BhoomiTrace Privacy Policy
Website, Web Application, Login, Accounts, Property Data and Services
1. Who We Are and What This Policy Covers
1.1 BhoomiTrace is an evidence-led property decision-support platform operated by BhoomiTrace Analytics Private Limited("BhoomiTrace", "we", "us" or "our"). This Privacy Policy ("Policy") explains how we collect, use, disclose, retain and protect Personal Data when you use our website, web application, login and account systems, dashboards, reports, communications and related services (collectively, the "Services").
1.2 The Services may include property search and analysis, ownership and legal-status indicators, builder or project profiles, risk flags, AI-assisted analysis, listings, valuation estimates, market and predictive insights, property-matching tools, subscriptions, home-loan journey support, professional or partner referrals, expressions of interest, downloadable reports, business accounts and APIs where enabled.
1.3 This Policy applies to visitors, registered users, prospective customers, purchasers, authorised business users, people who contact us, and persons whose data is lawfully included in property records, documents or communications processed through the Services. Additional notices may be presented for a specific feature, data source, partner or business deployment; the more specific notice applies to that processing.
1.4 This Policy replaces the short-form Privacy Policy dated 16 May 2026 when this version is published. The Terms and Conditions of Use govern the Services. This Policy is a notice and does not, by itself, constitute consent for optional marketing, non-essential cookies or a new processing purpose.
2. Important Privacy Summary
- Age: The Services are intended for persons aged eighteen years or older.
- Data minimisation: Provide only information necessary for the feature you are using. Mask unnecessary Aadhaar, PAN, bank, card, health, biometric and other sensitive details before uploading a document.
- Property data: Property documents and public records may contain data about owners, sellers, family members, witnesses, professionals or other persons. You must have a lawful purpose and authority to submit non-public information about another person.
- AI outputs: We may use automated extraction, matching and analysis to create Reports and Risk Indicators. These outputs may be incomplete or inaccurate and must not replace independent due diligence.
- Marketing and optional cookies: These should be controlled through separate, optional choices and must not be required merely to create an Account.
- Rights and help: You may use the Contact Page or email support@bhoomitrace.com to request access, correction, erasure, consent withdrawal, account closure or grievance redressal to the extent available under applicable law.
3. Definitions
| Term | Meaning |
|---|---|
| Account | A registered user account, business account, profile, login identity, email address, mobile number or similar credential through which a user accesses the Services. |
| Inputs | Information, property identifiers, preferences, instructions, documents, photographs, files, feedback or other material submitted by or for a user. |
| Personal Data | Information relating to an identified or identifiable individual, including personal information and sensitive personal data or information to the extent recognised by applicable law. |
| Processing | Any operation performed on Personal Data, including collection, recording, organisation, storage, use, analysis, disclosure, transfer, correction, retrieval, restriction, de-identification or erasure. |
| Report | Any property analysis, builder profile, valuation estimate, Risk Indicator, score, summary, comparison, dashboard result or downloadable output generated or supplied through the Services. |
| Risk Indicator | A risk flag, score, label or verdict, including a "Go", "Caution", "No-Go" or similar indicator, intended only to support further due diligence. |
| Service Provider | A processor, vendor, contractor or professional that handles data for BhoomiTrace to operate or secure the Services. |
| Partner | A lender, payment provider, broker, developer, lawyer, valuer, surveyor, architect, listing provider or other independent third party whose service a user chooses to explore. |
4. Personal Data We May Collect
4.1 The categories actually collected depend on the features you use, the information you submit and the configuration of your Account. We do not require every category from every user.
| Category | Examples | Typical source |
|---|---|---|
| Identity, contact and organisation | Name, email address, mobile number, current address, city, organisation, role, professional details. | You, Account admin, referrer. |
| Account and authentication | User ID, login identifier, session identifiers, OTP verification records, consent and Terms acceptance logs. | You and the Platform. |
| Profile and property preferences | Budget range, preferred location, property type, purchase timeline, size, amenities, saved searches. | You and Platform activity. |
| Property identifiers and records | Address, survey/khasra/khata details, RERA number, owner/builder names, encumbrances, maps. | You, public records, authorised providers. |
| Uploaded documents | Sale deed, agreement, title chain, encumbrance certificate, tax receipt, sanctioned plan. | You or an authorised user. |
| Financial & loan journey | Budget, income range, requested loan amount, tenure, financing preference, payment status. | You, payment gateway, lender. |
4.2 Sensitive information: Current Indian rules treat items such as passwords, financial-account details, health information, medical records, sexual orientation and biometric information as sensitive personal data. BhoomiTrace does not seek most of these categories for ordinary property analysis.
4.3 Information that has been irreversibly anonymised so that it cannot reasonably identify an individual is not treated as Personal Data. Aggregated statistics may be used for analytics and product improvement.
5. How We Obtain Personal Data
5.1 We collect Personal Data directly when you create an Account, request an OTP, complete a profile, search for or analyse property, upload a document, purchase a plan, request a loan or professional referral, submit an expression of interest, contact support, answer a survey or otherwise interact with the Services.
5.2 We collect technical and usage information automatically through essential Platform technologies and, where enabled and permitted, analytics, preference or marketing technologies described in the Cookie Policy.
5.3 We may obtain property, project, builder, professional, corporate or transaction-related information from government portals, public records, authorised databases, mapping or GIS providers, listing providers, data vendors and Partners.
5.4 A business customer, family member, agent, adviser, lender or other authorised person may provide data about you. The provider must have authority and must give you any notice required by law.
6. Why We Process Personal Data
| Purpose | Typical data used | Nature of processing |
|---|---|---|
| Create and secure Account | Identity/contact, Account/authentication, device data. | Necessary to register, authenticate, send OTPs, prevent abuse. |
| Provide decision-support Services | Profile, property identifiers, uploaded documents, public records. | Generate Reports, show risk information, save results. |
| Extract & analyse information | Documents, images, property identifiers, text metadata. | OCR, entity matching, anomaly detection, risk flagging, AI analysis. |
| Process payments & refunds | Order, invoice, tax, payment status metadata. | Complete purchases, maintain accounting records, prevent fraud. |
| Security & legal compliance | Account, device logs, transactions, communications. | Detect misuse, protect users, comply with lawful requests. |
7. Consent, Required Information and Your Choices
7.1 Where consent is the applicable basis, we aim to present requests in clear language. Optional marketing and non-essential cookies are separate choices and never pre-selected.
7.2 You may withdraw consent at any time through Account settings or by emailing support. Withdrawing consent does not affect prior lawful processing.
8. Login, OTP and Acceptance Records
8.1 We use contact, device, session and authentication data to send OTPs, verify access, prevent fraud and secure your Account.
8.2 We record timestamped acceptance of Terms and Policy versions for legal compliance and platform integrity.
9. Profiles, Personalisation, AI and Automated Analysis
9.1 Automated systems and AI models extract document text, match entity records, and generate Risk Indicators ("Go", "Caution", "No-Go") to assist your due diligence.
9.2 AI outputs can be incomplete or inaccurate. Independently verify all material facts before entering property transactions.
10. Uploaded Documents and Property Data Relating to Other People
10.1 You are responsible for ensuring you have lawful authority to upload property documents. Mask or redact unneeded Aadhaar, PAN, bank, health or signature details before submission.
11. Loans, Professional Referrals, Listings and Expressions of Interest
11.1 Referrals to lenders, lawyers, or brokers are optional. When you choose a partner referral, we transmit selected contact & property details to that partner under their privacy terms.
12. When We Share Personal Data
We disclose data only to trusted Service Providers (cloud storage, OCR, SMS/email, payment gateways), government/public database APIs where necessary to fetch records, or statutory authorities when legally compelled.
13. Payments
Payments are handled by PCI-DSS compliant third-party gateways. BhoomiTrace does not store full card numbers, PINs, CVVs or net-banking passwords.
15. Service Communications and Marketing
Essential transactional alerts (OTPs, report delivery, security notices) are sent automatically. Promotional emails are opt-in only and can be unsubscribed anytime.
16. Storage and International Transfers
Data is stored primarily in India. Any cross-border processing by cloud infrastructure complies with Indian DPDP Act regulations and statutory safeguards.
17. Retention and Erasure
| Record type | Intended default period | Important qualifications |
|---|---|---|
| Account & Profile | Active period + 3 years post closure. | Consent & transaction audit logs retained where required. |
| Raw Uploaded Documents | Up to 90 days after Report delivery. | Unless user chooses saved document vault feature. |
| Invoices & Financials | Up to 8 years. | Statutory requirement under Indian Tax & Company laws. |
18. Security and Personal Data Breaches
We maintain technical, administrative, and physical safeguards (encryption, access controls, monitoring). In the event of a data breach, notifications will be made to CERT-In and affected individuals in accordance with law.
19. Your Rights and How to Exercise Them
Under applicable law, you have the right to access, correct, erase, or withdraw consent for your Personal Data. Submit requests to support@bhoomitrace.com with subject "Privacy Request".
20. Account Closure and Deletion
You can request account deletion via app settings or support email. Deletion stops active processing but retains statutory financial/security logs as legally required.
21. Children
The Services are intended strictly for individuals aged 18 and older. We do not knowingly collect personal information from minors.
22. Business and Team Accounts
For corporate accounts, enterprise administrators manage seat access, permissions, and team usage data in accordance with our enterprise terms.
23. Third-Party Sites and Services
Our platform may contain links to government portals, mapping services, or partner websites. Their privacy practices are governed by their respective notices.
24. Changes to This Policy
Material updates will be posted on this page with a revised effective date. Continued use indicates awareness of the updated policy.
25. Contact, Privacy Questions and Grievances
26. Applicable Law and Phased Privacy Framework
This Policy operates under Indian law, including the Information Technology Act 2000 and the Digital Personal Data Protection Act (DPDP Act) 2023. Provisions take effect as statutory rules commence in stages.