Privacy Policy

1. Data Fiduciary

DeccanWave Labs (OPC) Private Limited, 4th Floor, Jubilee Hills Rd No. 36, Hyderabad 500033, is the Data Fiduciary under the DPDP Act, 2023. Grievance Officer: Ms. Priya Reddy · grievance@jameendar.com.

2. Data We Collect

• Account: name, email, phone, Google OAuth identifiers.
• Listings & searches: saved properties, watchlist, alerts, survey numbers you look up.
• Documents: title deeds, ECs, khata extracts, RERA docs uploaded to Terra Vault. Stored in a private, RLS-protected bucket. Only you can access them.
• Payments: processed via PCI-DSS certified gateways. We do not store card numbers.
• Technical: IP, device, browser, cookies, session logs.

3. How We Use Data

• Provide the marketplace, AI valuations, Trust Scores, and inspector bookings.
• Send transactional emails and HYDRAA / price alerts you opted into.
• Improve models on aggregated, de-identified data. Your uploaded documents are never used to train third-party foundation models.
• Comply with legal requests from Indian courts, RERA, HYDRAA, or tax authorities.

4. AI Processing

Bhoomi AI and the Document Analyzer send prompts (and, for the analyzer, extracted text from your uploads) to the Lovable AI Gateway, which routes to Google Gemini / OpenAI models under zero-data-retention agreements. Neither Jameendar nor the model provider retains prompts beyond the response.

5. Sharing

We share data only with: (a) inspectors you book, limited to the property address and your contact; (b) infrastructure processors (Supabase / Lovable Cloud, Cloudflare); (c) authorities under valid legal process. We never sell personal data.

6. Retention

Account data: for the life of your account plus 3 years. Uploaded documents: until you delete them. Anonymised analytics: indefinitely.

7. Your Rights (DPDP Act)

Access, correction, erasure, grievance redressal, nomination, and withdrawal of consent — email privacy@jameendar.com. We respond within 15 working days.

8. Security

TLS 1.3 in transit, AES-256 at rest, Row Level Security on every user table, and mandatory 2FA for internal admins. No system is perfectly secure — report vulnerabilities to security@jameendar.com.

9. Children

Not intended for users under 18. We do not knowingly collect data from minors.

10. Changes

Material changes will be emailed to registered users 15 days before they take effect.