RightGhar
Articles
Post Property Free

Privacy Policy

Effective Date: 6th July 2026

Last Updated: 6th July 2026

1. Who We Are and Our Role

1.1 About This Policy

RightGhar Technologies Private Limited ("Company", "we", "us", or "our"; CIN: U62020PN2024PTC236363; registered office: Perfect 10, Pune, Maharashtra) operates a technology platform that enables property owners and independent real estate agents ("Brokers") to list properties for rent or sale, and allows prospective tenants/buyers to search, view, and connect with them. We are the Data Fiduciary for personal data processed through the Platform under the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). This Privacy Policy explains what we collect, why, how we use and protect it, and your rights.

1.2 Our Commitment

We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including the DPDP Act and the Information Technology Act, 2000. The protection and security of your personal information is our top priority.

1.3 Platform Scope

This Privacy Policy applies to our website, mobile applications, WhatsApp services, and all associated services (collectively, the "Platform") operated by RightGhar Technologies Private Limited.

2. Information We Collect

2.1 User Registration Information

When you create an account on our Platform, we collect:

  • Personal Details: First name, last name, email address, phone number
  • Optional Information: Intent behind using the website, timeline preferences, budget range
  • Account Credentials: Username and encrypted password
  • Optional Verification Data: If you choose a verification badge, the KYC data described in Section 6 (for example, PAN or a masked Aadhaar offline verification)
2.2 Property Listing Information

IMPORTANT NOTICE: Property listings are publicly accessible to all website visitors. When you list a property, the following information becomes publicly available:

  • Property Details: Type, size, age, construction details, floor information, specifications
  • Location Information: Address, GPS coordinates, neighborhood details, proximity to landmarks
  • Pricing Information: Rent/sale price, security deposit, maintenance charges, payment terms
  • Amenities and Features: Available facilities, furnishing details, parking information
  • Contract Terms: Lease conditions, tenant preferences, availability dates
  • Contact Information: Owner's contact details for potential buyers/renters
  • Visual Content: Property photographs and videos

See Section 7 for more on the public nature of listing information.

2.3 Technical Information

We automatically collect:

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, time spent on Platform, click patterns, search queries
  • Location Data: General geographic location based on IP address
  • Cookies and Tracking Data: Session information, preferences, analytics data (see Section 14)
2.4 Analytics Tools

We use third-party analytics tools - currently Google Analytics and Microsoft Clarity - to understand how the Platform is used, as detailed in Sections 13 and 14.

We process your personal data on the basis of your consent and certain legitimate uses permitted by Section 7 of the DPDP Act (such as processing you have voluntarily provided data for, compliance with law and legal obligations, and responding to emergencies). Before or when we seek consent, we give notice describing the personal data and the purpose of processing.

Our purposes of processing are limited to:

  • Creating and operating your account (including phone-OTP authentication)
  • Publishing and managing property listings
  • Enabling Introductions - connecting Users who choose to contact each other
  • Optional verification badges (see Section 6)
  • Service and transactional messages, including listing "freshness" reconfirmations
  • Grievance handling
  • Security, fraud prevention, and abuse detection
  • Legal compliance

We collect only the data necessary for these purposes. Marketing communications, and any use of your data for marketing, occur only with your separate, specific consent, which you can withdraw at any time.

4. How We Use Your Information

4.1 Platform Services
  • Facilitating property listings and search functionality
  • Enabling communication between property owners and potential buyers/renters
  • Processing user accounts and authentication
  • Providing customer support and technical assistance
  • Verifying user-submitted documents for optional badges and preventing fraud
4.2 Analytics and Service Improvement
  • Data Analytics: Analyzing usage to enhance Platform functionality and user experience
  • Aggregated Insights: Any analysis of market trends, and any training of machine-learning models (for example, for search relevance or recommendations), is performed only on aggregated or anonymised data that does not identify you. We do not train models on your personal data without your specific consent.
  • Performance Optimization: Improving Platform performance, features, and overall service quality
4.3 Marketing (Separate Consent Only)
  • We send marketing and promotional communications only if you have separately opted in, and you may opt out at any time (see Section 5)
  • Any use of your listing content (including images) in our marketing materials occurs only with your separate consent or in aggregated/anonymised form that does not identify you or your property
4.4 Legal and Compliance
  • Complying with applicable laws, regulations, and legal obligations
  • Responding to law enforcement requests and court orders
  • Preventing fraud, security breaches, and illegal activities
  • Resolving disputes and enforcing our Terms of Service
5.1 How You Give Consent

You consent by a clear affirmative action - phone-OTP verification, replying "YES" (or an equivalent word) to our WhatsApp onboarding message, or ticking a specific marketing opt-in. We keep a record of your consent (date, time, phone number, and the message or screen you responded to).

5.2 How You Withdraw Consent

You may withdraw consent at any time - for marketing, reply "STOP" or use the opt-out method provided; for other processing, contact our Grievance Officer (Section 17). Withdrawal is as easy as giving consent and does not affect the lawfulness of processing done before withdrawal. If you withdraw consent necessary to operate your account, we will - unless law requires retention - stop the relevant processing and erase the personal data as required by the DPDP Act; some features may then stop working.

6. KYC and Aadhaar Offline Verification (Masked)

Verification badges are optional. If you choose verification, our KYC service provider processes your phone number, PAN, and/or an Aadhaar Offline (masked) verification. We do not perform direct UIDAI authentication and do not store your full Aadhaar number; we store only a masked reference and the verification result. You may use the Platform without verification; verification is an alternative, not a condition of basic use. A badge records only that a documentary or data check was performed at a point in time - see our Terms of Service for what badges do and do not mean.

7. Public Nature of Property Listing Information

7.1 Public Accessibility

CRITICAL NOTICE: All property listing information is publicly accessible and may be:

  • Viewed by Anyone: Accessible to all website visitors without registration
  • Search Engine Indexed: May appear in search engine results
  • Shared on Other Platforms: May be shared on social media and other websites
  • Used for Research: May be used by market researchers, competitors, and analysts
  • Downloaded or Scraped: While these practices are prohibited by our Terms of Service, publicly available information may nonetheless be collected by automated tools or third parties
7.2 Consent and Acknowledgment

By listing your property on our Platform, you consent to the public display of your listing information as described above. We cannot control how publicly available information is used by third parties once it is public, and we are not responsible for such third-party use.

7.3 Marketing Use of Listing Content

We use your listing content (including images) in our own marketing and promotional materials only with your separate consent, or in aggregated/anonymised form that does not identify you or your property.

8. Data Sharing and Disclosure

8.1 Who We Share Personal Data With

We share personal data only with:

  • Processors: Service providers under contract acting on our instructions (cloud hosting, KYC verification, analytics, messaging/SMS/WhatsApp delivery), who may not use your data for their own purposes
  • The User You Choose to Connect With: When you enquire about a listing or otherwise choose to connect with another User through an Introduction, your contact details are shared with that User
  • Authorities: Where required by law, regulation, court order, or a lawful request from a government agency
  • A Successor Entity: In the event of a merger, acquisition, or sale of business assets, with notice to you
8.2 What We Do Not Do

We do not sell your personal data, and we do not share it with third parties for their own marketing. We do not share your personal data with real estate companies, property portals, marketing agencies, or advertising partners for their own use.

9. Data Retention and Erasure

9.1 General Principle

We keep personal data only as long as needed for the purpose it was collected for, or as required by law. We do not retain personal data indefinitely.

9.2 Individual Users (Renters, Buyers, Owners)

Your personal data is erased when you withdraw consent or when the purpose is no longer served (for example, on account closure), unless law requires retention - including record-retention obligations under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (180 days after account closure or withdrawal of registration) and any ongoing legal proceeding or investigation.

9.3 Broker Business/CRM Records

A Broker's business and CRM records on the Platform are the Broker's business data. Consistent with "your data is yours," we do not delete a Broker's CRM or business records merely because a subscription lapses - access reverts to read-only on free-tier limits. However, this continuity does not override any individual's rights under the DPDP Act: where a renter or other individual whose personal data sits in a Broker's CRM withdraws consent or requests erasure, we will honour that erasure for that individual's personal data even if the Broker's other business records are retained. The Broker, as an independent Data Fiduciary for the personal data it collects, is separately responsible for erasure requests it receives.

9.4 Technical and Analytics Data
  • Security Logs: Retained for at least one (1) year for security monitoring, as required under the DPDP Rules, 2025
  • Analytics Data: Only aggregated or anonymised data (which is not personal data) may be retained beyond the periods above

10. Data Security and Breach Notification

10.1 Security Measures

We apply reasonable security safeguards to protect your data:

  • Encryption: Personal information is stored in encrypted format using industry-standard encryption protocols; sensitive fields are encrypted or masked
  • SSL/TLS Protection: All data transmission is secured using SSL/TLS
  • Access Controls: Role-based access restrictions with authentication controls
  • Security Monitoring and Logging: Continuous monitoring for unauthorized access and suspicious activities, with security logs retained for at least one year
  • Regular Audits: Periodic security assessments and vulnerability testing
  • Secure Infrastructure: Use of secure data centers and cloud infrastructure

No system is perfectly secure, and internet transmission involves inherent risks. You are responsible for keeping your account credentials and devices secure.

10.2 Data Breach Response

In the event of a personal data breach, we will:

  • Immediate Response: Investigate and contain the incident immediately
  • Notification Without Delay: Notify the Data Protection Board of India and each affected Data Principal without delay, in accordance with the DPDP Rules, 2025
  • Detailed Report: Provide the Board a detailed report within 72 hours (or such extended period as the Board allows), describing the breach, the data affected, mitigation taken, and steps you can take to protect yourself
  • Remedial Action: Implement corrective measures to prevent future breaches

Nothing in this Policy limits or excludes your statutory rights, or our statutory obligations, under the DPDP Act.

11. Your Rights Under the DPDP Act

11.1 Right to Access

You have the right to request a summary of the personal data we hold about you and of how it is processed, including the identities of the Data Fiduciaries and Data Processors with whom it has been shared and the categories of data shared.

11.2 Right to Correction and Completion

You have the right to request correction, completion, or updating of inaccurate or incomplete personal data we hold about you.

11.3 Right to Erasure

You have the right to request erasure of your personal data. We will erase it unless retention is necessary for the specified purpose for which it was collected or for compliance with law.

11.4 Right to Withdraw Consent

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing done before withdrawal (see Section 5).

11.5 Right to Grievance Redressal and Nomination

You have the right to grievance redressal (see Section 17) and the right to nominate another individual to exercise your rights in the event of your death or incapacity.

11.6 Downloading Your Data

The DPDP Act does not provide a data-portability right; we may nonetheless offer a voluntary "download your data" feature from time to time.

11.7 Exercising Your Rights

To exercise these rights, please contact our Grievance Officer at grievance@rightghar.com. We will respond within the periods prescribed under the DPDP Act and the rules made under it. If you are not satisfied with our response, you may complain to the Data Protection Board of India after using our grievance mechanism.

12. Children's Privacy

12.1 Age Restrictions

Our Platform is intended for users aged 18 and above. We do not knowingly collect or process personal data of children under 18, and we do not track, behaviourally monitor, or target advertising at children.

12.2 Erasure of Children's Data

If we become aware that we have collected personal data from a child under 18 without verifiable parental consent, we will erase such data immediately.

12.3 Reporting

If you believe we have collected information from a child under 18, please contact us immediately at grievance@rightghar.com.

13. Third-Party Services

13.1 Integrated Services

Our Platform integrates with the following third-party services, which act as our processors or provide infrastructure and analytics:

  • Google Analytics / Google Tag Manager: Website traffic analysis and usage measurement
  • Microsoft Clarity: Usage and session analytics
  • Cloudflare: Content delivery, performance, and protection against cyber threats
13.2 Third-Party Data Collection

These third-party services may collect device, browser, and usage information as part of providing their services to us. They operate under their own privacy policies:

14. Cookies and Tracking Technologies

14.1 Cookie Usage
  • Essential Cookies: Required for Platform functionality (such as login sessions and security) and cannot be disabled
  • Preference Cookies: Used to remember your settings and preferences
  • Analytics Cookies: Used to understand how users interact with our Platform (Google Analytics, Microsoft Clarity)
  • Marketing Cookies: Used for advertising and promotional purposes only where you have consented
14.2 Cookie Management

You can manage or block cookies through your browser settings at any time. Disabling certain cookies may impact Platform functionality.

15. Cross-Border Data Transfers

While we primarily operate within India, some of our processors may operate outside India. Any transfer of personal data outside India is made only as permitted by the DPDP Act, subject to contractual safeguards, and not to any country restricted by the Central Government. We ensure adequate protection through contractual agreements with service providers, technical and organizational measures, and regular monitoring of data transfer practices.

16. Policy Updates and Consent Manager Readiness

16.1 Policy Modifications

We may update this Privacy Policy periodically to reflect changes in applicable laws, our data processing practices, or new Platform features. The current version, with its "Last Updated" date, is always available on the Platform.

16.2 Notification of Material Changes

For material changes, we will give notice on the Platform and/or by message to your registered WhatsApp or email before the change takes effect.

16.3 Consent Manager Readiness

Our systems are being designed to interoperate with Consent Managers registered under the DPDP Act, as the applicable rules come into force.

17. Grievance Redressal

17.1 Grievance Officer

For privacy-related queries, complaints, and requests to exercise your rights, contact our Grievance Officer:

  • Name:Sachin Gorade
  • Email: grievance@rightghar.com
  • Address: Perfect 10, Pune, Maharashtra

We will acknowledge your complaint promptly and respond within the periods prescribed under the DPDP Act and the rules made under it.

17.2 Escalation Process

If you are not satisfied with our response, you may:

  1. Escalate your complaint to our senior management
  2. File a complaint with the Data Protection Board of India
  3. Seek legal remedies as available under applicable law

18. Governing Law and Jurisdiction

18.1 Indian Law

This Privacy Policy is governed by the laws of India, including:

  • Digital Personal Data Protection Act, 2023 and the rules made under it
  • Information Technology Act, 2000
  • Indian Contract Act, 1872
  • Other applicable Indian privacy and data protection laws
18.2 Jurisdiction

Subject to your statutory rights (including your right to approach the Data Protection Board of India and, where applicable, the consumer disputes redressal commissions), any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts at Pune, Maharashtra, India.

19. Contact Information

19.1 Company Details

RightGhar Technologies Private Limited
CIN: U62020PN2024PTC236363
Registered Office: Perfect 10, Pune, Maharashtra
Grievance Officer: grievance@rightghar.com
Legal notices: legal@rightghar.com
Customer Support: hello@rightghar.com
Website: rightghar.com

19.2 Data Protection Queries

For all privacy and data protection related inquiries:

  • Email: grievance@rightghar.com
  • Subject Line: Privacy Policy Inquiry / Data Protection Request

By using our Platform, you acknowledge that you have read and understood this Privacy Policy.

This document constitutes an electronic record under the Information Technology Act, 2000, and does not require physical or digital signatures.