Plan a project

DPDP-ready privacy notice

Privacy Notice

This notice explains how Cubora Infra Private Limited handles personal data when you explore a building system, submit a project brief, request a callback, use a customer account or contact our team.

Effective date23 October 2026Document version1.0

1. Who is responsible for your data

Cubora Infra Private Limited is the operator of cuborainfra.com and the data fiduciary for personal data collected through this portal. We serve project enquiries across Northeast India. This notice covers the public website, project assessment, customer project access, callbacks, appointments and files you deliberately share with us.

External services that you choose to open—such as WhatsApp, Instagram or your email application—also process information under their own privacy terms.

2. Personal data we may handle

  • Identity and contact: name, telephone number, email address, communication preference and OTP/account identifiers.
  • Project information: intended use, building type, area, floors, rooms or units, priorities, programme, notes and preferred appointment time.
  • Site information: town, district, state or PIN code, selected directory entry, terrain, access and facts about an existing building or rooftop.
  • Documents and media: drawings, PDFs and site photographs that you choose to upload or send.
  • Technical and inferred information: preliminary system direction, completeness, risks, engineering checks and lead-routing status generated from your answers.
  • Security and device information: IP-derived security signals, browser/user-agent information, request time, session identifiers, audit events and anti-spam signals.
  • Source information: the page and referrer connected with an enquiry; campaign parameters may be recorded if present.

Please do not submit Aadhaar numbers, bank details, medical information or other unrelated sensitive material in free-text fields, photographs or drawings.

3. Why we use the data

  • to create and store the project brief you request;
  • to provide a preliminary, non-binding project direction and identify information requiring technical review;
  • to contact you about that enquiry, schedule a callback or site assessment, and send service confirmations;
  • to verify customer access by OTP and show projects linked to the verified number;
  • to assess site, system, scope, compliance and cost-readiness questions with qualified team members;
  • to protect the portal, prevent spam or abuse, keep audit records and investigate incidents;
  • to comply with legal, tax, regulatory, safety and dispute-resolution duties; and
  • to improve the service using aggregated or de-identified information.

We do not treat permission to discuss a project as permission for promotional SMS or email. Marketing requires a separate, specific opt-in and can be withdrawn independently.

Consent is reversible. Where processing relies on consent, you can withdraw it as easily as it was given. Withdrawal does not invalidate processing already lawfully completed and may limit our ability to continue an optional service.

4. When information is shared

Access is limited to authorised Cubora personnel and service providers that need the information for the stated purpose. Depending on the service, this may include website/application hosting, database and backup services, email delivery, the configured SMS/OTP provider, professional advisers, survey/design/engineering partners assigned to the enquiry, and authorities where disclosure is legally required.

If you choose WhatsApp, Instagram, telephone or email links, the destination provider may receive the information you send plus technical metadata. Share only what is necessary. We do not sell personal data.

Where a processor or service is outside India, Cubora will apply applicable transfer restrictions, contractual safeguards and government directions then in force.

5. How long information is kept

We keep personal data only for as long as the stated purpose remains active, a customer relationship or project requires it, or a legal, contractual, safety, professional-record, fraud-prevention or dispute obligation requires retention. OTPs and sessions have short validity periods; project and contractual records may need longer retention.

When retention is no longer justified, records are deleted, securely disposed of or irreversibly anonymised, including through scheduled review of active systems and backups. A deletion request may be declined or deferred where preservation is legally required; we will explain the applicable reason.

6. Security measures

Measures include encrypted contact fields, protected session cookies, role-based staff access, rate limiting, anti-spam controls, file-type and size validation, audit trails, restricted server storage and transport encryption. No system is risk-free. If a personal-data breach creates an applicable notification duty, Cubora will follow the reporting and individual-notice requirements in force.

7. Your privacy choices and rights

Subject to the law in force and appropriate identity verification, you may ask for a summary of personal data being processed, correction or completion, erasure, withdrawal of consent, grievance redressal, or nomination of another individual to exercise rights in circumstances recognised by law.

You may also change optional browser-storage choices through Cookie & Device Storage. For request steps and escalation, see Privacy Rights & Grievance Redressal.

8. Children

This construction project portal is intended for adults and is not directed to people under 18. Do not submit a child’s personal data. If we learn that such data was collected without the consent or lawful authority required at that time, we will restrict and delete it as appropriate.

9. Contact and updates

Email privacy or grievance requests to info@cuborainfra.com or call +91 84149 84771. Include the project reference where available, but do not email identity documents unless we specifically request a secure verification method.

We may revise this notice when services or legal requirements change. Material changes will be shown through the website or an appropriate direct notice.