Privacy Policy

What personal data POP collects, why, who sees it, and how you control it, as India's Digital Personal Data Protection Act 2023 requires.

Last updated 27 Oct 2026

1. Who we are

POP collects only what it needs to check properties and connect you with the right lister. POP never sells your personal data.

This policy explains how PIECE OF PROPERTIES PVT LTD ("POP", "we") handles personal data on the Platform. We are a Data Fiduciary under the Digital Personal Data Protection Act 2023 ("DPDP Act") and its rules, and we follow the Information Technology Act 2000.

It applies to everyone who uses the Platform: Buyers, Tenants, Owners, Agents, Builders, and people who contact us. It is in English. A Telugu version will follow.

2. What we collect

Anyone who logs in

What we collect
Name, mobile number, preferred language, email (if you give it), account settings
Where it comes from
You, when you sign up

Buyer or Tenant who enquires

What we collect
Name, mobile number, the Listing you asked about, your message, the visit or video you asked for
Where it comes from
You

Owner or Builder who lists

What we collect
Property address and details, price, photos, ownership papers such as a sale deed, ID such as PAN or masked Aadhaar
Where it comes from
You

Agent

What we collect
Business name, years in business, city, RERA number, ID and address proof
Where it comes from
You

Anyone who contacts us or reports a problem

What we collect
Name, phone number, topic, message and anything you attach
Where it comes from
You

A property our Coordinator visits

What we collect
Visit date, visit notes, Coordinator photos, the map location of the visit, names of the Coordinator and the approving admin
Where it comes from
POP staff

Any visitor

What we collect
IP address, device and browser type, pages viewed, rough location, error logs
Where it comes from
Your device, automatically

Logged-in users

What we collect
Pages and properties you opened, searches, use of Bujji and the finance tools, including what this browser did before you logged in
Where it comes from
Your device, automatically

Map and "near me" users

What we collect
Exact location, only while you use that feature
Where it comes from
Your device, with your permission

Recently viewed properties and recent searches are kept in your own browser. Saved properties and saved searches are kept in your account, because saving needs a verified phone number.

We do not ask for a full Aadhaar number, and please do not upload one. Hide the first 8 digits. We do not collect bank account details, health data, or data about religion or caste.

3. Why we use it

We use your personal data with your consent. You give it when you sign up, list a property or make an enquiry. Some uses need no consent, where the DPDP Act allows it (legitimate uses under Section 7).

Create and protect your account, and check your number by OTP

Data used
Name, mobile, language
Legal basis
Consent

Check a property before it goes live

Data used
Listing details, papers, visit records, photos
Legal basis
Consent

Send your enquiry to the lister of that one Listing

Data used
Name, mobile, message
Legal basis
Consent

Send you WhatsApp messages about properties you looked at or asked about, and similar ones. Reply STOP at any time to stop them.

Data used
Name, mobile, pages and properties you opened
Legal basis
Consent

Send updates about your Listing or enquiry on WhatsApp or SMS

Data used
Mobile, language
Legal basis
Consent (you can withdraw it)

Check Agents and Builders against RERA records

Data used
RERA number, business details
Legal basis
Consent

Answer questions, complaints and problem reports

Data used
Contact details, message
Legal basis
Consent

Keep the Platform safe from fraud, fake listings and misuse

Data used
Device and usage data, account history
Legal basis
Legitimate use (Section 7) and legal duty

Improve the Platform with total counts

Data used
Usage data, with nothing that names you
Legal basis
Consent

Follow the law, court orders and requests from authorities

Data used
Any data required
Legal basis
Legal duty (Section 7)

We do not use your data for targeted ads, and we do not build profiles to sell to anyone.

4. Who we share it with

POP does not sell, rent or trade personal data to advertisers or anyone else. To change that, we would have to change this policy and ask for your consent again.

We share personal data only like this:

  • The lister of the Listing you enquire about. Your name and number go to that one Owner, Agent or Builder, and to no one else.
  • Buyers and Tenants who enquire. A lister's number stays hidden on the Listing. It is shown only after a verified enquiry.
  • Service providers who work for us under written contracts and only on our instructions: website hosting and file storage (Vercel), database (Neon), OTP and messages (WhatsApp Business and SMS providers), maps (Google Maps), and the AI service behind Bujji (Anthropic).
  • Authorities, when the law, a court order or a lawful request from a government agency requires it, or to protect someone's safety.
  • A buyer of POP's business, if POP is merged or sold, with the same protections as this policy.

Papers such as sale deeds, PAN and Aadhaar are stored encrypted. Only the POP team members doing the verification see them. They are never shown in public.

5. Data stored outside India

Some of our service providers may store or process data on servers outside India. We send data only to countries the Central Government has not restricted under Section 16 of the DPDP Act, and we require the same protection as this policy.

6. Cookies and browser storage

We use essential cookies and browser storage to keep you logged in, remember your language, and keep your recent searches. We count page visits with our own counter, stored in our own database, to see how the Platform is used. Until you log in, this is tied only to a random id in your browser, not to you. When you log in, it is tied to your account, so we can help you with the properties you looked at. If your browser asks not to be tracked (Do Not Track or Global Privacy Control), we do not count your visits. We do not use advertising cookies or outside tracking tools. You can clear cookies and browser storage in your browser settings, but some features may then stop working.

7. How long we keep it

Account details (name, phone, email)

How long
While your account exists. Removed at once when you delete it.

Listings you posted

How long
Taken down when you delete your account, with your contact details removed.

Verification papers (sale deed, PAN, Aadhaar)

How long
90 days after the Listing is approved or rejected, unless the law needs longer.

Verification record (which Coordinator visited, which admin approved)

How long
Kept without anything that names you, so past badges can still be proved.

Enquiry records

How long
12 months from the enquiry.

Logs and security data

How long
180 days, or longer if an investigation or the law needs it.

When the purpose ends, or you withdraw consent, we erase your data unless a law requires us to keep it.

8. How we protect it

We follow reasonable security practices under the DPDP Act and the IT (Reasonable Security Practices) Rules 2011. These include encryption while data travels and while it is stored, access by job role, OTP login, and split duties, so no one can approve a Listing they posted or visited. No system is fully secure. If a personal data breach happens, we tell the Data Protection Board of India and the affected Users, as the law requires.

9. Your rights

Under the DPDP Act, you have the right to:

  • Access: get a summary of your data and how we use it. You can download a copy yourself from the "Your data" page.
  • Correct: fix or update any data that is wrong or incomplete.
  • Erase: delete your account yourself, at once, from the "Your data" page.
  • Withdraw consent at any time, including for WhatsApp updates. This does not undo what was already done.
  • Nominate another person to use your rights if you die or cannot act yourself.
  • Complain: to our Grievance Officer first, and then to the Data Protection Board of India.

For anything you cannot do yourself on the "Your data" page, write to the Grievance Officer below. We may ask you to confirm who you are with an OTP.

10. Children

The Platform is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you think a child has given us data, contact us and we will delete it.

11. Changes to this policy

When this policy changes, we update the "Last updated" date. For important changes, we tell registered Users by WhatsApp, SMS or email before they start. Where the law requires, we ask for your consent again.

12. Contact and complaints

  • Grievance Officer
  • PIECE OF PROPERTIES PVT LTD
  • Phone: +91 90000 00000
  • Available Monday to Saturday, 9 am to 7 pm IST. You can also write to us from the Contact page.

We confirm we got your complaint within 24 hours and reply within 30 days. If you are not happy with our reply, you can complain to the Data Protection Board of India.