Privacy Policy

This Privacy Policy explains what personal data PropSizzle collects, why we collect it, and what you can do about it. It is written to reflect how the platform actually works.

This document is a starting draft and has not been reviewed by a lawyer. Replace every bracketed placeholder and have it checked against the Digital Personal Data Protection Act, 2023 before relying on it.

1. Who Is Responsible

[LEGAL ENTITY NAME], [REGISTERED ADDRESS], decides how and why your personal data is processed on this site. You can reach us at [CONTACT EMAIL].

2. What We Collect

When you submit a property we collect your name, your mobile number, the listing details you enter including the address and map location, and the images you upload.

When you send an enquiry we collect your name, your phone number, your email address if you provide one, your message, and the listing the enquiry relates to.

In all cases we automatically record your IP address, your browser user agent, and a device identifier described in section 6. If you hold an account with us we also store your name, email address and a hashed password.

3. Why We Collect It

We use your contact details to respond to you and to pass your enquiry to the relevant developer, seller or member of our team. We use listing information to publish and manage listings. We use technical data to keep the service secure, to prevent abuse, and to understand which city to show you by default.

4. Phone Verification

Before a property submission is accepted we send a one-time code to the mobile number you provide, by SMS or WhatsApp depending on configuration. The code itself is stored only as a cryptographic hash, and we record the time of sending and the number of attempts so that we can apply rate limits. Your number is shared with the messaging provider solely to deliver the code.

5. Images You Upload

Images are sent to Google Cloud Vision for automated safety screening before they are stored. Images that pass screening are stored on our servers and published with the listing. Images that fail are rejected and not published.

6. Cookies and Device Identifiers

We set a session cookie so that a multi-step form remembers your progress, and a language cookie that records your chosen language. We also set a long-lived identifier cookie which, combined with your IP address and browser user agent, produces a hashed device fingerprint. That fingerprint exists to block devices that repeatedly submit unsafe content. These cookies are necessary for the service to work safely and are not used for advertising.

7. Third Party Services

The following providers process data on our behalf. Their own privacy terms apply in addition to this policy.

Google Maps, to display and select property locations. Google Cloud Vision, to screen uploaded images. Google Translate, to translate interface text. Cloudflare Turnstile, to distinguish people from automated scripts. IPInfo, to estimate your city from your IP address. Mailgun, to send email. Your configured SMS or WhatsApp provider, to deliver verification codes.

8. Who Else Sees Your Data

Enquiry and submission details are visible to our staff, and enquiry contact details are shared with the developer or seller concerned so that they can reply. We do not sell personal data. We may disclose data where the law requires it.

9. How Long We Keep It

Listings and enquiries are kept for as long as they are commercially relevant. Verification codes expire within minutes and the underlying records are kept only long enough to enforce rate limits. Technical logs are retained for security purposes. You may ask us to delete data we no longer need.

10. Your Rights

Subject to the law, you may ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you previously gave. Write to [CONTACT EMAIL] and we will respond within a reasonable period. If you are not satisfied you may complain to the Data Protection Board of India.

11. Security

Passwords are stored using a one-way hash. Verification codes are stored hashed. Database access uses parameterised queries. No system is perfectly secure, and we cannot guarantee that transmission over the internet is free from risk.

12. Children

The service is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will remove it.

13. Changes

We may update this policy. The version on this page is the current one, and the date above reflects the last change.

14. Contact

Questions, requests and complaints about privacy can be sent to [CONTACT EMAIL].