Privacy Policy

PropCurate is a property verification service. It shows whether a property is real and whether the person who claims it has proved they own it. PropCurate is operated by Rockruff Constructions Private Limited, C803, NoidaOne, Sector 62, Noida, Uttar Pradesh 201309, India ("we", "us"). This policy explains what personal data we collect through the PropCurate app, propcurate.com and our staff tools, why, how long we keep it, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023.

1. What we collect

Your account: your mobile number, and the name, email address and photo you choose to add. If you sign in with Google, Apple or Facebook, we receive the name and email address that provider shares, and an identifier for your account with it.

Your identity, when you claim a property: you verify your identity through DigiLocker, using a licensed access provider. We keep only the reference for that check, the name DigiLocker returned and the last four digits of your Aadhaar number. We never store your full Aadhaar number or your Aadhaar document; it is read during the check and discarded.

Your property claims: the documents you upload (for example a sale deed, an electricity bill or a land record), which can show names, addresses, consumer numbers and, for photos, where the photo was taken; the facts read from them (names, address and dates); the property and unit you claim; the co-owners you add, with their names and mobile numbers; and the history of the claim and its decision.

Location: when you allow it, your device's location, used to show properties near you. It is rounded to about 110 metres before it leaves your phone. You can keep it approximate or turn it off and choose a locality by hand. We keep the localities you choose while your account is open.

What you do in PropCurate: properties you save, links you share and the mobile numbers you send them to, enquiries you make and their messages, notification settings, and which properties and screens you open. To show the app works without an account, we give each installation a random identifier; we link it to your account once you sign in.

Your device: a push notification token for each phone you sign in on, and crash reports with diagnostic details (app version, device model, operating system and what failed). Crash reports carry an installation identifier, never your name, number or the content of your screens.

Staff and partners: if you work for us as a field agent, verifier or broker, we also record the visits and photographs you take, with their precise location and time, and the owners' names and numbers you enter on their behalf.

2. Why we use it

To run your account and sign you in; to verify identity and ownership and decide claims; to show a property's verification to anyone who looks it up; to show your name as owner only if you choose to (Show my name); to send you codes, notifications and the messages you ask us to send; to answer enquiries; to keep PropCurate secure, prevent fraud and investigate misuse; to understand how PropCurate is used so we can improve it; and to meet our legal obligations. We do not sell your personal data, show advertising, or track you across other companies' apps or websites.

3. Consent

We process your personal data on the basis of the consent you give when you create your account and when you start a claim, and where the law otherwise permits. You can withdraw consent at any time by deleting your account (Menu, then Settings, then Delete my account, or propcurate.com/delete-account). Withdrawing consent does not affect processing already done, and some records are kept as described in section 5.

4. Who we share it with

Anyone who looks up a property sees whether it is verified, when, and what was checked. Your name appears only if you turn on Show my name for that property. A person you share a link with sees the property, never your number.

We use service providers who process data for us under contract and only on our instructions: our cloud hosting and storage in India; an SMS provider to send codes and invitations; a licensed DigiLocker access provider for identity checks; Ola Maps for maps and place search (it receives the area shown on the map, not who you are); Google, Apple and Facebook if you sign in with them; and Expo, Google (Firebase) and Apple to deliver push notifications. Our verification staff and field agents see the claims and documents they are assigned to review.

We disclose personal data to authorities when the law requires it.

5. How long we keep it

While your account is open, we keep your data so the service works. When you delete your account, after 30 days we delete your profile, ways to sign in, saved localities, saved properties, shares, enquiry messages, drafts and activity records, and we blank your name, number, email and photo.

Decided claims, with their documents, owners and history, are records of a verification others rely on. We keep them for 8 years after the decision, then delete them. A verified badge that rests only on your claims is withdrawn when your account is deleted. The record of your consents and our audit log are kept for the same period, as the law requires.

Activity records are kept for 13 months, and crash reports for 90 days, then deleted.

6. Where it is stored and how we protect it

Your data is stored on servers in India. Documents are kept in private storage, opened only through short-lived links after an access check, and every opening is logged. Data is encrypted in transit. Staff accounts need a second factor to sign in. Push notifications pass through Apple's and Google's services, which may process them outside India.

7. Your rights

You can see and correct your details in the app (Menu, then Profile), and ask us for a summary of the personal data we hold about you and how we use it. You can ask us to correct, complete, update or erase your personal data, withdraw consent, and nominate someone to exercise these rights if you die or become unable to. Write to our Grievance Officer to use any of these rights. We respond within the time the law sets.

8. Children

PropCurate is for adults. You must be 18 or older to create an account. If we learn that a child has given us personal data, we delete it.

9. Grievance Officer

Sajal Jain, Grievance Officer, Rockruff Constructions Private Limited, C803, NoidaOne, Sector 62, Noida, Uttar Pradesh 201309. Email support@propcurate.com, phone +91 99719 33375.

If we do not resolve your grievance, you may complain to the Data Protection Board of India.

10. Changes to this policy

When we change this policy, we publish the new version here with its date. If the change is significant, the app asks you to accept it before you continue.