Privacy Policy

This Privacy Policy explains what personal data PropMetrics collects, why we collect it, how we use it, and what rights you have over it. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who Is Responsible for Your Data

PropMetrics, a sole proprietorship registered under Udyam number UDYAM-KR-03-0751827 and based in Bengaluru, Karnataka, is the Data Fiduciary for the personal data described here.

For any privacy question or request, contact support@propmetrics.in.

2. What We Collect

Information you give us

• Account details: your email address and a password (stored only as a secure cryptographic hash — we never see or store your actual password)
• Property details: the address, city, price, area, property type, and other attributes you enter when running an analysis
• Language preference: the language you select for paid reports
• Payment information: handled entirely by Razorpay. We receive only a transaction reference and status. We never see or store your card, UPI, or bank details.

Information collected automatically

• Session cookies: required to keep you logged in. We do not use advertising or tracking cookies.
• Technical logs: IP address and request timestamps, used for security and rate limiting
• Coordinates: if you select an address from our search or map, the latitude and longitude are stored with that property so we can find nearby amenities

What we do not collect

• We do not ask for your Aadhaar, PAN, or any government identification
• We do not collect your physical location from your device
• We do not track you across other websites
• We do not build advertising profiles

3. Why We Use It — and Your Consent

Under the DPDP Act, we process your personal data on the basis of the consent you gave when creating your account. We use it only for these purposes:

What	Why
Email address	Account identity, login, service notifications, password reset
Password hash	Authenticating you securely
Property details	Running your analysis and saving it to your history
Coordinates	Finding nearby amenities for your report
Payment reference	Recording what you purchased and granting access
IP and logs	Security, abuse prevention, rate limiting

We do not use your data for automated decision-making about you, profiling, or advertising.

4. Who We Share It With

We do not sell your personal data. We never will.

We share limited data with service providers who help us operate:

• Razorpay — payment processing. They receive what is needed to process your payment, under their own privacy policy.
• Anthropic (Claude API) — on paid tiers only, the property details and computed scores are sent to generate your narrative summary. Your email, name, and account identity are never sent. Anthropic's servers are located outside India.
• Geoapify — receives only the property coordinates to return nearby amenities. No personal information about you is sent.
• Hosting and infrastructure providers — who store our database and run the application

We may disclose data if required by Indian law, a court order, or a lawful government request.

5. Cross-Border Transfer

6. How Long We Keep It

• Account data: until you delete your account
• Property analyses: until you delete your account, so you can revisit your history
• Payment records: retained as long as required by Indian tax and accounting law, even after account deletion
• Security logs: approximately 90 days

When you delete your account, your personal data is permanently erased from our active systems. It cannot be recovered.

7. Your Rights Under the DPDP Act

As a Data Principal you have the right to:

• Access — ask what personal data we hold about you and how it is processed
• Correction — have inaccurate or incomplete data corrected
• Erasure — delete your account and all associated data. You can do this yourself at any time from your Profile → Danger Zone → Delete My Account. No request or waiting period needed.
• Withdraw consent — stop us processing your data. Since our processing exists to run the service, withdrawing consent means closing your account.
• Grievance redressal — raise a complaint with us and receive a response
• Nominate — appoint someone to exercise your rights if you die or become incapacitated. Write to us to do this.

To exercise any right other than deletion, email support@propmetrics.in. We aim to respond within 7 working days.

8. Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, our Grievance Officer is:

We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

9. How We Protect Your Data

• Passwords are stored as one-way cryptographic hashes, never in readable form
• Sessions expire after 24 hours of inactivity
• Login, signup, and analysis endpoints are rate limited against brute-force and abuse
• Every request verifies that you own the data you are accessing
• All input is validated before processing
• Traffic is encrypted in transit via HTTPS

No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required by law.

10. Cookies

We use only cookies that are essential to the service:

• Session cookie — keeps you logged in
• CSRF token — protects forms against cross-site request forgery
• Cookie notice preference — remembers that you dismissed our cookie banner

We do not use analytics, advertising, or third-party tracking cookies. Blocking essential cookies will prevent you logging in.

11. Children

PropMetrics is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

12. Changes to This Policy

We may update this policy as the service or the law changes. Material changes will be notified by email or a prominent notice on the site. The "last updated" date above always reflects the current version.

13. Contact

Related: Terms & Conditions · Refund Policy · Disclaimer