Privacy Policy

1 Who we are

DigiProp (“DigiProp”, “we”, “us”, “our”) provides a real estate customer relationship management (CRM) mobile application and related web services designed for real estate brokers, agents, builders and developers.

This Privacy Policy applies to the DigiProp mobile application on Google Play and the Apple App Store, and to our websites and web pages operated under the DigiProp brand (collectively, the “Service”).

2 Your data vs. your customers' data

DigiProp is a business tool. That means two different kinds of personal information flow through it, and our responsibilities differ for each.

Your account data (we are the data controller)

When you register and use DigiProp as a broker, agent or builder, we determine how your account information is handled, and this policy governs it directly.

Your leads' and customers' data (we are the data processor)

When you enter, import or capture information about your prospective buyers and clients (“Lead Data”), you decide what is collected and why. We store and process that information on your behalf and under your instructions.

3 Information we collect

a. Information you provide directly

• Account & identity: name, mobile number, email address, profile photo, business or firm name, designation, RERA registration number, and city of operation.
• Authentication: your mobile number and one-time passwords (OTP) used to verify it. We do not store your OTP after verification.
• Organisation & team: your organisation, team membership, assigned role and permissions.
• Listing & inventory content: property, project, land and plot details, pricing, descriptions, photographs, brochures, documents and location information that you upload.
• Lead Data you enter: your prospective customers' names, phone numbers, email addresses, budget, requirements, notes, follow-up reminders, stage and activity history.
• Support communications: messages, screenshots and details you send us when requesting help.

b. Information collected automatically

• Device & app information: device model, operating system version, app version, language, time zone and a device identifier used to keep your session secure.
• Usage & diagnostics: features used, screens viewed, actions taken, crash reports, error logs and performance data.
• Push notification tokens: issued by Firebase Cloud Messaging so we can deliver lead alerts and reminders.
• Approximate location: derived from your IP address for security and regional settings. Precise device location is collected only if you grant location permission and use a feature that requires it (for example, tagging a site visit or property location).

c. Information from third parties

• Integrated lead sources: if you connect DigiProp to a listing portal, advertising platform, website form or similar source, enquiries submitted through those channels are delivered into your account.
• Colleagues and organisation admins: if your organisation adds you as a team member, your administrator may provide your name, mobile number and role.

4 Device permissions we request

DigiProp requests permissions only for specific features. Every permission is optional — you may decline it, and the rest of the app will continue to work. You can change permissions at any time in your device settings.

5 How we use information

• To provide the Service: create and secure your account, store your listings and leads, sync your data across devices, and enable team collaboration.
• To deliver core CRM features: assign leads, schedule and send follow-up reminders, log calls and site visits, and produce your sales analytics and dashboards.
• To enable marketing tools you choose to use: generate branded property posters and shareable listing links, and attribute enquiries back to the channel or partner that produced them.
• To communicate with you: send transactional messages such as OTPs, lead alerts, reminders and important service notices.
• To improve and secure the Service: diagnose crashes, monitor performance, detect abuse, prevent fraud and unauthorised access, and develop new features.
• To meet legal obligations: comply with applicable law, respond to lawful requests, and enforce our Terms & Conditions.

6 Legal basis for processing

Where data protection law requires a legal basis (including the EU/UK GDPR and India's Digital Personal Data Protection Act, 2023), we rely on:

• Performance of a contract — to provide the Service you have signed up for.
• Consent — for optional device permissions and optional promotional communications. You may withdraw consent at any time.
• Legitimate interests — to secure the Service, prevent fraud and abuse, and improve our product, balanced against your rights.
• Legal obligation — where we must retain or disclose information to comply with applicable law.

7 Sharing and disclosure

We share personal information only in the circumstances described below.

• Within your organisation: if you are part of a team or organisation on DigiProp, your administrators and authorised colleagues can see leads, listings and activity according to the roles and permissions your organisation configures.
• With co-brokers and channel partners you choose: when you deliberately share a listing or refer a lead, the recipient receives the information you elected to share.
• With service providers: vendors that host our infrastructure and provide messaging, analytics and crash reporting, acting on our instructions under contract. See Third-party services.
• For legal reasons: where we believe in good faith that disclosure is required by law, regulation, legal process or an enforceable governmental request, or is necessary to protect the rights, property or safety of DigiProp, our users or the public.
• In a business transfer: in connection with a merger, acquisition, financing or sale of assets, subject to the acquirer honouring this policy. We will notify you of any such change.

8 Third-party services we use

We rely on the following trusted providers. Each processes data only as needed to deliver its function.

9 Data retention

• Account and business data is retained for as long as your account remains active, so that your leads, listings and history stay available to you.
• After deletion: when you delete your account, we remove your personal data and your account's Lead Data from our production systems within 30 days. Residual copies may persist in encrypted backups for up to 90 days before being overwritten.
• Organisation-owned data: if you are a team member, leads and listings belonging to your organisation remain with that organisation after you leave it. Your personal profile is removed from it.
• Legal retention: we may retain limited records for longer where required to comply with legal, tax, accounting or dispute-resolution obligations.
• Diagnostics: crash and analytics data is retained on a rolling basis in line with our providers' standard retention windows.

10 How we protect your information

• All data in transit is encrypted using TLS (HTTPS).
• Data at rest is encrypted on Google Cloud infrastructure.
• Access is enforced by server-side security rules, so users can only reach data belonging to their own account or organisation.
• App integrity attestation (Firebase App Check) helps block requests from unauthorised or tampered clients.
• Access to production systems by our personnel is restricted, authenticated and logged.
• Authentication is passwordless and based on OTP verification of your mobile number.

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. Please keep your device and your registered mobile number secure, and tell us immediately if you suspect unauthorised access to your account.

11 Your rights and choices

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information — most profile fields are editable in the app.
• Delete your account and associated data. See Account & data deletion.
• Export a copy of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent for optional permissions or communications, without affecting processing already carried out.
• Complain to your local data protection authority. In India, you may also escalate to the Data Protection Board.

To exercise any of these rights, email support@digiprop.in from your registered email address, or include your registered mobile number so we can verify your identity. We respond within 30 days.

12 Account and data deletion

You can request permanent deletion of your DigiProp account and its associated data at any time.

• Follow the instructions on our Account & Data Deletion page, or
• Email support@digiprop.in with the subject “Account Deletion Request”, including the mobile number registered to your account.

Once we verify your identity, we permanently delete your profile, your leads and CRM records, your listings and uploaded media, your organisation membership, and your device and notification tokens, within the timeframes set out in Data retention.

13 Children's privacy

DigiProp is a business application intended solely for real estate professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, contact support@digiprop.in and we will delete it promptly.

14 International data transfers

We use Google Cloud Platform and Firebase, which may process and store data in data centres outside your country of residence. Where personal information is transferred internationally, we rely on appropriate safeguards — including our providers' Standard Contractual Clauses and equivalent legal mechanisms — to ensure it remains protected to the standard described in this policy.

15 Changes to this policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or legal requirements. We will revise the “Last updated” date at the top of this page. If the changes are material, we will notify you in the app or by email or SMS before they take effect. Continuing to use DigiProp after an update means you accept the revised policy.