Privacy Policy

This notice describes how RealtyConnect ("we", "us") collects and processes personal data when you interact with the chat assistant at chat.realtyconnect.tech. It is drafted with reference to the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who the data fiduciary is

The data fiduciary (controller) for personal data processed through this service is Pinaka Digital Technologies, operator of RealtyConnect. For data-rights requests under the DPDP Act, 2023 (access, correction, erasure, nomination) write to the Grievance Officer at operations@pinaka.digital — acknowledgements within 72 hours (working days). Full contact details are on the About page.

2. What personal data we collect

• When you chat: your session ID (a random identifier stored in a cookie), the messages you send, the chatbot's replies, and basic technical metadata (IP address, browser user-agent, timestamp).
• When you submit the lead form: the name, phone number, optional email, and the "interest" option you selected. We also log which property (if any) the form was opened from.
• We do not collect: financial data, payment details, identity documents, or any special-category personal data.

3. Why we process this data (purposes)

• Lead routing: to contact you for the site visit, call-back, or information you requested.
• Service operation: to run the chat (store recent messages during your session), debug errors, and prevent abuse.
• Analytics: to understand which queries are common, how many users convert to leads, and where the product is failing — in aggregate, not per-user.
• We do not use your data for programmatic advertising or sell it to third parties.

4. Legal basis

Where the DPDP Act requires a legal basis, we rely on your consent, given when you submit the lead form, and on specified legitimate uses for anonymous service operation (running the chat, preventing spam).

5. How long we keep your data

• Chat session data: 30 days after your last interaction, then purged.
• Lead submissions: 18 months from the date of submission, then purged unless converted to an active customer relationship (in which case they are retained for the duration of that relationship).
• Server logs: 30 days.

6. Who we share it with (processors)

• LLM provider: your chat messages are sent to our language-model provider (AI/ML API Inc., USA — a US-based re-seller of several LLMs) to generate replies. They process messages transiently and do not retain training data from this product per contract.
• Hosting: the application runs on a cloud VPS located in Germany; server and database data resides there.
• We do not share lead data with third-party brokers or marketing networks.

The data fiduciary remains accountable for any processor's handling of your data. If additional processors are added in future, this list will be updated and the "last updated" date at the top of this page will be revised.

7. Cross-border transfers

Because of the processors above, your data transits outside India (to servers in the USA for LLM processing and Germany for hosting). By using the chat, you consent to this transfer as necessary to provide the service.

8. Your rights under the DPDP Act

• Right to access: you can ask for a summary of the personal data we hold about you.
• Right to correction: you can ask us to correct inaccurate data.
• Right to erasure: you can ask us to delete your data, subject to legal retention requirements.
• Right to grievance redressal: you can raise a complaint to our Grievance Officer (details on the About page) before escalating to the Data Protection Board of India.
• Right to nominate: you may nominate another individual to exercise these rights in the event of your death or incapacity.

To exercise any right, contact the Grievance Officer named on the About page.

9. Cookies

We set one first-party cookie, rc_sid, containing a random session ID (a UUID — not your name, phone, or email). It lasts 7 days and allows the chat to resume if you return. We do not use advertising, tracking, or social-media cookies.

10. Security

Your data is transmitted over HTTPS. The lead-form endpoint is rate-limited to prevent abuse. Access to the admin backend requires an HMAC-signed credential. No system is perfectly secure; if you suspect a compromise, please contact the Grievance Officer immediately.

11. Children

RealtyConnect is not directed at children under 18. We do not knowingly collect data from children. If you believe a minor has submitted personal data, contact us and we will delete it.

12. Changes to this policy

We will notify you of material changes via a banner at the top of this page and by updating the "last updated" date.