Privacy Policy

We collect only what we need to run the service:

• Account details: your name, mobile phone number and the role you sign up as (buyer, owner or agent). We use your phone number to log you in with a one-time code.
• Property details (owners): the details you enter about a property, such as title, type, city, price, size, features, description and RERA information.
• Photos and location (owners): photos you upload and the map pin you place for a property.
• Visit and deal activity: visit requests, the agent and time slot chosen, and, if you place a token, its status and refund or settlement history.
• Agent verification details: for agents, information needed to verify them (for example a RERA registration number and KYC status).
• Payment and credit-related information, where applicable: if a payment, refund or financial-eligibility step is added, we will collect only the information that step needs, and tell you at that point. [Confirm what, if anything, applies.]
• Technical information: a sign-in cookie, and limited security records (such as hashed phone numbers and IP addresses used to prevent abuse). We do not store your raw IP address for this purpose.

• To create your account and keep it secure.
• To match buyers, owners and agents and arrange property visits.
• To review listings before they go live and to verify agents.
• To communicate with you about your visits, listings and deals.
• To handle tokens, refunds and settlements.
• To prevent fraud and abuse, and to meet our legal obligations.

Where the law requires your consent, we ask for it, and you can withdraw it later (see "Your rights").

• Owners and buyers: an owner sees the name of a buyer who requests a visit to their property. A buyer sees the name of the agent assigned to their visit.
• Verified agents: the agent assigned to a visit sees the buyer's name and the property details they need for that visit.
• Payment partners: if you place a token, payment and escrow partners process it on our behalf. [Name the partner(s) once chosen.]
• Service providers: companies that help us run the service, such as hosting, database, photo storage and SMS providers, who may only use your information to provide those services to us. [List the providers.]
• Authorities: where we are required to by law or a valid legal order.

[We do not sell your personal information. Confirm this statement is accurate.]

We keep your information for as long as your account is active and as long as we need it for the purposes above. After that we delete it or make it anonymous, except where we must keep some records for legal, tax or dispute-resolution reasons. Our current retention periods are: [Fill in, e.g. account data: while the account is active plus X years; transaction records: X years.]

This policy is intended to be consistent with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). [Have your lawyer confirm compliance.] Under that law you can:

• ask for a summary of the personal information we hold about you (access);
• ask us to correct or complete information that is wrong or out of date (correction);
• ask us to delete your information, unless we must keep it by law (erasure);
• withdraw consent you have given us;
• make a complaint to us first, and to the Data Protection Board of India if you are not satisfied;
• nominate another person to exercise your rights if you cannot.

To use any of these rights, email [support@brokingfree.com]. [Name and contact of the grievance officer / data protection contact.] We aim to reply within [X days].

We use a cookie to keep you signed in, and your browser's local storage to remember that you have seen our cookie notice. These are needed for the site to work. We do not use them for advertising. [Update this section if analytics or marketing tools are added.]

We use reasonable technical and organisational measures to protect your information, including encrypted connections, limits on login attempts, and restricted staff access. No system is perfectly secure, so we cannot promise absolute security. If a data breach affects you, we will tell you as the law requires.

BrokingFree is for people aged 18 and over. We do not knowingly collect information from children. If you think a child has given us their information, email [support@brokingfree.com] and we will delete it.

We may update this policy from time to time. When we make an important change, we will update the "last updated" date above and, where appropriate, tell you in the app.

[StableStack LLP]
Email: [support@brokingfree.com]
Address: [Registered office address]