1. About this policy
1.1Scope. This policy explains how UdaiSpot ("we") collects, uses, shares and protects personal data when you use our website, mobile app and services (the "Platform"). It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules under them, as they apply.
1.2Our role. For the personal data you give us on the Platform, we are the data fiduciary, meaning we decide why and how it is processed. When a listing, requirement or enquiry is shared with another user or a service professional, that person is also responsible for how they use it.
1.3Your agreement. By using the Platform and giving consent where we ask for it, you agree to this policy. If you do not agree, please do not use the Platform.
2. Personal data we collect
2.1Account details. Your name, email address, phone number, password (kept only as a secure hash) and, if you choose, a profile photo and preferences.
2.2What you post. Listings, requirements, enquiries, booking requests, reviews, comments and messages, with the property details, photos, documents, price and locations you add, and the contact details you attach to them.
2.3Location. Map pins and addresses you enter or choose for a listing or search. With your permission, your device location when you use a "use my location" feature. You can refuse or withdraw this permission at any time in your device settings.
2.4Device and usage data. Technical data such as device and browser type, app version, pages and features used, and approximate region. We keep a salted, irreversible hash of your IP address for security and spam prevention. In the mobile app, with your permission, we store a push-notification token.
2.5Documents for services. Papers you upload or share for verification, registry, legal, loan or plan services. These can be sensitive, so we ask only for what the service needs. Please do not upload identity documents such as Aadhaar or PAN unless a service needs them, and mask the numbers you do not need to show.
2.6Partner updates. If you use a feature offered with a partner, such as a loan call-back, the partner may tell us the status of your request.
3. Why we use your data
3.1To provide the Platform. To create and run your account, review and publish your content, show your saved items and activity, answer enquiries, handle booking and service requests, and connect you with the owners, sellers, venues and professionals you contact.
3.2To keep it safe. To prevent fraud, spam and misuse, moderate content, resolve complaints and disputes, enforce our Terms and meet legal duties.
3.3To improve and communicate. To fix problems, understand how features are used, and send service messages such as one-time codes, status updates and policy notices.
3.4Marketing. We send promotional messages only if you have opted in, and you can opt out at any time from Settings or the message itself. Service and legal messages cannot be switched off while you have an account.
3.5Lawful grounds. We process your data on your consent, and for the "certain legitimate uses" the law allows, such as providing a service you asked for, complying with law and responding to emergencies.
3.6Calls and messages. We may call, message or email you about your account, enquiries, listings and service requests. These service messages are separate from promotional messages, which we send only with your consent.
4. Who we share it with
4.1Public information. Published listings, their photos and the details you chose to show are visible to everyone. Comments and reviews show your account name. Think before you put personal details in public text.
4.2Contact details. A requirement poster's phone number is shown only to signed-in visitors. When you enquire about or respond to a listing or requirement, the contact details you provide go to that owner, poster, venue or desk so they can reply.
4.3Professionals and partners. At your request, we share what is needed with the professionals, lenders, vendors and venues who handle it, for example documents for a verification. They may use it only to deal with your request, and under their own privacy practices.
4.4Service providers. We use trusted providers for hosting, storage, email and SMS delivery, notifications, maps and security. They process data for us under confidentiality obligations and not for their own purposes.
4.5Legal and safety. We may disclose data to courts, government or law-enforcement bodies where the law requires or permits, to protect rights, safety and property, and to investigate fraud or breaches.
4.6Business changes. If we merge, are acquired or reorganise, your data may pass to the successor, who must honour this policy.
4.7We do not sell your data. We do not sell your personal data to anyone.
5. Where and how long we keep data
5.1Location of data. Your data is stored on secure servers and cloud services that may be inside or outside India. Where data goes outside India we do so only as the law allows.
5.2Retention. We keep data while your account is active and for as long as needed to provide the service, resolve disputes, prevent abuse and meet legal and accounting duties. After that we delete or anonymise it. Security and audit logs are kept for a limited period. Where the law requires, we keep records of removed content and related account information for 180 days or longer.
5.3Deleted listings. Removing or deactivating a listing takes it off the Platform. Copies may remain for a short time in backups and caches, and in records we must keep by law.
6. Security
6.1Safeguards. We use reasonable security safeguards, including encrypted connections, hashed passwords, access controls, rate limiting and logging of administrator actions. No system is perfectly secure, and we cannot guarantee absolute security.
6.2Your part. Use a strong, unique password, keep codes private, sign out on shared devices and tell us at once if you suspect misuse.
6.3Data breach. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
7. Your rights and choices
7.1Your rights. Subject to the law, you can ask to know what personal data we hold and how it is used, to correct or complete it, to erase it, to withdraw consent, and to nominate another person to exercise these rights if you die or become unable to.
7.2Easy controls. You can view and edit your profile, manage notifications and marketing, export your data and delete your account from My Account and Settings.
7.3Making a request. Write to our Grievance Officer through the Grievance Redressal page. We will respond within the time the law sets, and within 15 days where we can. We may need to confirm your identity first.
7.4Withdrawing consent. Withdrawing consent is as easy as giving it. It does not affect processing already done, and we may be unable to provide a service that needs the data.
7.5Complaints. If you are not satisfied with our response you may complain to the Data Protection Board of India, once the law allows and after raising it with us first.
7.6Grievance Officer. The name and contact details of our Grievance Officer are published on the Grievance Redressal page under Legal details.
8. Children
8.1Not for under-18s. The Platform is not meant for anyone under 18 and we do not knowingly collect children's data. If we learn that we have, we will delete it. A parent or guardian who believes a child has given us data can contact our Grievance Officer.
9. Cookies, device storage and app permissions
9.1Cookies and storage. We use cookies and your browser or device storage to keep you signed in, remember drafts, saved items, your compare list and preferences, and keep the Platform secure. You can clear or block them in your browser, but some features may stop working.
9.2Advertising. We do not use third-party advertising cookies on the Platform.
9.3Mobile app permissions. The app may ask for camera, photo library, files, location, notifications and phone or messaging hand-off so that you can take photos, attach documents, find places and receive updates. Each is optional and used only for the feature that asks for it. You can change them in your device settings.
9.4Secure sign-in storage. In the app, your sign-in may be kept in the device's secure storage so that it survives restarts. Signing out removes it.
10. Maps and third-party services
10.1Map providers. When you search or drop a pin, the text you type or the coordinates you choose may be sent to our map and geocoding providers so they can return results. Their own privacy terms apply to what they receive.
10.2Links. The Platform may link to other sites and apps we do not control. This policy does not cover them.
11. Changes and contact
11.1Changes. We may update this policy. The date at the top shows the latest version. For material changes we will notify you on the Platform or by email.
11.2Contact. For privacy questions or to use your rights, contact our Grievance Officer through the Grievance Redressal page.