Privacy Policy

1. Scope and Principles

This Privacy Policy applies to Immobilier Technologies Pvt. Ltd. ("we", "us", or "our") in our capacity as a Data Fiduciary / Controller under India's Digital Personal Data Protection (DPDP) Act, 2023, and related global regulations including the General Data Protection Regulation (GDPR) where applicable. We operate under strict principles of data minimisation, purpose limitation, storage limitation, transparency, and high-assurance security.

2. Categories of Data Collected

We collect only information essential to providing real estate technology and lead generation services:

• Form Fields & Inquiry Data: Full name, professional work email, telephone/mobile number, company name, monthly marketing budget, and message goals submitted via consultation, ad audit, or contact forms.
• WhatsApp Business API Data: Communication timestamps, phone numbers, and conversation logs when you initiate or consent to automated or agent messaging.
• CRM Synchronization Data: Lead stage status, site visit bookings, campaign source attribution, and sales pipeline outcomes shared between advertising channels and integrated CRMs.
• Cookies & Telemetry (GA4 / GTM): Anonymized IP addresses, browser specifications, operating system, referring URL, session duration, and user interaction events under Google Tag Manager Consent Mode v2.

3. Purpose of Processing and Lawful Basis

We process personal data under lawful grounds including Explicit Consent, Contractual Necessity, and Legitimate Interests:

• Lead Response & Strategy Calls: Responding to buyer or developer inquiries within 24 hours.
• Service Delivery & Product Implementation: Developing custom software, deploying project microsites, configuring CRMs, and managing advertising funnels.
• Marketing with Consent: Delivering ad performance reports, technical insights, and project updates where consent has been affirmatively given.
• Analytics & Platform Optimization: Evaluating website conversion rates and technical stability to enhance user experience.
• Regulatory & Legal Compliance: Complying with Indian tax, corporate governance, and RERA advertising mandates.

4. Third Parties and Sub-Processors

We partner with audited service providers who adhere to data privacy covenants and process data solely upon our instruction:

• Google: Google Analytics 4 (GA4), Google Tag Manager (GTM), Google Ads conversion tracking.
• Meta Platforms: Meta Pixel, Conversions API (CAPI) for housing ad campaigns compliant with Special Ad Category policies.
• WhatsApp Business API: Automated notifications, reminders, and lead qualification via authorized enterprise gateways.
• CRM Platforms: HubSpot, Zoho, Sell.Do, Salesforce, or client-specified CRM endpoints.
• Cloud Hosting & Infrastructure: Vercel and Amazon Web Services (AWS) utilizing secure data centers.

5. International Data Transfers

Where personal data is transferred across international jurisdictions to cloud providers or analytics platforms, such transfers are governed by standard contractual clauses (SCCs) and stringent encryption safeguards to ensure equivalence with Indian DPDP Act standards.

6. Data Retention and Security Architecture

We retain business contact and consultation data for a maximum of 3 years from the last active commercial interaction, or until a formal erasure request is processed.

Our technical safeguards include end-to-end TLS 1.3 encryption in transit, AES-256 encryption at rest, strict role-based access controls (RBAC), multi-factor authentication (MFA), and immutable audit logs.

7. Your Statutory Rights

Under the DPDP Act 2023 and applicable privacy laws, Data Principals have the right to:

• Access: Obtain confirmation and summaries of personal data processed.
• Correction: Correct, update, or complete inaccurate or obsolete records.
• Deletion / Erasure: Request permanent erasure of personal data no longer necessary for the lawful purpose.
• Portability: Request a structured, machine-readable export of provided data.
• Objection & Restriction: Object to processing or request restriction on specific communication channels.
• Consent Withdrawal: Withdraw consent at any time without retroactive penalty.

8. Cookie Policy & Consent Mode

Our website utilizes an interactive cookie consent banner configured with Google Tag Manager Consent Mode v2. You can choose "Essential Only" or "Accept All". Non-essential analytical and advertising storage tags are withheld until affirmative consent is logged.

9. Grievance Officer & Contact Details

For privacy requests, statutory rights execution, or data protection questions, please contact our designated Grievance Officer: