This Privacy Policy explains how EstateSarathi ("EstateSarathi", "we", "us", or "our") collects, uses, stores, shares, and protects personal information when you visit our website, register for an account, use our real estate CRM and related services, or interact with public pages we host on your behalf.

EstateSarathi is a business software platform for real estate agents and agencies in India. By using our services, you agree to the practices described in this policy. If you do not agree, please do not use the platform.

1. Who this policy applies to

This policy applies to:

Registered users — agents, agency owners, and team members who create an account.
Website visitors — people who browse our marketing site, blog, or demo request forms.
End customers and prospects — individuals whose information is entered into the platform by our users (for example, buyer or seller leads).
Visitors to public pages — people who view agent microsites, digital visiting cards, property brochures, or shared requirement links.

When our customers upload or manage personal data about their leads and clients, they act as the data fiduciary for that information. EstateSarathi processes that data on their instructions to provide the service.

2. Information we collect

2.1 Account and profile information

When you register or maintain an account, we may collect:

Full name
Email address
Mobile phone number
Password (stored in hashed form; we never store plain-text passwords)
Profile photo or avatar, if you upload one
Agency or business details, role, and account preferences
Public profile slug and website settings for agent microsites and visiting cards

2.2 Business and CRM data you enter

To operate the platform, we store information you or your team submit, including:

Lead and client contact details, requirements, notes, and activity history
Property listings, documents, images, brochures, and share posts
Site visit schedules, transactions, campaigns, and commission records
Requirement shares, responses, and related messages between agents
Builder project and agency website content

2.3 Payment information

Premium subscriptions are processed through Razorpay, a third-party payment provider. We receive payment status, order references, plan details, and limited billing metadata. We do not store full card numbers, UPI PINs, or complete payment credentials on our servers.

2.4 Marketing and demo inquiries

If you submit a contact or demo form on our website, we may collect your name, phone number, email address, city, message, referral source, and campaign attribution data (such as UTM parameters).

2.5 Technical and usage information

When you use our website or application, we automatically collect certain technical data, such as:

IP address
Browser type, device information, and operating system
Pages viewed, actions taken, and timestamps
Session identifiers and authentication tokens
Error logs and security-related events

2.6 Communications and integrations

If you use WhatsApp or other messaging integrations enabled in your account, message content and delivery metadata may be processed through the relevant third-party provider to send notifications, campaigns, or automated replies on your behalf.

3. How we use your information

We use personal information to:

Provide, operate, and improve the EstateSarathi platform
Create and manage user accounts, agencies, and subscriptions
Enable lead management, property sharing, site visits, and team collaboration
Host public agent websites, visiting cards, brochures, and requirement share pages you choose to publish
Process payments and manage premium plan access
Respond to support requests, demo inquiries, and account-related communications
Send service announcements, security alerts, and product updates
Monitor usage, prevent fraud, enforce our terms, and protect platform security
Comply with applicable laws, regulations, and lawful requests

4. Legal basis for processing (India)

We process personal data under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act), where it applies. Depending on the context, processing is based on one or more of the following:

Consent — for example, when you register, submit a form, or enable optional integrations.
Performance of a contract — to deliver the services you sign up for.
Legitimate uses — such as securing the platform, preventing abuse, and improving reliability.
Legal obligation — where we must retain or disclose information under law.

5. How we share information

We do not sell your personal information. We may share data only in these situations:

Service providers — trusted vendors that help us run the platform, such as hosting providers, email delivery services, payment processors (including Razorpay), analytics providers, and messaging API partners.
Other users in your workspace — information you add to the CRM may be visible to authorized members of your agency or team according to your account permissions.
Public sharing you control — when you publish an agent site, visiting card, property brochure, or requirement share link, the content you choose to make public will be accessible to anyone with the link.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.
Legal and safety — when required by law, court order, or government authority, or when necessary to protect rights, safety, and security.

6. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, protect against abuse, and understand how our website is used. You can control cookies through your browser settings, but disabling essential cookies may affect login and core functionality.

Types of cookies we use include:

Essential cookies — required for authentication, security, and session management.
Preference cookies — such as language or locale selection.

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the service. We may retain certain records longer where required for billing, tax, dispute resolution, security, or legal compliance. When data is no longer needed, we delete or anonymize it within a reasonable period, unless retention is required by law.

If you delete your account or request erasure, we will process the request subject to lawful exceptions, such as records we must keep for financial or regulatory reasons.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including access controls, encrypted connections (HTTPS), hashed passwords, and restricted internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on applicable law, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Withdraw consent where processing is consent-based
Request erasure of personal information, subject to legal exceptions
Request information about how your data is processed
Nominate another individual to exercise your rights in the event of death or incapacity, as permitted by law
Lodge a complaint with the relevant data protection authority in India

Registered users can update most profile information from the account settings page. For other requests, contact us using the details below. We may need to verify your identity before fulfilling a request.

10. Children's privacy

EstateSarathi is intended for business use by adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

11. International processing

Our services are primarily operated from India. Some service providers may process data on servers located outside India. Where this occurs, we take steps to ensure appropriate safeguards consistent with applicable law.

12. Third-party links and services

Our platform may link to third-party websites or services, including WhatsApp, payment gateways, and map providers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information to them.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date above. Continued use of the platform after changes become effective constitutes acceptance of the updated policy.

14. Contact us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:

Data fiduciary: EstateSarathi
Email: hello@example.com
Region: Maharashtra, India

Please include enough information for us to identify your account or request and we will respond within a reasonable timeframe as required by applicable law.