Privacy policy

Last updated: 27 April 2026.

Who we are

IKAN Talent Mobility Pvt. Ltd. (“ikan”, “we”) operates ikan Residences. Under the DPDPA we act as a Data Fiduciary for the personal data described below. Our registered office is in Mumbai, India.

What we collect

• Identity & contact — name, email, phone, role (relocation manager, traveler, property partner).
• KYC & booking — passport, visa or Aadhaar (foreign nationals: passport + visa; residents: PAN + Aadhaar), employer details, dates, city, property choice. Required for FRRO/C-form filing and tenancy.
• Aira interactions — voice recordings, transcripts and chat messages with the Aira agent. Used to run the conversation and audit any committed action.
• Usage & security — pages visited, IP address, device type, action logs. Used for fraud prevention and platform reliability.
• Payment data — handled by our processors (Razorpay, Stripe). We never store full card numbers.

Why we collect it

• To confirm and run your booking, including FRRO and C-form compliance for foreign nationals.
• To operate Aira (the AI coordinator) — search, holds, quotes, after-care reminders.
• To communicate with you about your stay (email, SMS, in-app).
• To meet legal obligations under Indian tax law, the DPDPA, and tenancy regulations.
• To improve the platform via aggregated, non-identifying analytics.

Where we store it

• Primary database — Supabase Postgres in the AP-South (Mumbai) region. Encrypted at rest with AES-256.
• Voice transport — LiveKit, global edge. Audio is processed in-flight and not retained on transport infrastructure.
• Voice transcripts — kept 30 days. Voice recordings — 90 days. Audit logs — 7 years (Indian tax retention).
• Backups — encrypted, 30-day retention, same region as the primary database.

Who we share it with

• RMC partners — only with explicit consent from the assignee, and only for their own assignees. Never aggregated across customers.
• Property partners — only the data needed to operate the stay (name, dates, KYC where legally required).
• Sub-processors — listed at /security with the role each plays. Each is contractually bound to our DPA.
• Authorities — only when legally compelled (court order, FRRO filings).
• We never sell personal data. We never share with advertising networks. We never use personal data to train third-party foundation models.

Your rights under DPDPA

As a Data Principal you can:

• Access the personal data we hold about you.
• Correct or update inaccurate personal data.
• Erase personal data we no longer need (subject to statutory retention windows).
• Withdraw consent at any time for processing that relies on consent.
• Nominate a representative to exercise your rights in case of incapacity or death.
• Grieve directly to our grievance officer below, and escalate to the Data Protection Board of India if unresolved.

To exercise any right, email dpo@ikan-residences.com. We respond within 30 days.

Cookies & tracking

We use the minimum cookies required to keep you signed in, plus optional analytics you can decline. Full breakdown on the cookie policy.

Retention

• Active booking data — for the assignment plus 7 years (Indian tax/audit).
• Voice transcripts — 30 days. Recordings — 90 days.
• Account data — until you ask us to delete it (and statutory retention is satisfied).
• Marketing preferences — until you change them.

Children

ikan Residences is a B2B platform. We do not knowingly collect personal data from anyone under 18. Where a child travels as a dependent on a corporate relocation, the booking is made and managed by the parent or guardian.

Changes to this policy

Material changes are notified by email and announced on the homepage at least 30 days before they take effect. The “Last updated” date above reflects the most recent version.

Grievance officer

As required by the DPDPA, you can contact our Data Protection Officer at any time:

• Email — dpo@ikan-residences.com (placeholder; primary channel).
• Post — Data Protection Officer, IKAN Talent Mobility Pvt. Ltd., Mumbai, India. (Postal address placeholder — owner to fill before publishing.)

Contact

General privacy questions: privacy@ikan.co. Security disclosures: security@ikan.co.