Privacy Policy

1. Introduction, Scope, and Applicable Law

By accessing or using 11acre.ai, you agree to this Privacy Policy and the accompanying Terms of Service. This policy applies to all users, visitors, registered members, property owners, and service providers using our website, mobile applications, and related services in India.

• This Privacy Policy is governed by the Digital Personal Data Protection (DPDP) Act, 2023 and applicable rules, along with the Information Technology Act, 2000.
• Any dispute relating to this policy is subject to the jurisdiction of competent courts in Jabalpur, Madhya Pradesh, India.
• We encourage you to read this policy carefully along with our Terms of Service and Cookie Policy for a complete understanding.

2. Types of Personal Data We Collect

We collect only the data necessary to provide and improve our services. Data is collected with your consent and through lawful means.

• Identity and Contact Data: Name, email address, phone number, mailing address, and government-issued identity proofs (Aadhaar, PAN, voter ID, passport, or driving licence) provided during registration or verification.
• Property and Listing Data: Property details, photographs, videos, documents, ownership proofs, pricing, location, and availability information you submit for listing.
• Financial and Transaction Data: Payment details, billing information, transaction history, and subscription or service-fee records.
• Sensitive Personal Data (with explicit consent): Biometric data, password/PIN, and payment instrument details, collected only when required for specific features.
• Technical and Usage Data: IP address, browser type, device information, operating system, app version, and unique device identifiers.
• Location Data (with consent): Approximate or precise location data to help you find nearby properties and services.
• Behavioral and Preference Data: Search history, saved listings, preferences, interactions, clickstream data, and communication records.
• Communication Data: Messages, inquiries, feedback, support tickets, and call recordings (with notice) for quality and safety purposes.
• Third-Party Data: Information sourced from verified partners, public records, or third-party APIs, used to enrich listings and verify users.

3. How We Use Your Personal Data

We process your data only for legitimate purposes with a lawful basis under applicable data protection laws.

• To create and manage your account and provide the services you request.
• To verify your identity, property ownership, and listing authenticity.
• To facilitate property discovery, matching, and communication between users.
• To process payments, subscriptions, and financial transactions securely.
• To send service updates, alerts, and notifications relevant to your use of the platform.
• To improve platform functionality, user experience, and service quality.
• To detect, prevent, and investigate fraud, misuse, or illegal activity.
• To comply with legal obligations, court orders, or regulatory requirements.
• To conduct analytics and generate aggregated insights (in anonymized form).
• To send promotional communications only with your explicit consent; you may opt out at any time.

4. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. Sharing occurs only in the following circumstances:

• Service Providers: Trusted third-party vendors (payment processors, cloud hosting, SMS/email services, analytics) who process data on our behalf under strict confidentiality agreements.
• Other Users: Limited information shared with prospective buyers, tenants, or service seekers to facilitate transactions (e.g., contact details, property location).
• Affiliates and Group Entities: Sharing within our corporate group for operational purposes, subject to this policy.
• Legal Authorities: Disclosure to government agencies, law enforcement, or courts when required by law or for good-faith safety and security purposes.
• Business Transfers: In the event of merger, acquisition, or asset sale, user data may be transferred subject to continued protection under this policy.
• With Your Consent: Any other sharing requires your explicit, informed, and revocable consent.

5. Cookies, Tracking, and Analytics

We use cookies, web beacons, pixels, and similar technologies to enhance your experience and understand platform usage.

• Essential Cookies: Required for platform functionality, security, and session management. Cannot be disabled without affecting service.
• Analytics Cookies: Help us understand how users interact with the platform so we can improve performance and usability.
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness, only with your consent.
• You can manage or disable cookies through your browser settings, though some platform features may not function properly without them.
• Third-party analytics and advertising partners may use their own tracking technologies subject to their respective privacy policies.

6. Data Security Measures

We implement reasonable technical, administrative, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, loss, or misuse.

• Encryption of sensitive data in transit (TLS/SSL) and at rest where appropriate.
• Access controls, role-based permissions, and regular security audits.
• Secure payment processing through PCI-compliant payment gateways; we do not store full card details.
• Regular vulnerability assessments, penetration testing, and incident monitoring.
• Employee training on data protection, privacy obligations, and security best practices.
• Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. You share data at your own risk.

7. Data Breach Notification

In the unlikely event of a data breach that compromises your personal data, we will take the following steps:

• We will investigate and contain the breach in accordance with applicable law.
• We will notify affected users and the Data Protection Board of India (or relevant authority) without undue delay, as required by the DPDP Act, 2023.
• Notifications will include the nature of the breach, categories of data affected, likely consequences, and remedial measures taken.
• We will provide guidance on protective steps you can take in response to the breach.

8. Children's Privacy

11acre.ai is not intended for use by individuals under the age of 18 years. We do not knowingly collect, solicit, or process personal data from children.

• If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.
• Parents or guardians who believe their child has provided data should contact us immediately.
• We encourage parents to supervise their children's online activity and guide them on safe internet use.

9. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

• Active Accounts: Data is retained while your account is active and for a reasonable period thereafter for legitimate purposes.
• Deleted Accounts: Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., tax records, legal holds).
• Anonymized Data: Aggregated or anonymized data that cannot identify you may be retained indefinitely for analytics and research.
• Legal Holds: Certain data may be retained longer if required for ongoing legal proceedings, regulatory compliance, or fraud prevention.
• You may request account deletion and data erasure through your account settings or by contacting our Grievance Officer.

10. Your Rights and Choices

Under applicable law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to processing of your data for direct marketing or legitimate interest purposes.
• Right to Withdraw Consent: Withdraw previously given consent at any time without affecting the lawfulness of prior processing.
• Right to Grievance Redressal: Lodge complaints with our designated Grievance Officer or the Data Protection Board of India.

To exercise these rights, contact our Grievance Officer using the details below. We will respond within the timeframe mandated by applicable law.

11. International Data Transfers

Your personal data is primarily processed and stored on servers located in India. We do not routinely transfer personal data outside India.

• Where cross-border transfer is necessary (e.g., cloud services with offshore infrastructure), we ensure adequate safeguards under applicable law, including standard contractual clauses and adequacy decisions.
• By using the platform from outside India, you consent to the transfer, processing, and storage of your data in India and other jurisdictions where our service providers operate.
• Different data protection laws may apply in other jurisdictions; this policy continues to govern our processing.

12. Policy Updates, Governing Law, and Contact

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Significant changes will be communicated through the platform or via email.

• The continued use of the platform after any changes constitutes acceptance of the updated policy.
• This policy is governed by the laws of India. Any dispute is subject to the exclusive jurisdiction of competent courts in Jabalpur, Madhya Pradesh.
• If any provision is found unenforceable, the remaining provisions remain in full force and effect.

Grievance Officer: Compliance Desk, 11acre.ai

Email: elevenacre.ai@gmail.com | Phone: +91 9131677042 (Monday - Friday, 09:00 - 18:00 IST)