Privacy Policy

1. Introduction and Scope

1.1. This Privacy Policy applies to all users of the REDS platform at realestatedecisionsuite.com and any associated services, applications, or tools.

1.2. We are committed to protecting your privacy in compliance with:

• The Information Technology Act, 2000 (India)
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Applicable data protection laws and regulations in India

1.3. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Information" means any information that relates to a natural person, which directly or indirectly identifies that person.
• "Sensitive Personal Data or Information" (SPDI) means personal information as defined under Rule 3 of the IT Rules, 2011, including financial information, passwords, and other specified categories.
• "Data Controller" refers to REDS, which determines the purposes and means of processing personal data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

3. Information We Collect

3.1. Information You Provide Directly

Category	Data Elements	Purpose
Account Information	Name, email address, phone number, password	Account creation, authentication, communication
Property Data	Property addresses, purchase prices, valuations, areas, possession dates	Portfolio tracking, calculations, analytics
Financial Information	Loan amounts, EMIs, interest rates, payment schedules, prepayment details	Loan tracking, prepayment calculations, projections
Payment Information	Transaction IDs, payment confirmations (card details are NOT stored by us)	Subscription management, billing

3.2. Information Collected Automatically

Category	Data Elements	Purpose
Device Information	IP address, browser type, operating system, device identifiers	Security, analytics, troubleshooting
Usage Data	Pages visited, features used, time spent, click patterns	Service improvement, analytics
Cookies & Similar Technologies	Session cookies, preference cookies, analytics cookies	Authentication, personalisation, analytics
Log Data	Access times, error logs, referral URLs	Security, debugging, performance monitoring

4. Legal Basis for Processing

4.1. We process your personal information based on the following legal grounds:

• Consent: You have given explicit consent for processing (e.g., during registration)
• Contract: Processing is necessary for the performance of our services to you
• Legal Obligation: Processing is required to comply with applicable laws
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided they do not override your fundamental rights

5. How We Use Your Information

5.1. We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve the Platform and its features
• Account Management: To create, manage, and authenticate your account
• Calculations & Analytics: To perform property calculations, generate reports, and provide insights
• Communication: To send service-related notifications, updates, and support responses
• Security: To detect, prevent, and address technical issues, fraud, and security threats
• Legal Compliance: To comply with legal obligations and respond to lawful requests
• Business Operations: To conduct internal analytics, research, and service improvements

6. Information Sharing and Disclosure

6.1. We may share your information only in the following circumstances:

6.1.1. Service Providers

We engage trusted third-party service providers who assist in operating our Platform, including:

• Cloud hosting providers (for data storage)
• Payment processors (for subscription payments)
• Analytics providers (for usage analytics)
• Email service providers (for communications)

These providers are contractually obligated to protect your data and use it only for specified purposes.

6.1.2. Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (court orders, subpoenas)
• Requests from law enforcement agencies
• Government authorities as required under Indian law
• To protect our rights, property, or safety

6.1.3. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

6.1.4. With Your Consent

We may share information with third parties when you have provided explicit consent.

7. Data Security

7.1. We implement reasonable security practices and procedures as required under the IT Rules, 2011, including:

• Encryption: Data in transit is encrypted using SSL/TLS protocols
• Access Controls: Restricted access to personal data on a need-to-know basis
• Authentication: Secure password hashing and authentication mechanisms
• Monitoring: Regular security audits and monitoring for vulnerabilities
• Incident Response: Procedures for detecting and responding to security incidents

8. Data Retention

8.1. We retain your personal information for as long as:

• Your account is active
• Necessary to provide services to you
• Required to comply with legal obligations
• Needed to resolve disputes and enforce agreements

8.2. Upon account deletion or request, we will delete or anonymise your personal data within 90 days, except where retention is required by law.

8.3. Anonymised and aggregated data may be retained indefinitely for analytics and research purposes.

9. Your Rights

9.1. Under applicable Indian law, you have the following rights:

• Right to Access: Request access to your personal information held by us
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Withdraw Consent: Withdraw previously given consent (may affect service access)
• Right to Data Portability: Request a copy of your data in a structured format
• Right to Deletion: Request deletion of your account and associated data

9.2. To exercise these rights, contact us at privacy@realestatedecisionsuite.com. We will respond within 30 days.

9.3. We may require verification of your identity before processing requests.

10. Cookies and Tracking Technologies

10.1. We use cookies and similar technologies for:

Cookie Type	Purpose	Duration
Essential Cookies	Authentication, security, basic functionality	Session
Preference Cookies	Remember your settings and preferences	1 year
Analytics Cookies	Understand usage patterns and improve services	2 years

10.2. You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.

11. Third-Party Links

11.1. The Platform may contain links to third-party websites or services.

11.2. We are not responsible for the privacy practices of these third parties. We recommend reviewing their privacy policies.

12. Children's Privacy

12.1. The Platform is not intended for individuals under 18 years of age.

12.2. We do not knowingly collect personal information from children. If we discover such data has been collected, we will delete it promptly.

13. International Data Transfers

13.1. Your data is primarily stored and processed in India.

13.2. Some service providers may process data in other jurisdictions. In such cases, we ensure appropriate safeguards are in place.

14. Changes to This Policy

14.1. We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

14.2. We will notify you of material changes by:

• Posting the updated policy on the Platform
• Updating the "Last Updated" date
• Sending email notification for significant changes

14.3. Continued use of the Platform after changes constitutes acceptance of the revised policy.

15. Grievance Officer

15.1. In accordance with the Information Technology Act, 2000, and rules made thereunder, you may contact our Grievance Officer for addressing any discrepancies or grievances regarding personal information:

16. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

17. Consent