Your privacy,
our commitment

1 Introduction

Welcome to RamBhumi ("we", "our", "us"). We are committed to protecting your privacy and handling your personal information with transparency, care, and respect. This Privacy Policy describes how we collect, use, store, and share your information when you use our website, mobile applications, and services (collectively, the "Platform").

By accessing or using RamBhumi, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Platform.

2 Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, password, and role (Buyer, Seller, or Broker) when you register.
• KYC Information: PAN number and name (for identity verification), Aadhaar details (where required), and other government-issued identification for compliance purposes.
• Property Listings: Property details, photos, location, pricing, and related documentation when you list a property.
• Communications: Messages sent through our in-app chat, enquiry forms, or contact forms.
• Payment Information: Transaction details for premium services (processed through secure third-party payment gateways).

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers.
• Usage Data: Pages viewed, properties searched, time spent on the Platform, and interaction patterns.
• Location Data: Approximate location based on IP address (for localizing search results).
• Cookies and Similar Technologies: As described in Section 10.

2.3 Information from Third Parties

• Verification results from Cashfree (PAN verification status, name match score, PAN type).
• Publicly available property records and government databases where permitted by law.

3 PAN Verification (Cashfree)

3.1 What We Verify

When you submit your PAN for verification, we send your PAN number and name to Cashfree's Verification Suite API. Cashfree returns:

• Whether the PAN is valid or invalid
• The name registered against the PAN (as per Income Tax Department records)
• The PAN type (Individual or Business)
• A name match score (Direct Match, Partial Match, etc.)
• PAN status (Active, Deactivated, Fake, Deleted, etc.)

3.2 How Cashfree Processes Your Data

Cashfree acts as a data processor on our behalf. Cashfree transmits your PAN and name to the authorized government data source (Income Tax Department / NSDL) to obtain the verification result. This processing is done solely on our instructions and for the purpose of identity verification.

For more information on how Cashfree handles your data, please refer to Cashfree's Privacy Policy at www.cashfree.com/privacy-policy .

3.3 Why We Verify PAN

• To confirm your identity before you engage in property transactions.
• To comply with KYC requirements under applicable Indian laws.
• To prevent fraud, identity theft, and misuse of our Platform.
• To ensure that sellers and brokers are genuine and accountable.

3.4 Data Minimization for PAN

We only send the minimum required data (PAN and name) to Cashfree for verification. We do not store your PAN with Cashfree beyond the duration of the API call. The verification result is stored securely in our systems for compliance and audit purposes.

4 How We Use Your Information

We use your personal information for the following purposes:

• Account Management: To create and manage your account, authenticate you, and provide customer support.
• KYC & Compliance: To verify your identity (including PAN verification via Cashfree) as required by law.
• Property Services: To list properties, connect buyers with sellers/brokers, and facilitate enquiries and appointments.
• Communication: To send you service updates, respond to your enquiries, and notify you about properties that match your interests.
• Platform Improvement: To analyze usage patterns and improve our services, features, and user experience.
• Security & Fraud Prevention: To detect, prevent, and address fraud, security breaches, and technical issues.
• Legal Obligations: To comply with applicable laws, regulations, and legal processes.

5 Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws, we process your personal data based on:

• Your Consent: Where you have given explicit, informed consent (e.g., for PAN verification, marketing communications).
• Performance of Contract: To provide you with the services you have requested (e.g., account creation, property listing).
• Legitimate Uses: Where processing is necessary for compliance with law, responding to legal obligations, or for our legitimate business interests (e.g., fraud prevention).

You may withdraw your consent at any time by contacting us, though this may affect your ability to use certain features of the Platform.

6 Data Sharing & Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

6.1 Service Providers

• Cashfree Payments: For PAN verification and payment processing.
• Cloud & Hosting Providers: For secure data storage and platform infrastructure.
• Communication Services: For sending emails, SMS, and notifications.

All service providers are bound by strict confidentiality agreements and process data only on our instructions.

6.2 Other Users (with Your Consent)

• When you submit an enquiry, your name and contact details may be shared with the property seller/broker.
• When you list a property, your contact information may be visible to buyers.

6.3 Legal & Regulatory

• To comply with court orders, legal processes, or government requests.
• To enforce our Terms of Service and protect our rights.
• To investigate and prevent fraud or security threats.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

7 Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and loss. These measures include:

• Encryption: Data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted.
• Access Controls: Access to personal data is restricted on a need-to-know basis.
• Audit Trails: We maintain logs of data access and verification requests.
• Secure Infrastructure: Data is stored in secure, compliant data centers.

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.

8 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• KYC Records (including PAN verification results): Retained for a minimum of 5 years after account closure, as required by RBI KYC guidelines and the Prevention of Money Laundering Act.
• Account Information: Retained while your account is active and for a reasonable period thereafter.
• Usage Data: Retained in anonymized or aggregated form for analytics.

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.

9 Your Rights

Under the DPDP Act, 2023 and other applicable laws, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention requirements.
• Withdraw Consent: Withdraw consent for processing at any time.
• Grievance Redressal: Lodge a complaint with our Grievance Officer.
• Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, please contact our Grievance Officer at [email protected].

10 Cookies & Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can control cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

For more details, please refer to our Cookie Policy (if available).

11 Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12 Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately.

13 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our Platform. Your continued use of RamBhumi after changes are posted constitutes acceptance of the updated policy.