Privacy notice

Last updated: 4 October 2026

This notice explains, in plain language, what personal data Gankya collects, why, and what your rights are under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). It has two parts: this website and the Gankya product used by industrial and logistics parks, tech parks, campuses and large townships.

Gankya is operated by Aditya Singh Solanki (sole proprietor, trading as Gankya), India. Contact: privacy@gankya.com.

Part 1: this website (gankya.com)

What we collect

• Pilot request form: your name, role, site name, city, phone/WhatsApp number, and, if you give them, your email, approximate camera count and message.
• Emails you send us.
• No tracking cookies. This site uses no advertising or analytics cookies. Your light/dark theme choice is saved only in your own browser.

Why we use it

Only to reply to your request, arrange a demo or pilot, and follow up about it. We rely on the consent you give when you tick the box on the form.

Who processes it

The pilot request form opens an email in your own email app, addressed to us; no third-party form service is used. Emails are stored in our email inbox. We do not sell or rent your data, and we do not share it with anyone for marketing.

How long we keep it

Up to 24 months after our last conversation, unless you become a customer (then it is kept for the length of the contract), or until you ask us to delete it, whichever comes first.

Part 2: the Gankya product

Gankya is used by gated townships, RWAs, industrial and tech parks, and campuses for the security of their own premises. In the product:

• The customer is in charge. The customer (the RWA, park or campus management, or its facility manager) decides how Gankya is used and is the Data Fiduciary under the DPDP Act. Gankya acts as a Data Processor on the customer's instructions, under a written agreement.
• Purpose-limited. Used only for the safety and security of the premises.
• Recordings stay with the customer. Video footage remains on the customer's own recorder. Gankya keeps only what it needs to work: sighting records (for example, a vehicle number, time and camera) and small snapshots. During pilots, Gankya runs on a computer at the customer's site. Gankya does not record or store video. Incident replay is in testing: when an authorised user replays an incident, a short clip (at most 5 minutes) is fetched from the recorder to the computer at the site, shown only to that user, and deleted within 15 minutes. Each replay is recorded in the access log.
• Anonymous by default. Only people who opt in (for example residents or staff) are ever enrolled by name. Everyone else is shown only as an anonymous ID.
• Visitors are identified through visitor passes, not profiling.
• Every search needs a stated reason and is written to a permanent log that cannot be edited. The customer can review who searched for what, when, and why.
• A person always decides. Gankya suggests and explains. It does not take action on its own.
• Retention. During pilots, data is kept only for the pilot period and deleted (or handed to the customer) at the end, unless the customer asks otherwise in writing. In the product, sightings, camera events and visitor passes are deleted automatically after 30 days by default (the customer's admin can change this); records in an open case are kept until it is closed, and the audit log of searches is kept for at least a year.
• No selling, sharing or pooling of data between customers, and no tracking of anyone beyond the customer's property.

If you live in, work at or visit a site that uses Gankya and have a question about your data, please contact that site's management first, since they control that data. You can also write to us and we will pass your request on and help them respond.

Your rights

Under the DPDP Act you can ask for a summary of your personal data and how it is used, ask us to correct or delete it, withdraw consent at any time (this does not affect anything done before), nominate someone to act for you, and raise a grievance. Email privacy@gankya.com and we will reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Security

We use reasonable safeguards: encrypted connections, restricted access, and access logging. No system is perfectly secure. If a breach affects your data, we will inform you and the authorities as the law requires.

Grievance officer

Aditya Singh Solanki, Gankya, privacy@gankya.com.

Changes

If this notice changes, we will update the date at the top of this page.