Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how [Registered Business Name], operator of Plot360 ("Plot360", "we", "us", "our"), collects, uses, discloses, and protects personal data when you use the Plot360 website and mobile application (the "Platform"). This Policy is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act"), rules made thereunder, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using the Platform, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Platform.

2. Who We Are

For the purposes of the DPDP Act, [Registered Business Name] is the "Data Fiduciary" responsible for determining the purpose and means of processing your personal data through the Platform.

3. Personal Data We Collect

4. How We Collect Data

• Directly from you: when you register, complete your profile, upload property documents, or contact support.
• Automatically: through cookies, SDKs, and similar technologies as you use the Platform.
• From third parties: such as identity/KYC verification partners, where relevant and permitted by law.

5. How We Use Your Data

We use your personal data to:

• Create and manage your Plot360 account;
• Register, list, and enable monitoring of properties you are authorized to submit;
• Verify identity and ownership/authorization documents (including the Approval Letter and NOC);
• Communicate with you about your account, listings, and service updates;
• Maintain the security, integrity, and proper functioning of the Platform;
• Comply with applicable legal, regulatory, and law-enforcement requirements;
• Improve our services through aggregated or anonymized analysis; and
• With your separate consent, send you promotional or marketing communications, which you may opt out of at any time.

6. Consent & Legal Basis

We process your personal data primarily on the basis of your consent, given through a clear affirmative action (such as ticking a consent box or submitting a signed Approval Letter/NOC) after being shown an itemized notice describing the personal data to be collected and the purpose of processing, as required under the DPDP Act. You may give, refuse, or withdraw consent for a specific purpose at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may limit your ability to use certain features of the Platform. Certain limited processing (for example, to comply with a legal obligation, or data you voluntarily provide for a stated purpose) may be carried out under the "legitimate uses" recognized by the DPDP Act, without separate consent, as permitted by law.

7. Sharing & Disclosure of Data

We do not sell your personal data. We may share personal data with:

• Service providers who host, store, or process data on our behalf (e.g., cloud hosting, analytics, identity-verification, payment processing), under contractual confidentiality and security obligations;
• Other users, only to the extent necessary to provide the monitoring/listing service you have requested;
• Government authorities or regulators, where required by law, legal process, or to protect the rights, property, or safety of Plot360, our users, or the public;
• A successor entity, in connection with a merger, acquisition, or sale of business assets, subject to this Policy continuing to apply to your data.

8. Cross-Border Data Transfer

Your data may be processed or stored on servers located outside India. Under the DPDP Act, Plot360 may transfer personal data outside India except to countries specifically restricted by the Central Government. Where such transfers occur, we take reasonable steps to ensure your data continues to receive an appropriate standard of protection.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law (including tax, accounting, and regulatory requirements). Where you withdraw consent or request erasure and no legal obligation requires retention, we will delete or anonymize your data within a reasonable time, in accordance with applicable law.

10. Data Security

We implement reasonable security practices and procedures, including access controls, encryption in transit, and internal policies, to protect personal data against unauthorized access, alteration, disclosure, or destruction, consistent with the IT (Reasonable Security Practices) Rules, 2011. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights as a Data Principal

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and the processing activities carried out;
• Correct and update inaccurate or incomplete personal data;
• Erase personal data that is no longer necessary for the purpose it was collected, subject to legal retention requirements;
• Withdraw consent at any time, as described in Section 6;
• Nominate another individual to exercise your rights in the event of death or incapacity;
• Grievance redressal, as described in Section 15, including the right to escalate unresolved grievances to the Data Protection Board of India.

To exercise these rights, contact us using the details in Section 17.

12. Children's Data

The Platform is intended for use by individuals who are at least 18 years old. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete it.

13. Cookies & Tracking

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand usage patterns. For details on the categories of cookies we use and how to manage them, please see our Cookie Policy.

14. Data Breach Notification

In the event of a personal data breach, Plot360 will take prompt steps to contain and assess the breach, and will notify the Data Protection Board of India and affected users as required under the DPDP Act and rules made thereunder.

15. Grievance & Data Protection Contact

If you are not satisfied with our response, you may escalate your grievance to the Data Protection Board of India, as provided under the DPDP Act.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you through the Platform or via email, and the "Last updated" date above will be revised accordingly.

17. Contact Us