Privacy Policy

Brij Properties (Bhagwat Builders) ("we", "us", "our", or "Company") operates the "Brij Admin" (Bhagwat Admin) mobile application (the "App"), available on the Google Play Store, and the associated web administration dashboard (together, the "Platform"). This Privacy Policy explains what information the App collects, how it is used, who it may be shared with, and the choices available to users. It applies to the App and to data managed within the Platform through the App.

This Platform is developed and technically operated on our behalf by GLAD Studio, our authorized software development partner and service provider.

1. Who this policy covers

The App is an internal real estate enterprise tool. It is not directed to or intended for direct self-registration by the general public. It is used by:

• Our employees, sales executives, site managers, and administrators ("App Users"), who log in with authorized company credentials to manage real estate leads, site visits, customer bookings, registry workflows, and payment installments; and
• Indirectly, our customers, prospective property buyers, and business partners/brokers ("Business Contacts"), whose business contact information is entered into the Platform by App Users during real estate sales, site inspections, and property documentation operations. Business Contacts do not access the App interface directly.

2. Information we collect

2.1 Information about App Users (Authorized Staff)

2.2 Information about Business Contacts (Customer & Lead Data)

3. App permissions we request, and why

The App requests only the minimum Android permissions strictly necessary to deliver its core enterprise functions:

4. How we use information

• To facilitate property bookings, installment collections, site visit scheduling, and broker commissions;
• To prepare and issue official payment vouchers, booking receipts, and property allotment records;
• To authenticate authorized personnel and enforce strict role-based access controls;
• To deliver important operational push alerts regarding assigned tasks and appointments;
• To maintain an accurate audit trail of sales milestones and financial records; and
• To comply with statutory real estate, taxation, and consumer protection requirements under Indian law.

We do not use information collected through the App for third-party advertising, and we never sell personal data.

5. Legal basis for processing (India — DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India, Brij Properties (Bhagwat Builders) acts as the Data Fiduciary. We process personal data based on:

• Consent obtained from property buyers and prospects during sales inquiries, site visits, or booking form submissions; and
• Legitimate Uses recognized under the DPDP Act, including performing contractual obligations (such as executing property sales and registry agreements) and fulfilling statutory compliance duties.

GLAD Studio processes data strictly as a Data Processor under clear contractual instructions to provide technology hosting, maintenance, and technical operation.

6. How information is shared

We do not rent, trade, or sell personal data. Information is shared strictly under the following conditions:

• Internal Role-Based Access: Only authorized employees and administrators who require access to perform their specific business duties;
• Infrastructure Service Providers: Trusted cloud and hosting providers bound by strict data confidentiality agreements;
• Legal & Regulatory Authorities: When required by court order, law enforcement, or statutory land registration authorities under Indian law; and
• Business Transfers: In the event of a merger, acquisition, or restructuring, subject to standard confidentiality protections.

7. Third-party services used by the platform

8. Data storage and international transfer

All primary customer data, property records, and transaction archives are securely stored on cloud server infrastructure located in India. Certain third-party messaging services (such as Firebase Cloud Messaging) may process anonymous device tokens across global edge networks to ensure immediate push notification delivery, in full compliance with DPDP Act standards.

9. Data retention schedule

Personal data is retained only for the period necessary to fulfill its legitimate business and statutory purposes:

• Financial & Transaction Records: Retained for 8 years to comply with Indian accounting, income tax, and corporate record-keeping statutes.
• Customer & Lead Profiles: Retained for the duration of the customer relationship and up to 3 years after the last recorded interaction, or until a valid erasure request is verified.
• Login & Security Logs: Retained for 180 days for security auditing, anomaly detection, and access verification.
• Push Notification Tokens: Erased immediately upon user logout, token revocation, or uninstallation.

10. Security safeguards

We implement robust administrative, physical, and technical safeguards:

• Encrypted data transmission across all endpoints using modern TLS/HTTPS protocols;
• Secure one-way password hashing using industry-standard salt & hash algorithms;
• Granular role-based access control (RBAC) ensuring staff only access records assigned to their role; and
• Automated daily encrypted backups and rate-limited API firewalls to prevent unauthorized access.

11. Your rights and choices

Under the DPDP Act, 2023, individuals have enforceable rights regarding their personal data:

• Right to Access: You may request a summary of the personal data we hold about you.
• Right to Correction & Updating: You may request correction of inaccurate, outdated, or incomplete details.
• Right to Erasure: You may request deletion of personal data, subject to statutory retention obligations (e.g. tax and registry records).
• Right to Withdraw Consent: Where processing is consent-based, you may withdraw consent at any time.

To exercise any of these rights, please write to our office using the contact details in Section 16.

12. Data of customers and leads entered by our staff

Because customers do not log in to the App directly, notices and consent regarding personal data collection are provided at the time of inquiry, site visit, or formal booking via offline physical forms or direct representative communication. Customers wishing to review or update their information may contact our office directly.

13. Children's privacy

The App and Platform are strictly intended for adult enterprise use by authorized real estate professionals. We do not knowingly solicit or collect data from individuals under 18 years of age. If we learn of inadvertent collection of a minor's data, we will take immediate measures to delete it.

14. Data breach notification

In the unlikely event of a personal data breach posing risk to individuals, we will notify affected individuals and the Data Protection Board of India in accordance with DPDP Act regulations without undue delay.

15. Changes to this policy

We may periodically update this Privacy Policy to reflect regulatory modifications or system enhancements. The "Last Updated" date at the top of this document indicates the latest revision. Continued use of the platform following an update constitutes acceptance of the revised terms.

16. Contact Us

For any inquiries, requests, or privacy questions regarding this policy or our data management practices, please contact: