Privacy Policy
Effective date: 17 October 2026
This Privacy Policy explains what personal data Dhaka Property collects, why, who it is shared with, how long it is kept, and the choices and rights you have. It covers:
- the website dproperty.co.in;
- the Dhaka Property mobile app (for buyers and tenants);
- the Dhaka Property Seller mobile app (for owners, landlords and agents); and
- the notifications, emails, SMS and support we provide in connection with them (together, the “Services”).
The Services are offered in India only. This Policy is written to meet the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under it, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“IT Rules, 2021”).
1. Who we are
Dhaka Property is operated by Sahasrar Systems LLP (LLPIN AAT-7599), a limited liability partnership registered in India, with its registered office at:
New Kapil Colony, Nawalgarh Road, Behind Vinayak College, Sikar, Rajasthan 332001, India.
In this Policy, “we”, “us” and “our” mean Sahasrar Systems LLP. Under the DPDP Act we are the Data Fiduciary for the personal data described here.
Questions, requests and complaints: support@dproperty.co.in. See section 13 for the Grievance Officer.
2. The short version
- You sign in with Google or Apple. We keep your name, email, phone number and the listings, enquiries, viewings, offers and payments you make through us.
- When you contact an owner or agent about a property, they receive your contact details and message, because that is how they answer you.
- We send service messages (for example, “your viewing was accepted”) whenever they are relevant. Promotional messages are sent only if you opt in, and you can switch them off at any time in the app.
- On the website, analytics cookies are on by default and can be switched off; advertising cookies stay off until you turn them on. In the apps, nothing is shared with Meta or OpenAI unless you turn on “Ad Measurement”, which is off by default (the setting is arriving in an upcoming app version; until then the apps share nothing with them).
- We do not sell your personal data.
- You can see, correct and delete your data, withdraw consent, nominate someone to act for you, and complain to us and then to the Data Protection Board of India.
3. What we collect
3.1 Information you give us
| What | Examples | Where |
|---|---|---|
| Account and profile | Name, email address, phone number, profile photo, role (buyer, tenant, owner, agent), agency details for agents | Apps |
| Sign-in | The identifier and verified email that Google or Apple returns when you sign in (we never see your Google or Apple password) | Apps |
| Listings | Property type, address, locality, city, map location, price, description, amenities, photos, walkthrough videos, availability | Seller app |
| Enquiries and messages | Your message to an owner or agent about a listing, and support tickets | Apps, website |
| Viewings | Requested, proposed and agreed viewing dates, accept/decline/cancel answers and the notes either side adds | Apps |
| Offers and applications | Offer amount, contract term, rental or purchase application details you submit | Apps |
| Ratings | Ratings and comments you leave about another user after an interaction | Apps |
| Memberships and payments | Plan chosen, amount, order and payment ids, payment status, invoices | Apps |
| Website enquiry form | Name, email, phone number and message | Website |
| Preferences and consents | Notification preferences (including promotional opt-ins), the “Ad Measurement” choice in the apps, the cookie choice on the website | Apps, website |
Card, UPI and bank details are entered on Razorpay’s payment screens and processed by Razorpay. We receive only the payment result and reference ids — we never receive or store your full card number, CVV or UPI PIN.
3.2 Information collected automatically or with your permission
| What | Examples | Where |
|---|---|---|
| Location (only if you allow it) | Your device’s current location, used to show properties near you, to fill in your address, and — in the Seller app — to place a listing’s pin on the map. If you refuse, we fall back to the city you choose. | Apps |
| Camera, photos and microphone (only if you allow it) | Photos and videos you choose to take or upload for a listing or your profile. We access only what you pick. | Apps |
| Device and app | Device model, operating system, app version, language, a push-notification token, a device identifier used to keep guest browsing and sign-in secure | Apps |
| Usage events | Screens and listings viewed, searches and filters, enquiries sent, viewings booked, offers made, listings created (recorded as events in Firebase Analytics) | Apps |
| Install attribution | The campaign that led to an install (Google Play install referrer); on Android, the advertising ID only if you have not limited ad tracking or deleted the ID; on iPhone, the advertising identifier only if you tap “Allow” on the App Tracking Transparency prompt | Apps |
| Website usage | Pages and listings viewed, searches, clicks on app-store buttons, form submissions, and the campaign parameters in the link you arrived from (for example utm_source, gclid, fbclid) |
Website |
| Technical and security logs | IP address, browser user agent, request time, the page or API called, error and crash details | Website, apps, our servers |
You can change location, camera, photo and microphone permissions at any time in your device settings.
3.3 Information from others
- Google and Apple, when you sign in (name, email, account identifier).
- Razorpay, about the outcome of a payment.
- Other users: an owner or agent may record a viewing, offer or rating that concerns you; a buyer or tenant may send you an enquiry.
- Advertising platforms (Google, Meta, OpenAI) give us aggregated reports on how our ads performed. They do not tell us who you are.
4. Why we use it, and on what basis
Under the DPDP Act we process personal data either because you consented, or for a legitimate use the Act allows — mainly where you have voluntarily given us data for a specific purpose (such as sending an enquiry), or to comply with law.
| Purpose | Data used | Basis |
|---|---|---|
| Create and secure your account, let you sign in | Account, sign-in, device data | Consent at sign-up / voluntarily provided for this purpose |
| Publish and manage listings | Listing data, photos, videos | Voluntarily provided for this purpose |
| Pass your enquiry, viewing request, offer or application to the owner or agent, and their answers back to you | Contact details, message, viewing and offer details | Voluntarily provided for this purpose |
| Show nearby properties and fill in addresses | Location (if allowed) | Consent (device permission) |
| Process memberships and payments, issue receipts | Plan, payment references | Voluntarily provided / legal (tax and accounting) obligations |
| Send service (transactional) notifications — viewing and offer updates, enquiries, payment receipts, listing status, security alerts | Contact details, push token | Needed to deliver the Service you asked for |
| Send promotional notifications — deals, offers, membership promotions, personalised suggestions | Contact details, push token, preferences | Consent (opt-in; off unless you turn it on) |
| Understand how the Services are used and fix problems | Usage events, logs, crash data | Consent (website analytics choice; apps as described in section 7) |
| Measure whether our advertising works | Cookie ids, campaign ids, install referrer, hashed email/phone | Consent (website advertising cookies; app “Ad Measurement” opt-in; device tracking settings) |
| Prevent fraud, spam, abuse and unauthorised access | Logs, account and device data | Legitimate use / legal obligation |
| Meet legal obligations, respond to lawful requests, resolve disputes | Any relevant data | Legal obligation |
We do not make decisions about you that have legal or similarly significant effects by automated means alone.
5. Who we share it with
We do not sell your personal data. We share it only as follows.
5.1 Other users
- Your listing (photos, video, description, price, locality and map location) is public on the website and in the apps. Do not include anything in a listing you do not want made public.
- When you contact an owner or agent — by enquiry, viewing request, offer or application, in the apps or through the website enquiry form — that owner or agent receives your name, contact details and message so they can answer you. Website enquiries are also received by our support team.
- When you list a property, buyers and tenants who interact with it see the contact details shown with the listing.
- Ratings you leave are visible to the person rated and may be shown on their profile.
Owners and agents who receive your details must use them only to deal with your enquiry.
5.2 Service providers (Data Processors)
These companies process data on our instructions, only to provide their service to us:
| Provider | What they do for us |
|---|---|
| Google (Firebase Authentication, Firebase Cloud Messaging, Firebase Analytics, Google Analytics 4) | Sign-in, push notifications, app and website analytics |
| Apple (Sign in with Apple, Apple Push Notification service) | Sign-in and push notifications on iPhone |
| Razorpay | Payment processing for memberships |
| Cloudflare (CDN, Stream, R2) | Delivering the website securely; storing and streaming listing photos and videos |
| Amazon Web Services and our own servers | Hosting our backend services and databases |
| GoDaddy | Hosting the website |
| Email and SMS delivery providers | Sending transactional and (if you opted in) promotional email and SMS |
5.3 Advertising measurement partners — only with your consent
| Partner | What they receive | When |
|---|---|---|
| Google (Google Ads) | Cookie and campaign ids (e.g. gclid), pages visited, conversion events; in the apps, install and in-app conversion events via Firebase |
Website: advertising cookies allowed. Apps: see section 7 |
| Meta Platforms (Facebook, Instagram) — Meta Pixel and Conversions API | Pages and listings viewed, searches, a lead event when you submit the website enquiry form, your IP address, browser user agent, page URL, Meta’s cookie ids (_fbp, _fbc); SHA-256 hashed email and phone number for matching |
Website: advertising cookies allowed. Apps: “Ad Measurement” turned on |
| OpenAI (ChatGPT ads) — Measurement Pixel and Conversions API | The same kinds of events, IP address, user agent, page URL, OpenAI’s cookie ids (__oppref, __obref); SHA-256 hashed email and phone number for matching |
Website: advertising cookies allowed. Apps: “Ad Measurement” turned on |
Hashing turns your email or phone number into a fixed string that cannot practically be reversed. The platform compares it with hashes of its own users’ details to tell us, in aggregate, whether our ads led to an enquiry. We never send your name or the text of your message to these partners. Each partner also handles the data it receives under its own privacy policy.
5.4 Others
- Authorities: government agencies, courts, regulators or law enforcement where Indian law requires it, or to protect the rights, property or safety of our users or the public.
- Professional advisers (lawyers, auditors, accountants) under a duty of confidentiality.
- A successor business, if Dhaka Property is merged, acquired or restructured — bound by this Policy.
6. Cookies and advertising on the website
When you first visit dproperty.co.in a banner asks for your choice:
- Necessary — always on. Keeps the site working and remembers your choice.
- Analytics — on by default; you can switch it off. Google Analytics measures which pages and listings are viewed.
- Advertising — off until you choose “Accept all” or turn it on under “Customise”. Lets Google Ads, Meta and OpenAI measure whether our ads led you to the site.
We use Google Consent Mode v2: until you allow a category, Google’s tags for it run without setting cookies, and the Meta and OpenAI pixels are not loaded at all.
Changing your choice: click “Cookie settings” in the footer of any page. If you withdraw advertising consent, the Meta and OpenAI pixels stop, the OpenAI pixel deletes its cookies, and our server stops reporting your enquiries to Meta and OpenAI. You can also delete cookies in your browser settings.
| Name | Provider | Purpose | Category | Consent needed |
|---|---|---|---|---|
dp_consent (browser storage) |
Dhaka Property | Remembers your cookie choice | Necessary | No |
dp_campaign (session storage) |
Dhaka Property | Remembers the campaign link you arrived from during this visit, so app-store links can credit it | Necessary | No — cleared when you close the tab |
Cloudflare security cookies (e.g. __cf_bm) |
Cloudflare | Tell people from bots and protect the site | Necessary | No |
| WordPress and form cookies | Dhaka Property | Make the site and the enquiry form work | Necessary | No |
dp_ads (cookie, 1 year) |
Dhaka Property | Records that you allowed advertising, so our server may report enquiries to Meta and OpenAI; deleted when you withdraw | Advertising | Set only once you allow advertising |
_ga, _ga_<id> |
Google Analytics 4 | Count visits and page views; distinguish visitors | Analytics | Yes — on by default, can be switched off |
_gcl_au, _gcl_aw and other Google Ads cookies |
Google Ads | Link a visit or enquiry to the Google ad that led to it | Advertising | Yes |
_fbp, _fbc |
Meta | Link a visit or enquiry to a Facebook or Instagram ad | Advertising | Yes |
__oppref, __obref and other OpenAI pixel cookies |
OpenAI | Link a visit or enquiry to a ChatGPT ad | Advertising | Yes |
Google, Meta and OpenAI may change the exact names of their cookies; any they set belong to the categories above and follow the same consent rules.
Links to the apps: app-store buttons on the website add the campaign you arrived from to the link (for example utm_source, gclid), so that if you install an app, the install can be credited to that campaign.
7. Analytics and ad measurement in the apps
- Firebase Analytics records how the apps are used (screens, searches, enquiries, viewings, offers and similar events) together with the device and app information in section 3.2. This helps us fix problems and see which features work. It is linked to Google Ads, so that installs and key in-app actions can be credited to our Google ads.
- Install attribution: on Android we read the Google Play install referrer, and the advertising ID only if you have not limited ad tracking. On iPhone we use the advertising identifier only if you tap “Allow” on the App Tracking Transparency prompt.
- Ad Measurement (Meta and OpenAI): an opt-in setting arriving in an upcoming version of the apps, off by default. Until it exists and you turn it on, the apps share nothing with Meta or OpenAI. Only if you turn it on do we share SHA-256 hashed email and phone number and in-app conversion events with Meta and OpenAI, as in section 5.3. You can turn it off again in the app at any time.
- Device settings: you can reset or delete your advertising ID (Android: Settings → Privacy → Ads; iPhone: Settings → Privacy & Security → Tracking).
8. Notifications
- Transactional notifications — about your account, viewings, offers, enquiries, listings, payments and security — are sent by push, email or SMS because they are part of the Service. They are not affected by promotional preferences; you can stop push notifications in your device settings, or delete your account.
- Promotional notifications — deals, offers, membership promotions and personalised suggestions — are sent only if you have opted in. If you have not opted in, or we cannot confirm your choice, we do not send them. Change this at any time in the app’s notification preferences.
- Push notifications are delivered through Firebase Cloud Messaging (and Apple’s push service on iPhone) using a device token. Emails and SMS are sent through our delivery providers.
9. Where your data is stored and transferred
Your data is processed in India and also outside India, because some of our providers operate globally:
- our backend services run on Amazon Web Services and on our own servers;
- the website is hosted by GoDaddy (India and United States) and delivered through Cloudflare’s global network;
- listing photos and videos are stored and streamed by Cloudflare;
- Google (Firebase, Analytics, Ads), Apple, Meta and OpenAI process data in the United States and other countries.
We transfer personal data outside India as the DPDP Act permits, and will stop transfers to any country the Government of India restricts by notification. We use providers that commit to protecting the data they process for us.
10. How long we keep it
| Data | How long |
|---|---|
| Account and profile | While your account is active; on deletion, see below |
| Listings, enquiries, viewings, offers, ratings | While your account is active; on deletion, see below |
| Payment and invoice records | 8 years from the end of the financial year, as Indian tax and accounting law requires |
| Server and security logs | Up to 180 days, or longer where needed to investigate a specific incident or required by law |
| Website analytics (Google Analytics) | 14 months |
| Website enquiry form submissions | Up to 24 months |
| Cookie choice | Until you change it or clear your browser storage; dp_ads expires after 1 year |
| Consent records (opt-ins and withdrawals) | As long as needed to show the consent was given or withdrawn, plus any legal limitation period |
Deleting your account. You can delete your account in either app (Profile → Delete Account) or by writing to support@dproperty.co.in. We then remove your profile and stop processing your data for our purposes. Some records also involve another person — for example a viewing, offer, agreement or rating, or a listing an agent handled — and other users and the law rely on them. For these we anonymise the record or reassign it so it no longer identifies you, rather than delete it outright. Payment records are kept for the period above. Copies in backups are overwritten in the normal backup cycle.
11. How we protect it
- All traffic to the website, apps and APIs is encrypted in transit (HTTPS/TLS).
- Sign-in uses Google and Apple; we never hold a password for you.
- Secrets and configuration are encrypted, and access to production data is limited to staff who need it.
- Services that hold data are separated from those that face the internet.
- Payment card data is handled only by Razorpay.
No system is perfectly secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as the DPDP Act requires.
12. Your rights and choices
Under the DPDP Act you have the right to:
- Access — a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
- Correction and completion — fix inaccurate or incomplete data; you can edit most profile and listing details yourself in the app;
- Erasure — have your data deleted when it is no longer needed for its purpose or you withdraw consent, subject to legal retention (section 10);
- Withdraw consent — as easily as you gave it: promotional notifications and “Ad Measurement” in the app settings; cookies through “Cookie settings” on the website; device permissions in your phone’s settings; or by writing to us. Withdrawal does not affect processing already done;
- Grievance redressal — complain to us and receive a response (section 13);
- Nominate — name another person to exercise your rights if you die or become unable to. Email us the nominee’s name and contact details.
To make a request, email support@dproperty.co.in from the email address on your account (or include your registered phone number). We may ask you to confirm your identity before acting, and we will respond within the timelines in section 13.
The DPDP Act also places duties on you: please do not file false or frivolous complaints, or impersonate anyone, when exercising these rights.
13. Grievance Officer
If you have a concern about your personal data, or about content on Dhaka Property, contact our Grievance Officer:
Nishant Fageria, Grievance Officer
Sahasrar Systems LLP
New Kapil Colony, Nawalgarh Road, Behind Vinayak College, Sikar, Rajasthan 332001, India
Email: support@dproperty.co.in (subject: “Grievance”)
We will acknowledge your complaint within 24 hours and resolve it within 15 days of receiving it, as the IT Rules, 2021 require. A request to remove content that exposes a person’s private areas, shows them in a sexual act or impersonates them will be acted on within 24 hours.
If you are not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act, after first using our grievance process.
14. Children
The Services are for adults. You must be 18 or older to create an account. We do not knowingly collect personal data from anyone under 18, and we do not track children or target advertising at them. If you believe a child has given us personal data, contact us and we will delete it.
15. Links to other services
The Services link to Google Play, the App Store, WhatsApp, YouTube and map services. Those services are governed by their own privacy policies.
16. Changes to this Policy
We will update this Policy when our practices change and change the effective date at the top. If a change is significant — for example a new purpose or a new kind of partner — we will tell you in the apps or by email before it takes effect and, where the law requires, ask for your consent again.
17. Contact
Sahasrar Systems LLP (Dhaka Property)
New Kapil Colony, Nawalgarh Road, Behind Vinayak College, Sikar, Rajasthan 332001, India
Email: support@dproperty.co.in
