Skip to main content

Privacy Policy

Last updated: December 24, 2024

1. Introduction

Bhavan.ai ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or use our services.

This policy complies with the General Data Protection Regulation (GDPR) and the Information Technology Act, 2000, and the Personal Data Protection Bill of India.

2. Information We Collect

We collect information that you provide directly to us, including:

  • Personal Information: Name, email address, phone number, city of residence
  • Financial Information: Monthly rent, monthly salary, preferred co-owner count
  • Account Information: Age range, current living situation, housing preferences
  • Communication Data: Messages, inquiries, and feedback you send to us
  • Technical Data: IP address, browser type, device information, cookies, and usage data
  • Marketing Data: UTM parameters, campaign sources, and preferences for receiving communications

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To assess your eligibility for fractional home ownership through our platform
  • To match you with compatible co-owners based on your preferences
  • To communicate with you about our services, updates, and promotional offers
  • To process your applications and facilitate SPV formation
  • To improve our website, services, and user experience
  • To comply with legal obligations and prevent fraud
  • To analyze usage patterns and optimize our marketing campaigns

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: You have given explicit consent for us to process your data for specific purposes
  • Contract: Processing is necessary to fulfill our contractual obligations to you
  • Legal Obligation: We must process your data to comply with legal requirements
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights are not overridden

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Third-party vendors who assist with operations (e.g., email services, analytics, CRM)
  • Financial Partners: NBFCs and financial institutions for loan processing and credit checks
  • Legal Authorities: When required by law or to protect our rights and safety
  • Potential Co-owners: With your consent, to facilitate matching and SPV formation
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

All third parties are contractually obligated to protect your data and use it only for specified purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Employee training on data protection and privacy
  • Secure data storage with reputable cloud providers

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Under GDPR and Indian data protection laws, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation on how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@bhavan.ai. We will respond to your request within 30 days.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When data is no longer needed, we securely delete or anonymize it.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies help us:

  • Remember your preferences and settings
  • Analyze website traffic and usage patterns
  • Track marketing campaign effectiveness
  • Provide personalized content and advertisements

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

10. International Data Transfers

Your data may be transferred to and processed in countries outside of India. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@bhavan.ai

General Inquiries: hello@bhavan.ai

Address: Bhavan.ai, Bangalore, India

14. Supervisory Authority

If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.