Privacy Policy

Spacifyn ("we", "us") operates this property and home-services platform. This notice is the notice required by Section 5 of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). It tells you what personal data we process, why, on what basis, how long we keep it, and how you can exercise your rights.

For the personal data described here we are the Data Fiduciary and you are the Data Principal. Words like "personal data", "processing" and "consent" carry the meanings given to them in the DPDP Act.

We collect only what the Platform needs to work:

• Account details — your name, mobile number (verified by OTP), email address, an optional WhatsApp number, your profile photo if you sign in with Google or Apple, and the account type you choose (owner, buyer, tenant, partner).
• Listing content — everything you enter when posting: property address, locality, pincode, map coordinates you pick, area, price, deposit, amenities, photographs and captions, and any documents you upload for verification.
• Enquiries and interactions — enquiries you send, contact details you reveal, visit requests, chat and support-chat messages, wishlists, reviews and testimonials, and partner or job applications.
• Transaction details — packages and features you buy, ad credits consumed, shop orders and the delivery address and phone number attached to them, and invoices. Card, UPI and bank details are entered on our payment gateway's page and are never stored by us.
• Technical data — IP address, device and browser type, pages viewed, and error and security logs, generated automatically when you use the Platform.

We rely on your consent under Section 6 of the DPDP Act for the purposes below, except where a legitimate use under Section 7 applies — for example when you voluntarily give us data for a purpose you asked us to fulfil, or where processing is needed to comply with a law or a court order.

• To create and secure your account, verify your mobile number, and prevent fraud and misuse.
• To publish your listings, run them through moderation, and show them to other users.
• To connect you with owners, tenants, buyers and service partners you have chosen to contact.
• To take payment, apply ad credits and package entitlements, deliver shop orders, and issue invoices.
• To send you service messages about your listings, enquiries, visits, orders and payments, by push, SMS, WhatsApp, email or call.
• To answer support requests, resolve disputes and enforce our Terms.
• To meet obligations under Indian tax, accounting and information-technology law, and to respond to lawful requests from courts and authorities.
• To send you offers and updates about our services — only where you have opted in. You can opt out at any time without losing access to the rest of the Platform.

A published listing shows the property's locality, pincode, approximate map location, photographs and the details you entered. Treat a listing as public.

Your phone number is not shown openly. It is disclosed to a specific user only when they spend a contact reveal on your listing, or when you reply to their enquiry, request a visit, or start a chat. We log these reveals so we can investigate misuse.

Users who receive your contact details may use them only for that property enquiry. Using them for anything else breaches our Terms, and we act on reports of it.

We do not sell your personal data and we do not share it with data brokers or advertisers. We share it only with processors who run parts of the Platform for us, under contracts that limit them to our instructions as required by Section 8(2) of the DPDP Act:

• Google (Firebase) — authentication, database, file storage and push notifications. Our Firestore data is hosted in Google's asia-south1 (Mumbai) region.
• Vercel — application hosting and delivery.
• Razorpay — payment processing. They receive the payment details you enter and the order amount; we receive only the transaction result and a masked reference.
• OpenStreetMap (Nominatim) — address search and reverse geocoding. The address text or coordinates you are looking up are sent to this service; your identity is not.
• Our own staff, on a role-restricted basis, to moderate listings, verify properties, deliver assisted services and handle support.
• Courts, regulators, law-enforcement and our professional advisers, where we are legally required or permitted to disclose.

We keep our primary database in India. Some processors named above may handle limited data, such as logs and delivery infrastructure, outside India. Section 16 of the DPDP Act permits such transfers except to countries the Central Government restricts by notification, and we will stop any transfer that becomes restricted.

We keep personal data only for as long as the purpose it was collected for still applies, as required by Section 8(7) of the DPDP Act.

In practice: account data for as long as your account is open; listings and their photos while they are live and for a reasonable period after they close, so disputes and commission claims can be resolved; enquiry, chat and contact-reveal records for up to three years; and payment, invoice and tax records for eight years, as required by Indian tax and accounting law.

When you withdraw consent or delete your account, we erase or anonymise your personal data except what we must keep for the legal and dispute purposes above, and we require our processors to do the same.

Under Sections 11 to 14 of the DPDP Act you may:

• Ask for a summary of the personal data we hold about you and how we process it, and the identities of others we have shared it with.
• Have inaccurate or incomplete data corrected, completed or updated — most of this you can do yourself from your dashboard.
• Ask us to erase your personal data where the purpose it was collected for no longer applies and no law requires us to retain it.
• Withdraw a consent you gave. Withdrawing is as easy as giving it: write to us, or change the setting in your account. Withdrawal does not undo processing already carried out, and it may mean parts of the Platform stop working for you.
• Nominate another person to exercise these rights on your behalf if you die or become incapable of exercising them.
• Raise a grievance with us, and escalate it if you are not satisfied — see Section 11 below.

Section 15 of the DPDP Act asks you not to impersonate anyone when giving personal data, not to suppress material information when providing data for any document or identifier, not to register a false or frivolous grievance, and to give only authentic information when asking for correction or erasure.

The Platform is meant for people aged 18 and over, and we do not knowingly collect the personal data of children. Where Section 9 of the DPDP Act applies, we will not process a child's personal data without verifiable parental consent, and we do not track children or serve them targeted advertising. If you believe a child has given us personal data, tell us and we will delete it.

We protect your data with the safeguards required by Section 8(5) of the DPDP Act: authentication and OTP verification, role-based staff access, database and storage rules that restrict who can read what, encryption in transit, and server-side enforcement of anything that affects money or visibility.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and every affected user, as required by Section 8(6), with what happened and what you should do.

Questions about this notice, or a request to exercise the rights in Section 8, go to our Data Protection Officer through the Contact page. We acknowledge within 24 hours and aim to resolve within 15 days, or within the period the applicable Rules prescribe.

Data Protection Officer / Grievance Officer: Insaf — reachable at the address and email listed on our Contact page.

If we do not resolve your grievance, you may complain to the Data Protection Board of India under Section 13(3) of the DPDP Act.

We use cookies and browser storage that are necessary to keep you signed in, keep your session secure and remember your preferences. We do not run third-party advertising or cross-site tracking cookies. Blocking necessary cookies will sign you out.

We may update this notice. The date above tells you when it last changed, and we will tell you about significant changes through the Platform before they take effect.