Privacy Policy

1. Overview & Data Fiduciary

This Privacy Policy applies to all services provided by Realty Pandit through our website (realtypandit.in), WhatsApp Business account, Instagram account (@airealtypandit), Facebook Page, mobile applications, and any related services.

By using our services, you consent to the collection and processing of your personal data as described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We collect the following categories of personal data:

a) Information You Provide Directly

• Identity Data: Full name, phone number, email address
• Property Preferences: Search queries, buy/sell/rent intent, budget range, BHK requirements, preferred locations
• Communication Data: Messages sent via WhatsApp to Panditji AI, Instagram DMs, Facebook Messenger messages, comments on posts, emails, and phone call recordings (with consent)
• Business Data: Company name, RERA registration number (for agents/builders), business address
• Transaction Data: Site visit history, deal status, negotiation details

b) Information Collected Automatically

• Device Data: Browser type, operating system, IP address, device identifiers
• Usage Data: Pages visited, time spent, click patterns, referral source
• Location Data: Approximate location derived from IP address
• Cookie Data: Session identifiers, preferences, analytics data

c) Information from Third Parties

• Property Portals: Lead information from 99acres, MagicBricks, Housing.com (name, phone, email, property interest)
• Meta Platforms: Profile information from Facebook, Instagram, or WhatsApp when you interact with our business accounts
• Facebook Lead Ads: Information you submit through our lead generation forms on Facebook/Instagram

3. How We Use Your Information

• Property Matching: To provide AI-powered property recommendations through Panditji based on your preferences
• Communication: To respond to your inquiries via WhatsApp, Instagram, Facebook, email, or phone
• Appointment Management: To schedule, confirm, and remind you about property visits
• Lead Management: To assign you to appropriate agents and track your journey from inquiry to deal closure
• Marketing: To send property updates, new listings, and promotional offers (with your consent, withdrawable anytime)
• Analytics: To analyze usage patterns and improve our AI, website, and services
• Advertising: To create and manage targeted advertisements on Meta platforms (Facebook, Instagram) and measure their effectiveness
• Legal Compliance: To comply with RERA, IT Act, DPDP Act, and other applicable Indian laws
• Fraud Prevention: To detect and prevent fraudulent or unauthorized activity

4. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data based on:

• Consent (Section 6): Your explicit consent provided when you interact with our services, submit forms, or message us on WhatsApp/Instagram/Facebook
• Legitimate Uses (Section 7): Processing necessary for performing a contract (property search, visit scheduling), compliance with Indian law, responding to medical emergencies, or employment purposes
• Voluntary Provision: When you voluntarily provide personal data for a specific purpose

You may withdraw consent at any time by contacting us at privacy@realtypandit.in or messaging "STOP" on WhatsApp. Withdrawal of consent does not affect the lawfulness of processing done before withdrawal.

5. Meta Platforms (WhatsApp, Instagram, Facebook)

We use Meta's platforms to provide our services. This section explains how your data is processed across these platforms:

WhatsApp Business

• We operate a WhatsApp Business account (+91 81784 91914) powered by Meta's Cloud API
• Messages you send are processed by our AI assistant (Panditji) to provide property recommendations
• We send transactional messages (appointment confirmations, visit reminders) and marketing messages (new listings, offers) using Meta-approved templates
• You can opt out of marketing messages anytime by replying "STOP"
• Message data is processed per Meta's WhatsApp Business Terms of Service

Instagram (@airealtypandit)

• We may read and respond to comments on our posts and direct messages using AI
• Your public profile information (username, profile picture) is visible when you comment or interact
• We use Instagram API to manage content, moderate comments, and respond to messages
• Data is processed per Meta's Instagram Platform Policy

Facebook Page (Realty Pandit)

• We collect leads through Facebook Lead Ads forms you voluntarily submit
• We may respond to comments and messages on our Page
• We use Meta Pixel for advertising measurement and audience building
• Page Insights data is used for analytics in aggregate form

Meta Advertising

• We may use your data to create Custom Audiences for targeted advertising on Facebook and Instagram
• We use Meta Pixel and Conversions API for ad performance measurement
• You can manage your ad preferences through Meta's Ad Preferences settings
• We do not sell your personal data to third-party advertisers

6. AI & Automated Processing

We use artificial intelligence to enhance our services:

• Panditji AI Assistant: Processes your messages to understand property requirements and provide personalized recommendations. Powered by Google Gemini AI with anonymized queries
• Lead Scoring: Automated scoring of leads based on intent, engagement, and reliability signals to prioritize service
• Property Matching: Automated matching of your preferences against available inventory
• Follow-up Scheduling: Automated determination of optimal follow-up timing based on interaction history

Automated decisions do not produce legal effects. You can request human review of any AI-generated recommendation by contacting our support team.

7. Third-Party Services

We integrate with the following third-party services:

• Meta Platforms (WhatsApp, Instagram, Facebook): Communication and advertising. Subject to Meta's Privacy Policy
• Google (Gemini AI, Maps, Analytics): AI processing, location services, analytics. Subject to Google's Privacy Policy
• 99acres, MagicBricks, Housing.com: Property lead syndication. Only property inquiry data is shared
• GlitchTip (Self-hosted): Error tracking for service reliability. No personal data is intentionally shared
• Postfix SMTP: Email delivery for transactional and communication emails

We do not sell, rent, or trade your personal data to any third party for their independent marketing purposes.

8. Cookies & Tracking

• Essential Cookies: Required for website functionality, authentication, and security. Cannot be disabled
• Analytics Cookies: Google Analytics (G-WJF3Y3SXM3) to understand visitor behavior in aggregate
• Marketing Cookies: Meta Pixel for advertising measurement and Custom Audience creation
• Preference Cookies: Theme preferences (light/dark mode), language selection

You can manage cookies through our consent banner on first visit or through your browser settings. Disabling cookies may affect website functionality.

9. Data Storage & Security

• Location: All primary data is stored on secure servers located in India
• Encryption: Data in transit is encrypted using TLS 1.2+. Sensitive data at rest uses AES-256 encryption
• Access Control: Role-based access with principle of least privilege. Only authorized personnel access personal data
• Security Measures: SSL certificates, firewalls, intrusion detection, regular security audits, automated error monitoring
• Backups: Encrypted backups with secure storage for disaster recovery
• Breach Response: In case of a data breach, we will notify affected individuals and the Data Protection Board of India within 72 hours as required under the DPDP Act

10. Data Retention

• Active Users: Personal data is retained as long as your account is active or services are being provided
• Inactive Leads: Data from leads with no interaction for 2 years may be anonymized or deleted
• Transaction Records: Retained for 8 years as required by Indian tax and RERA regulations
• Communication Logs: WhatsApp/email logs retained for 1 year for service quality, then archived
• Analytics Data: Aggregated and anonymized analytics retained indefinitely

You can request early deletion of your data subject to legal retention obligations. See Data Deletion.

11. Your Rights under DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Information (Section 11(1)): Obtain a summary of your personal data being processed and the processing activities
• Right to Correction & Erasure (Section 12): Request correction of inaccurate data or erasure of data no longer necessary
• Right to Grievance Redressal (Section 13): File a complaint with our Grievance Officer or the Data Protection Board of India
• Right to Nominate (Section 14): Nominate another person to exercise your rights in case of death or incapacity
• Right to Withdraw Consent: Withdraw consent for any or all processing activities at any time

To exercise your rights, email us at privacy@realtypandit.in or visit our Data Deletion page. We will respond within 30 days.

12. Data Deletion

You have the right to request deletion of your personal data. For detailed instructions, visit our dedicated Data Deletion Instructions page.

To request deletion: email privacy@realtypandit.in with subject "Data Deletion Request" or message "DELETE MY DATA" on WhatsApp at +91 81784 91914.

13. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we discover that we have collected data from a child without verifiable parental consent, we will delete it promptly. As required under Section 9 of the DPDP Act, processing of children's data requires verifiable consent of a parent or lawful guardian.

14. Cross-Border Data Transfer

Your personal data may be processed outside India in the following cases:

• Meta Platforms: WhatsApp, Instagram, and Facebook data is processed by Meta Platforms Inc. (USA) under their data processing terms
• Google Services: AI processing and analytics data may be processed by Google LLC (USA)

Such transfers are made in compliance with Section 16 of the DPDP Act, 2023, which permits transfer to countries not restricted by the Central Government. We ensure appropriate safeguards are in place for all cross-border transfers.

15. Grievance Redressal

In accordance with the DPDP Act, 2023 and IT Act, 2000, we have appointed a Grievance Officer:

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be notified via email or WhatsApp. The "Last Updated" date at the top indicates the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.

17. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data: