depending on how your company uses TierInfra, these can include information about other people:

• Workers: name, trade, mobile number, wage rate, attendance, the type of ID proof and its last four digits.
• Employees (HR and payroll): name, designation, date of birth, gender, contact details, address, PAN, UAN, ESI number, bank account and IFSC, salary, attendance and leave.
• Clients: name, mobile numbers, e-mail, address, Aadhaar number (stored encrypted and shown masked) and the payments received from them (mode, UTR / cheque numbers, payer bank).
• Suppliers and subcontractors: business contact details, GSTIN, PAN, bills and payments.

On your phone

• Your sign-in session, kept in the phone's secure storage.
• Reports and attendance saved while you are offline, until they are sent.
• Copies of photos and documents you opened, so they also open offline. These are deleted when you sign out.

If you contact us

• Your name, e-mail, company and message, when you write to us through the website or by e-mail; used only to reply.

What we don't do

TierInfra has no advertising and no analytics or tracking tools, and we do not sell personal data. The app does not access your contacts, microphone, call logs or background location.

3. How we use it

• To run the service: sign-in, projects and sites, reports, attendance, materials, approvals, payroll, billing and accounts.
• To check that staff are at the site when they punch in or out.
• To send work notifications.
• To keep accounts secure: lockout after repeated failed sign-ins, sign-in history, preventing misuse.
• To answer support requests and deletion requests.
• To meet legal duties, for example keeping accounting, tax and labour records.

4. Sharing

We don't sell or rent personal data. It is shared only:

• Within your company, with colleagues whose role allows it, as set by your company's administrator.
• With service providers working for us: our server hosting provider; Expo's push notification service (it receives the device token and the notification text to deliver it); an e-mail provider when e-mails are sent.
• When you choose to: for example sending a payment receipt or reminder to a client on WhatsApp opens WhatsApp with the message and you send it; opening a site location opens your maps app.
• When the law requires it, for example on a valid order from a court or government authority.

5. Security

• All traffic between the app or website and the server is encrypted (HTTPS / TLS).
• Each company's data is in its own separate database; access is limited by role.
• Passwords are stored only as hashes; Aadhaar numbers are encrypted in the database.
• Accounts lock for a while after repeated failed sign-ins; the app keeps your session in the phone's secure storage.

No system is perfectly secure, but we work to protect your data and will act promptly on any breach as the law requires.

6. How long we keep data

• Account data is kept while the account is in use, and erased when the account is deleted (see below).
• Business records (bills, receipts, payments, accounts, payroll, attendance) are kept for as long as Indian law requires — for example, accounting records for at least eight years — and then deleted.
• Data on your phone is removed when you sign out or uninstall the app.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask to see the personal data we hold about you, to correct or complete it, and to erase it; you can also withdraw a consent you gave (for example, turn off the location permission — Punch In / Out then won't work). Your company's administrator can correct most account details directly; otherwise contact us (below). If you are not satisfied with our answer you can approach the Data Protection Board of India.

8. Deleting your account

You can ask for your account and personal data to be deleted at any time on our account deletion page, from the app (Settings → Delete my account), or by e-mail. We erase your account within 30 days. Records your company must keep by law (for example accounts, bills and payroll) are kept for the legal period; entries made from your account show “Deleted user” instead of your name.

9. Children

TierInfra is a business tool for adults. It is not meant for children under 18, and we don't knowingly collect their data.

10. Changes to this policy

We may update this policy as the service changes. The date at the top shows when it last changed.

11. Contact and grievances

For privacy questions, requests or complaints, write to us; we aim to reply within 30 days.

See also: Data safety · Delete your account