Housdy ("Housdy", "we", "us", or "our") is operated by Housdy Technologies Private Limited, a company incorporated in India [FILL IN: CIN], with its registered office at [FILL IN: registered office address]. We provide an online platform (the "Platform") that helps prospective home buyers and tenants ("Buyers") discover, compare, and connect with real-estate developers, builders, brokers, agents, and loan advisors ("Business Users" or "Partners") through preference-based matching.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, the choices and rights you have, and how to reach us. It should be read together with our Terms and Conditions. By creating an account, completing a profile, submitting an enquiry, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy.
We are the "Data Fiduciary" in respect of personal data processed through the Platform and are committed to handling your data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules framed under it (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021), and other applicable Indian law.
1. Scope and applicability
This Privacy Policy applies to all visitors and registered users of the Platform, including Buyers, Business Users, and their authorised personnel, and to all websites, mobile interfaces, and services that link to it. It does not apply to any third-party website, application, or service that we do not own or control, even if you reach it through a link on the Platform. Your use of those third-party services is governed by their own privacy policies.
2. Definitions
- Personal Data means any data about an individual who is identifiable by or in relation to such data.
- Sensitive Personal Data means personal data that requires heightened protection, including health information, financial information, and any category treated as sensitive under applicable law.
- Data Principal means the individual to whom the personal data relates. Where the Data Principal is a child or a person with a lawful guardian, it includes the parent or lawful guardian.
- Processing means any operation performed on personal data, including collection, storage, use, sharing, disclosure, and erasure.
- Business User means a builder, developer, broker, agent, loan advisor, or other commercial user that uses the Platform to list properties or to receive Buyer leads.
- Lead means a Buyer's contact details and non-sensitive preference summary that may be made available to relevant Business Users so that the Buyer can be contacted, as described in Section 6.
3. Information we collect
We collect the following categories of personal data.
3.1 Information you provide to us
- Account data: your name, email address, mobile number, password (stored only in hashed form, never in plain text), and the role you register under (Buyer, builder, agent, loan advisor, or administrator).
- Profile and preference data: the home-search profiles you create (you may create more than one), including your budget, preferred cities, localities and projects, property and unit type, and your "Need / Want / Like" preferences across amenities and distances.
- Household and family data: information you choose to add about members of your household, such as their relationship to you, age, working status, and study status (including the educational stage, board, or stream of children). This may include information about minors; see Section 8.
- Health-related information: if you choose to record health considerations of household members (for example, to note a preference for proximity to a hospital), this is treated as Sensitive Personal Data. Providing it is optional. See Section 7.
- Listing and business data (Business Users): company and contact details, authorised-signatory information, project and listing details, photographs, pricing, possession and configuration details, RERA registration numbers, and tax or regulatory identifiers you provide.
- Transaction data: records of credit purchases, subscriptions, reveals, report generations, invoices, and billing details. Card and bank details for payments are collected and processed by our payment gateway and are not stored by us in full; see Section 6.2.
- User-generated content: enquiries, messages, reviews, feedback, support requests, and any other content you submit.
- Communications: the content and metadata of your interactions with us and, where you initiate them through the Platform, with Business Users (for example, callback requests and enquiry messages, and the act of initiating a WhatsApp or call contact).
3.2 Information we collect automatically
- Device and technical data: IP address, browser type and version, operating system, device identifiers, language settings, and referring URLs.
- Usage data: pages and listings viewed, searches and filters used, matches and reports generated, features used, and timestamps. Some view records are stored in a privacy-preserving form that is not linked to an individual user account.
- Diagnostic data: error reports and performance data used to detect and fix faults.
- Cookies and similar technologies: as described in Section 9.
- Approximate location: derived from the localities, cities, and projects you choose, and from network information such as your IP address. We do not collect precise GPS location unless you explicitly provide it.
3.3 Information we receive from third parties
- Sign-in providers: if you sign in using Google, we receive basic profile information (such as your name and email address) from that provider, subject to your settings with them.
- Payment gateway: confirmation of payment status and limited transaction metadata from our payment processor.
- Business Users and partners: information necessary to operate listings, leads, and fulfilment.
4. How we use your information
We use personal data for the following purposes:
- to create and administer your account and verify your identity;
- to operate the Platform's core function of matching Buyers with relevant projects and Business Users, including computing compatibility and match scores from the preferences you provide;
- to enable Buyers to be contacted by relevant Business Users about properties, projects, or loan options, where the Buyer has engaged or expressed interest (see Section 6.1);
- to generate compatibility reports, listing narratives, and other Platform outputs, including content generated with the assistance of artificial-intelligence tools (see Section 10);
- to process payments, credits, subscriptions, and invoices;
- to communicate with you about your account, transactions, security, and service updates, and to respond to your enquiries and grievances;
- to send marketing and promotional communications where permitted, subject to your choices (see Section 15);
- to maintain, secure, debug, and improve the Platform, and to develop new features;
- to detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms; and
- to comply with applicable law and to establish, exercise, or defend legal claims.
5. Legal basis and consent
We process personal data on the basis of your consent and, where applicable, on the other lawful bases recognised under the DPDP Act, including for performance of our contract with you, to comply with legal obligations, and for certain legitimate uses permitted by law.
Where we rely on consent, you may withdraw it at any time by contacting our Grievance Officer (Section 17) or using the controls in your account. Withdrawal of consent is prospective and does not affect processing already carried out. Please note that some processing is necessary to provide the Platform; if you withdraw consent for such processing, we may be unable to provide some or all of the services to you, and we may close the relevant profile or account.
6. How and with whom we share information
We do not sell your personal data. We share personal data only as described below.
6.1 With Business Users (lead sharing) -- please read carefully
A central function of the Platform is to connect Buyers with Business Users. When you, as a Buyer, complete a profile, submit an enquiry, request a callback, initiate contact (including by WhatsApp or call), or otherwise express interest in a project, builder, or loan option, you consent to your contact details (such as your name and mobile number) and a summary of your non-sensitive preferences (such as budget range, preferred locality, and property type) being made available to relevant Business Users so that they may contact you about properties, projects, or loan options that may match your stated preferences.
Business Users typically obtain access to this information by spending platform credits, and the Platform applies controls such as exposure limits and pacing to how often and how widely a Lead is shared. Once your information has been shared with a Business User, that Business User becomes responsible as a separate Data Fiduciary for its own use of that information, including for its own marketing and record-keeping, in accordance with applicable law and its own privacy policy. We require Business Users to use Lead information only for legitimate purposes connected with your enquiry and to honour your opt-out and do-not-disturb requests, but we do not control, and are not responsible for, a Business User's independent conduct.
We do NOT share the following with Business Users as part of a Lead: your password, your payment instrument details, the health-related information described in Section 7, or precise information about specific family members beyond what is necessary to convey your preferences.
6.2 With service providers and sub-processors
We share personal data with carefully selected service providers that process it on our behalf and under our instructions, to operate the Platform. These currently include:
- Razorpay -- payment processing and billing (India);
- Google -- authentication / sign-in and fonts;
- Cloudinary and DigitalOcean Spaces -- image hosting, storage, and content delivery;
- Sentry -- error monitoring and diagnostics;
- artificial-intelligence providers (which may include Google, OpenAI, or Anthropic, depending on configuration) -- generation of listing narratives, match explanations, and report prose (see Section 10); and
- mapping and geocoding providers (including OpenStreetMap, Nominatim, Overpass, and Carto) -- locality, distance, and map functionality.
These providers are permitted to use personal data only to provide their services to us and are bound by confidentiality and data-protection obligations. Some of them process data outside India; see Section 13.
6.3 Legal, regulatory, and safety disclosures
We may disclose personal data where we believe in good faith that it is required to comply with applicable law, a court order, or a lawful request by a government or regulatory authority; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Housdy, our users, or the public.
6.4 Business transfers
If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of all or part of our assets, personal data may be transferred as part of that transaction, subject to the acquirer continuing to honour this Privacy Policy or providing notice of any material change.
6.5 With your consent
We may share personal data for any other purpose disclosed to you at the time, with your consent.
7. Sensitive personal data and health information
Providing health-related information about household members is entirely optional. Where you choose to provide it, we treat it as Sensitive Personal Data and apply additional safeguards. Health information is used only to reflect the preferences and context you have asked us to consider for your own home search. It is NOT used as an input to the compatibility or match scoring algorithm, and it is NOT included in any Lead shared with Business Users. You may remove this information at any time through your profile or by contacting our Grievance Officer.
8. Children's data
The Platform is intended for use by adults aged 18 years or older. Buyers may, as part of describing their household, provide information about minors (such as a child's age or educational stage). By providing such information, you confirm that you are the parent or lawful guardian of that child, or that you have the authority and consent of the parent or lawful guardian, and you consent on the child's behalf to the processing described in this Privacy Policy.
We do not knowingly use children's personal data for tracking, behavioural monitoring, or targeted advertising, and we do not knowingly process children's data in a manner likely to cause detrimental effect, consistent with the DPDP Act. If you believe a child's data has been provided without proper authority, please contact our Grievance Officer and we will take appropriate steps to verify and, where required, delete it.
9. Cookies and tracking technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Platform, and understand how it is used.
- Strictly necessary cookies are required for the Platform to function (for example, session and authentication cookies) and cannot be disabled through the Platform.
- Analytics and performance cookies help us understand usage and improve the Platform.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Platform, including your ability to remain signed in.
10. Automated processing, matching scores, and AI-generated content
The Platform computes compatibility and match scores by comparing the preferences you provide against listing data. These scores are informational estimates produced by an algorithm to help you prioritise your search. They are not advice, a valuation, a recommendation, an endorsement, or a guarantee of suitability, and they do not constitute a decision that produces legal or similarly significant effects on you without human involvement.
Some Platform content -- such as listing narratives, match explanations, and parts of compatibility reports -- is generated with the assistance of artificial-intelligence tools. To produce this content, relevant project and preference context is sent to the AI providers named in Section 6.2. AI-generated content may contain errors or omissions and should be independently verified before you rely on it. We do not send your health information or payment details to AI providers.
You have the right to contact us with questions about this processing and to seek human review where the law provides for it.
11. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide the Platform, to comply with our legal, tax, accounting, and regulatory obligations, to resolve disputes, and to enforce our agreements.
- Account and profile data is retained while your account is active and for a reasonable period afterwards.
- Transaction and billing records are retained for the period required by applicable tax and company law.
- Lead and enquiry records are retained for as long as needed to operate the marketplace and to address disputes.
- Diagnostic and log data is retained for a limited period for security and troubleshooting.
When personal data is no longer required, we delete it or anonymise it so that it can no longer be associated with you. Note that once a Lead has been shared with a Business User, that Business User keeps its own copy under its own retention practices, over which we have no control.
12. Data security
We implement reasonable security practices and procedures designed to protect personal data, including encryption of data in transit, hashing of passwords, role-based and tenant-isolated access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for any activity under your account.
In the event of a personal-data breach, we will notify the Data Protection Board of India, the Indian Computer Emergency Response Team (CERT-In), and affected Data Principals as and to the extent required by applicable law.
13. Cross-border data transfers
Some of our service providers (including certain authentication, hosting, error-monitoring, and artificial-intelligence providers named in Section 6.2) process personal data on servers located outside India. Where we transfer personal data outside India, we do so in accordance with applicable law and subject to appropriate safeguards. By using the Platform, you consent to such transfers as necessary to provide the services, except where restricted by applicable law.
14. Your rights
Subject to applicable law, including the DPDP Act, you have the right to:
- access a summary of the personal data we process about you and the processing activities;
- correct, complete, or update inaccurate or incomplete personal data;
- erase personal data that is no longer necessary for the purpose for which it was processed, unless retention is required by law;
- withdraw consent to processing based on consent (Section 5);
- nominate another individual to exercise your rights in the event of your death or incapacity; and
- grievance redressal through our Grievance Officer (Section 17) and, where unsatisfied, by complaining to the Data Protection Board of India.
To exercise these rights, contact our Grievance Officer using the details in Section 17. We may need to verify your identity before acting on a request. We will respond within the timelines required by applicable law. Some rights are subject to conditions and exceptions; for example, we may decline a request where retention is required by law or where the request would adversely affect the rights of others.
15. Marketing and communications
We may send you service communications (such as security, transactional, and account notices) that are necessary to operate the Platform; you cannot opt out of these while you hold an account. We may also send promotional communications by email, SMS, WhatsApp, or other channels where permitted. You can opt out of promotional communications at any time using the unsubscribe or opt-out mechanism provided, or by contacting us. Opting out of promotional messages does not stop service communications. Communications sent to you directly by Business Users after a Lead has been shared are governed by that Business User's own practices and your do-not-disturb preferences.
16. Third-party links and services
The Platform may contain links to third-party websites, services, or content, and may display listings, maps, and media supplied by third parties. We do not control and are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing them with personal data.
17. Grievance redressal and Grievance Officer
In accordance with the DPDP Act and the Information Technology Act, 2000 and the rules made under it, we have appointed a Grievance Officer to address your questions, requests, and complaints about this Privacy Policy and the handling of your personal data.
- Grievance Officer: [FILL IN: name]
- Email: [FILL IN: grievance email, e.g. [email protected]]
- Address: [FILL IN: postal address for grievances]
- Phone: [FILL IN: contact number]
We will acknowledge complaints and resolve them within the timelines prescribed by applicable law. If you are not satisfied with the resolution, you may escalate to the Data Protection Board of India or other competent authority as provided by law.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where required, provide additional notice. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Privacy Policy.
19. Governing law
This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes relating to it are subject to the dispute-resolution and jurisdiction provisions of our Terms and Conditions.
20. Contact us
For any questions about this Privacy Policy or our data practices, contact us at [FILL IN: support/privacy email] or write to Housdy Technologies Private Limited at [FILL IN: registered office address]. For data-protection grievances, please use the Grievance Officer details in Section 17.