Privacy Policy

1. What we collect

• Account: your mobile number, your name (optional), and your password, which we store only as a one-way scrambled hash. We cannot read it.
• Listings you post: title, description, price, area, address and locality, the map pin and any plot outline, photos, the contact number and name you give for the listing, and the date.
• What you do on the site: the listings you unlock, shortlist or close, and payment records for unlocks and for listing time (amount, date, Cashfree order and payment ids).
• Listing views: when you open a listing we count one view per day for that listing, using an anonymous visitor code (a salted hash of your account, or of your IP address and browser). Owners see only the totals, never who looked. Your own views of your own listings are not counted.
• Reports and complaints: if you report a listing or raise an issue we keep what you wrote, the listing it is about, the optional mobile number or e-mail you gave so we can reach you, and our notes. Notices from government bodies and courts are kept with their reference. A report can be sent without an account.
• Sign-in codes: when we text you a code we keep only a hash of it for 5 minutes.
• Technical data: your IP address is used in short-lived counters that stop abuse (too many sign-in attempts, codes or posts). These are deleted after about a day. Our hosting provider may also keep ordinary server logs.
• In your browser: one sign-in cookie (kept up to 14 days, used only to keep you signed in), and small settings saved on your device, such as your area unit and the listings you picked to compare. We do not use advertising or tracking cookies and we do not run analytics on you.

We do not see or store your card, UPI or bank details. Cashfree handles those, for listing payments just as for unlock payments.

Location: if you take a photo in our app or tap “Use my current location” while posting, your phone’s location is read once, with your permission, to place the map pin. We do not track your location in the background. The location data stored inside a photo file is removed before the photo is uploaded, so the picture does not reveal where it was taken beyond the pin you chose.

2. Why we use it

• To create and secure your account, and to send the one-time codes.
• To show your listings, let people search, shortlist and compare, and let buyers unlock a number.
• To take payments, keep accounting records, and follow tax and other laws.
• To prevent spam, fraud and abuse, and to keep the site safe.
• To answer your questions and complaints.

We rely on your consent (you give it when you sign in and post) and on what the law requires or allows us to do. We use your data only for the purposes above. We do not sell it, rent it, or use it for advertising, and we do not send promotional messages to your number.

3. Who sees what

• Everyone can see your listing: its text, photos and map pin (rounded to about 10 metres) and how long it stays live. Your name and contact number are hidden: not even a part of the number is shown.
• People who pay to unlock your listing see your name and the contact number you gave for it, and keep them in their “My contacts” list while the listing and their account exist.
• Our team can see accounts, listings and payments in order to run the site, handle complaints and prevent misuse.

We use these companies to run the service. They handle data only for us and under their own security and privacy terms:

• Neon, for our database (hosted in Singapore).
• Vercel, for hosting and for storing photos.
• Cashfree, for payments.
• An SMS provider, which receives your mobile number and the code text to send it.
• Map and satellite image providers (such as OpenFreeMap and Esri). Your browser loads map tiles from them directly, so they see your IP address and which area you look at, but not who you are.

Some of these are outside India, so your data can be processed abroad. We may also share data when the law or a court order requires it, or to protect people from fraud or harm.

4. How long we keep it

• Account, listings, photos, unlocks and shortlist: until you delete them or your account.
• Reports and complaints: until resolved, and afterwards for as long as the law or a legal claim requires. If you delete your account, the contact details you gave in a report are erased; the report itself is kept.
• Sign-in codes: 5 minutes. Abuse counters with IP addresses: about a day.
• Anonymous payment entries (see section 6): for the period Indian tax and accounting law requires.
• Backups: our database provider keeps recent history for a limited period so it can recover from failures. Deleted data can remain in those backups until they expire, and is not used for anything else.

5. Your rights, and how to use them

You can:

• see and correct your name and listings, change your password and your mobile number (needs a code sent to the new number), and close listings, all from your account;
• delete your account yourself, from the same page, at any time (see section 6);
• ask us for a copy of the personal data we hold about you, or ask us to correct it, by writing to us;
• withdraw your consent (deleting your account does this), and nominate someone to exercise your rights if you cannot;
• complain to our Grievance Officer below, and to the Data Protection Board of India if we do not resolve it.

6. What deleting your account removes

When you confirm deletion with your password, we erase, everywhere we hold them:

• your account, name and mobile number, and any pending sign-in code;
• all your listings and their photos;
• every unlock, saved contact, shortlist entry and order that other people have for your listings, so they disappear from those people’s lists too;
• your own unlocked contacts, shortlist and orders as a buyer;
• your counters and the log lines about your listings.

What we keep: a paid unlock is a sale, and tax law requires us to keep a record of it. For deleted accounts we keep only an anonymous entry with the amount, the date and the Cashfree payment id. It does not contain your name, your number or the listing, and nothing in it can be linked back to you by us. We also keep a one-way scrambled code (a keyed hash) of your number, so that the free welcome unlocks given to a new number cannot be claimed again by deleting the account and signing up again. It cannot be turned back into your number. Deletion is permanent and cannot be reversed.

7. Security

Passwords are hashed, sign-in cookies are signed and cannot be read by scripts on the page, connections use HTTPS, other people’s numbers are never sent to your browser before you unlock them, and we limit repeated attempts. No system is perfectly safe. If a breach affects your data, we will tell you and the authorities as the law requires.

8. Information you choose to make public, and other sites

What you put in a listing (text, photos, pin, the name you give) is public by design. Think before you add personal details, and do not add other people’s details. Links and maps from other companies are covered by those companies’ own privacy policies, not this one.

9. Children

GetAPlot is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has signed up, write to us and we will delete the account.

10. Changes

If we change this policy, we will update the date above and tell signed-in users about important changes.

11. Contact and Grievance Officer

Questions and requests: [support email address].
Grievance Officer: [Grievance Officer name], [grievance email address], [Registered business name], [Registered office address]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.