2.1 Data You Provide Directly

• Identity Data: Full name and profile photograph (if uploaded).
• Contact Data: Mobile number.
• Account Data: Username and account type (Buyer / Owner / Agent / Broker).
• Listing Data: Property details, survey numbers, land documents, photographs, pricing, and location information submitted by listing parties.
• Communication Data: Messages or enquiries sent through the Platform.
• Payment Data: Subscription payment details processed via our payment gateway partner. Acrez does not store full card or bank account details. Payment data is handled directly by our payment processor (see Section 5).

2.2 Data Collected Automatically

When you access or use the Platform, we automatically collect:

• Device and Browser Data: IP address, device type, operating system, browser type, and version.
• Usage Data: Pages visited, listings viewed, contact reveals made, search queries, time spent on the Platform, and click patterns.
• Location Data: Approximate location derived from IP address, and precise location if you grant permission on mobile.
• Cookie and Tracking Data: Data collected via cookies, pixels, and similar technologies (see Section 7).

2.3 Data from Third Parties

• Maps / GIS Providers: Spatial and mapping data used to power the map interface.
• Analytics Providers: Aggregated usage analytics (e.g., Google or Microsoft Analytics) to understand platform performance.
• Meta Pixel: Behavioral data for advertising and retargeting on Meta platforms.
• WhatsApp Business API: Data related to communications initiated through WhatsApp from the Platform.
• Payment Gateways: Transaction confirmation and payment status data.

3.1 To Provide and Operate the Platform

• Create and manage your account.
• Display, verify, and manage land listings.
• Enable buyers to discover listings and contact Listing Parties.
• Process subscription payments and manage access tiers.

3.2 To Improve the Platform

• Analyze usage patterns to improve features, performance, and User experience.
• Conduct internal research and product development.

3.3 To Communicate With You

• Send transactional communications: account confirmations, payment receipts, listing updates.
• Send service communications: policy updates, security alerts, support responses.
• Send promotional communications: new features, subscription offers, platform updates — only where you have not opted out.

3.4 To Ensure Safety and Prevent Abuse

• Detect and prevent fraudulent listings, spam, data harvesting, and policy violations.
• Apply fair use and anti-abuse restrictions as described in our Terms and Conditions.
• Protect the rights and safety of other Users and Listing Parties.

3.5 To Meet Legal Obligations

• Comply with applicable Indian law, court orders, or regulatory requirements.
• Respond to lawful requests from government authorities.

• Account Data: Retained for the duration of your account and for up to 2 years after account deletion, for legal and compliance purposes.
• Listing Data: Retained for the duration the listing is active, and for up to 3 years after delisting for dispute resolution purposes.
• Payment Records: Retained for 7 years in accordance with applicable financial and tax laws.
• Usage and Analytics Data: Retained in aggregated or anonymized form for up to 3 years.
• Communications: Retained for up to 2 years from the date of the communication.

Upon expiry of the applicable retention period, data is securely deleted or anonymized.

5.1 With Other Users (Limited, Consent-Based)

When a buyer reveals a listing contact, the Listing Party's name and contact number are shared with that buyer. This is the core function of the Platform and users consent to this when registering.

5.2 With Service Providers (Data Processors)

We share data with trusted third-party processors who assist in operating the Platform, under contractual obligations of confidentiality and data protection:

• Google LLC: Maps, analytics, and cloud infrastructure.
• Mapbox: Maps, features, and layers.
• Meta Platforms Inc.: Advertising and retargeting via Meta Pixel and WhatsApp Business API.
• Razorpay / PayU or equivalent: Payment processing. These providers handle payment data under their own PCI-DSS compliant frameworks.
• Cloud hosting providers: Storage and infrastructure services operating under data processing agreements.

5.3 For Legal Compliance

We may disclose personal data to government authorities, law enforcement agencies, or courts where required by applicable Indian law, court order, or regulatory direction.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of Shashwat Technologies, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Users will be notified of any such transfer where feasible.

5.5 With Your Consent

We may share your data for any other purpose with your explicit prior consent.

8.1 Right to Access

You have the right to request a summary of the personal data Acrez holds about you and the purposes for which it is being processed.

8.2 Right to Correction

You have the right to request correction of any inaccurate or incomplete personal data held about you.

8.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.

8.4 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal. Note that withdrawal of consent for core data may result in inability to use certain Platform features.

8.5 Right to Grievance Redressal

You have the right to raise a grievance with Acrez regarding the handling of your personal data. We will respond within fourteen (14) working days.

8.6 Right to Nominate

Under the DPDP Act, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.

To exercise any of the above rights, write to: support@acrez.co

Acrez will respond within fourteen (14) working days of receiving a valid, verifiable request. We may ask you to verify your identity before processing your request.