Privacy Policy

1. Information we collect

• Account data: If you register as an owner or admin, we collect your name, email address, phone number, and any other details you provide when creating an account or claiming a place.
• Usage data: We may collect information about how you use the Service (e.g. pages visited, searches performed, engagement events) to improve the site and for analytics.
• Technical data: We may collect IP address, browser type, device type, and similar technical information necessary for security and operation.
• Cookies and similar technologies: We may use cookies and similar technologies to maintain your session (e.g. when you are logged in) and for essential functionality.

2. Purpose and lawful basis

We process your information for the following purposes:

• To provide and operate the Service (performance of contract / legitimate interest)
• To authenticate and manage your account
• To process place claims and related ownership requests
• To send you service-related communications (e.g. claim status, important updates)
• To improve the Service and user experience (legitimate interest)
• To comply with legal obligations
• To protect against fraud, abuse, or security threats

We only collect information that is necessary for the above purposes. We do not process your data for purposes incompatible with these stated purposes without your consent.

3. Consent

Where we rely on consent as the basis for processing (for example, optional marketing communications), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. For owner accounts, consent for data processing related to your claim is obtained during registration.

4. Sharing and disclosure

We do not sell your personal information. We may share your information only:

• With your consent
• With service providers who assist us (e.g. hosting, analytics, email delivery), subject to data processing agreements and confidentiality obligations
• When required by law, regulation, or legal process
• To protect our rights, safety, or property, or that of our users
• In connection with a merger, acquisition, or sale of assets (with prior notice where feasible)

5. Data retention

We retain your account and related data for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account data: Retained while your account is active, and for up to 12 months after account deletion for legal and dispute resolution purposes.
• Usage and analytics data: Aggregated and anonymised within 90 days. Raw analytics identifiers are not retained beyond this period.
• Technical logs: Retained for up to 30 days for security purposes.

We may retain certain data for longer where required by law or for legitimate business purposes (e.g. tax records, dispute resolution).

6. Your rights (DPDP Act and general)

You have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to correction: You can request correction of inaccurate or incomplete personal data.
• Right to erasure: You can request deletion of your personal data, subject to legal retention requirements.
• Right to grievance redressal: You can raise a complaint about how we process your data.
• Right to nominate: You may nominate another person to exercise your rights in case of your death or incapacity (as applicable under the DPDP Act).

To exercise any of these rights, email us at [email protected] with the subject line "Data Request". We will respond within 30 days.

7. Data security

We implement reasonable technical and organisational measures to protect your personal information, including encryption in transit, secure authentication, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we commit to promptly addressing any vulnerabilities.

8. Breach notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant authorities as required by applicable law (including the Data Protection Board of India, if applicable under the DPDP Act)
• Notify affected individuals without undue delay where the breach is likely to result in a high risk
• Take immediate steps to contain and remediate the breach

9. Children's data

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Third-party services

The Service may use third-party services (e.g. maps, hosting, analytics). Those services have their own privacy policies. We encourage you to review their policies. We are not responsible for the practices of third parties.

11. Analytics and tracking

We use analytics tools (such as Google Analytics) to understand how the Service is used. We minimise the use of personal identifiers in analytics and do not link analytics data to individual user accounts. You can opt out of analytics tracking using browser settings or extensions.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes will be communicated via the Service or email where feasible. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Grievance Officer / Contact

For privacy-related questions, data requests, or complaints, contact us at:

• Email: [email protected]
• Subject line: "Privacy" or "Data Request"

We will acknowledge your request within 48 hours and respond substantively within 30 days.