Privacy Policy

Information We Collect

We collect information to provide and improve our services. The types of data we collect include:

• Personal Identification: Name, email address, phone number, company name, and job title provided during registration or inquiry.
• Account Data: Login credentials, user preferences, role assignments, and activity logs within the platform.
• Usage Data: Browser type, device information, IP address, pages viewed, time spent on pages, and click patterns collected automatically via cookies and analytics.
• Communication Data: Records of correspondence when you contact us via email, phone, WhatsApp, or in-app messaging.
• Transaction Data: Property inquiry details, booking preferences, and interaction history with listed properties.

How We Use Your Information

We use your personal data for the following purposes:

• Providing and maintaining the DesiGRID platform and related services
• Processing property inquiries, scheduling site visits, and facilitating communication between buyers and developers
• Personalizing your experience and delivering relevant property recommendations
• Sending service updates, security alerts, and administrative notifications
• Analyzing platform usage to improve features, performance, and user experience
• Detecting, preventing, and addressing fraud, security threats, and technical issues
• Complying with legal obligations and regulatory requirements under Indian law

Data Sharing & Third Parties

We do not sell your personal data to third parties. We may share your data in the following circumstances:

• Service Providers: Cloud hosting, analytics, communication services (e.g., WhatsApp Business API) that process data on our behalf under strict confidentiality agreements.
• Real Estate Partners: Developers and project teams you choose to interact with on the platform, limited to the inquiry-specific information you provide.
• Legal Compliance: When required by law, court order, or governmental regulation to disclose your information.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the business assets, with prior notice to affected users.

Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Role-based access controls ensuring only authorized personnel access your data
• Regular security audits, penetration testing, and vulnerability assessments
• Automated backup systems with point-in-time recovery capabilities
• Multi-factor authentication for administrative access

Cookies & Tracking

DesiGRID uses cookies and similar tracking technologies to enhance your experience. These include:

• Essential Cookies: Required for platform functionality, authentication, and security.
• Analytics Cookies: Help us understand how users interact with our platform to improve features and performance.
• Preference Cookies: Remember your settings, language preferences, and display options.

You can manage cookie preferences through your browser settings. Disabling essential cookies may impact platform functionality.

Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to specific processing activities, including direct marketing.

To exercise any of these rights, contact us at privacy@desigrid.com. We will respond within 30 days.

Children's Privacy

DesiGRID is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.

Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. When data is no longer needed, it is securely deleted or anonymized. Typical retention periods are:

• Account data: Duration of account activity plus 2 years
• Usage analytics: 24 months from collection
• Communication records: 3 years from last interaction
• Transaction data: As required by applicable tax and accounting laws

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via email notification and a prominent notice on the platform. We encourage you to review this policy regularly.