Privacy Policy - Property Inspector

Effective Date: February 27, 2026 Version: 1.0.0

1. Introduction

Property Inspector ("we", "our", "us") is committed to protecting your personal data in compliance with the Digital Personal Data Protection (DPDP) Act, 2023. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our property inspection and management services.

2. Data We Collect

We collect the following categories of personal data:

2.1 Identity Information

• Full name, email address, phone number
• Aadhaar number (encrypted at rest per Aadhaar Act S.29(b))
• PAN number (encrypted at rest)
• Passport number, Voter ID (encrypted at rest)

2.2 Property Information

• Property addresses and GPS coordinates
• Property documents (sale deed, tax receipts, encumbrance certificates, etc.)
• Geotagged photographs of properties

2.3 Usage Information

• App usage analytics
• Device information and IP address
• Inspection booking history

3. Purpose of Data Processing

We process your personal data for the following purposes (DPDP Section 5):

| Purpose | Legal Basis | |---------|-------------| | Essential Service Delivery | Contract performance | | Identity Verification (eKYC) | Legal obligation | | Property Document Storage | Consent | | Location / Geospatial Data | Consent | | Marketing Communications | Consent | | Analytics & Improvement | Legitimate interest | | Third-party Data Sharing | Consent |

4. Your Rights Under DPDP Act 2023

As a Data Principal, you have the following rights:

• Right to Information (Section 5): Know what data we collect and why.
• Right to Consent (Section 6): Grant or withhold consent for each purpose.
• Right to Withdraw Consent (Section 7): Withdraw consent at any time.
• Right to Access (Section 10): Request a copy of all your personal data.
• Right to Erasure (Section 11): Request permanent deletion of your account and data.
• Right to Grievance Redressal (Section 12): Contact our Data Protection Officer.

5. Data Security (DPDP Section 8(5))

We implement reasonable security safeguards including:

• AES-128-CBC encryption (Fernet) for all sensitive identity fields
• HMAC-SHA256 hashing for search indices
• TLS 1.3 for data in transit
• AWS S3 server-side encryption for documents and photos
• Role-based access controls and audit logging

6. Data Retention

• Active account data: Retained while your account is active
• Data exports: Available for 7 days after generation
• Deletion audit logs: Retained for 7 years (legal requirement)
• Consent logs: Retained permanently (immutable audit trail)

7. Children's Data (DPDP Section 9)

We collect date of birth for age verification. Users under 18 require verifiable parental consent before data processing.

8. Data Breach Notification (DPDP Section 8(6))

In the event of a personal data breach, we will:

• Notify the Data Protection Board of India promptly
• Notify affected users via email, SMS, and push notification
• Provide details of the breach and remediation steps

9. Contact Us

Data Protection Officer: Email: dpo@proptinspector.com Address: Hyderabad, Telangana, India

Grievance Officer: Email: grievance@proptinspector.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will notify you via the app and require re-consent for material changes.