1. Introduction
Terrain BhuExpert Innovation Pvt. Ltd. ("BhuExpert", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fraud-free real estate marketplace platform and services.
By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Personal Information
We collect the following personal information from users:
- Account Information: Full name, email address, phone number, password
- Authentication Data: Google ID (for OAuth), authentication provider information
- Contact Details: Phone number verification status, email verification status
- Profile Information: User role (builder, seller, buyer, associate), onboarding status
2.2 Business Information (For Builders/Companies)
- Company Details: GST number, legal name of business, trade name, taxpayer type
- Registration Information: Date of registration, constitution of business, state jurisdiction
- Business Address: Principal place of business including building name, street, locality, district, state, pincode
- Business Activity: Nature of business activities, e-invoice status
- Verification Status: GST verification status, eKYC completion status
2.3 eKYC and Verification Data
- Identity Documents: Aadhaar, PAN, Driving License, Voter ID, Passport details
- Personal Details: Full name, date of birth, gender, father's name, mother's name
- Address Information: Address lines, city, state, pincode, country
- Document Metadata: Issue date, issuer information, document URIs
- DigiLocker Data: Access tokens, refresh tokens (encrypted), request IDs
- Biometric Data: Digital signatures (when applicable)
2.4 Communication and Verification
- OTP Data: Phone numbers, email addresses, verification codes, attempt counts
- Communication Logs: Chat history, notification records, email communications
- Inquiry Data: Property inquiries, buyer requirements, seller preferences
2.5 Property and Transaction Data
- Property Information: Listings, images, descriptions, pricing, location data
- Transaction Records: Property views, inquiry history, commission data
- Media Assets: Property photos, documents, brochures
2.6 Technical Information
- Usage Data: Login timestamps, activity logs, platform interactions
- Device Information: IP addresses, browser type, device identifiers
- Cookies and Tracking: Session data, preferences, analytics data
3. How We Use Your Information
We use the collected information for the following purposes:
- Platform Services: Account creation, authentication, and user management
- Verification and Compliance: eKYC verification, GST validation, RERA compliance checks
- Fraud Prevention: Identity verification, document authenticity checks, suspicious activity detection
- Property Services: Listing management, property matching, inquiry facilitation
- Communication: OTP delivery, notifications, customer support, marketing communications
- Legal Compliance: Regulatory requirements, tax obligations, legal documentation
- Platform Improvement: Analytics, user experience optimization, service enhancement
- Business Operations: Commission tracking, referral management, performance analytics
4. Information Sharing and Disclosure
We may share your information in the following circumstances:
4.1 Verification Partners
- Government authorities (GST portal, DigiLocker, RERA)
- Document verification services (APISETU GSTN)
- Identity verification platforms
4.2 Service Providers
- SMS/WhatsApp service providers (for OTP delivery)
- Email service providers
- Cloud storage and hosting services
- Analytics and monitoring services
4.3 Legal Requirements
- Compliance with applicable laws and regulations
- Response to legal processes (subpoenas, court orders)
- Protection of our rights and safety
- Fraud investigation and prevention
4.4 Platform Users
- Property listings and contact information (with consent)
- Verified business information for transparency
- Communication facilitation between buyers and sellers
5. Data Security
We implement comprehensive security measures to protect your information:
- Encryption: Data encryption in transit and at rest
- Access Controls: Role-based access and authentication systems
- Secure Storage: Database security with backup and recovery protocols
- Regular Audits: Security assessments and vulnerability testing
- Compliance: Adherence to industry security standards
- Token Management: Secure handling of API tokens and credentials
6. Data Retention
We retain your information for the following periods:
- Account Data: Until account deletion or as required by law
- eKYC Data: As per regulatory requirements (typically 7 years)
- Transaction Records: As required for tax and audit purposes
- Communication Logs: 3 years for customer service and dispute resolution
- OTP Data: Automatically deleted after expiration (typically 10 minutes)
- Property Data: Until listing removal or account deletion
7. Your Privacy Rights
You have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data (subject to legal requirements)
- Portability: Request a copy of your data in machine-readable format
- Objection: Opt-out of marketing communications
- Restriction: Limit processing of your information
To exercise these rights, contact us at privacy@bhuexpert.com
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain user sessions and authentication
- Remember user preferences and settings
- Analyze platform usage and performance
- Provide personalized experiences
- Prevent fraud and enhance security
You can control cookie settings through your browser preferences.
9. Third-Party Services
Our platform integrates with third-party services:
- Google Services: OAuth authentication, analytics
- Government APIs: GST verification, DigiLocker integration
- Communication Services: SMS, WhatsApp, email providers
- Payment Processors: Secure transaction processing
These services have their own privacy policies and practices that govern their use of your information.
10. International Data Transfers
Your information is primarily processed and stored in India. If data is transferred internationally, we ensure appropriate safeguards are in place to protect your privacy and comply with applicable data protection laws.
11. Children's Privacy
Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our platform and updating the "Last Updated" date.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
14. Regulatory Compliance
This Privacy Policy is designed to comply with applicable Indian data protection laws, including the Information Technology Act, 2000, and its rules. We are committed to maintaining compliance with evolving privacy regulations and industry best practices.