Privacy Policy

We collect the following categories of information:

• Account information: Your phone number (required for OTP authentication), display name, and optionally your email address and seller type (owner, agent, or builder).
• Listing data: Property details, photos, descriptions, pricing, and location information you submit when creating a listing.
• Inquiry data: Name, phone number, email (optional), and buyer intent signals you submit when contacting a seller.
• Usage data: Pages visited, search queries, listing views, session duration, and device information (browser type, OS, screen size), collected automatically via Google Analytics 4 (GA4).
• Cookie data: Authentication session cookies and analytics cookies as described in Section 4.

We use your information to:

• Authenticate your identity via phone OTP and maintain your session.
• Publish and manage your property listings.
• Route buyer inquiries to the appropriate seller.
• Send transactional notifications (inquiry alerts, listing status updates) via email and/or WhatsApp.
• Enforce our lead quota system and manage seller subscription features.
• Improve the platform through aggregated, anonymised usage analytics.
• Comply with applicable legal obligations in India.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

When you submit an inquiry on a property listing or project page, your contact details (name, phone number, and optionally email) are shared exclusively with the specific seller who posted that listing. This sharing is limited to:

• The individual seller (owner, agent, or builder) for that specific property.
• NammaNest administrators, for moderation and dispute resolution purposes.

Your inquiry data is never shared with other sellers, advertisers, data brokers, or any external parties for commercial purposes.

Buyers consent to this sharing by submitting the inquiry form and agreeing to the Terms & Conditions. Sellers are contractually prohibited from using your contact details for any purpose other than responding to your specific inquiry.

We use the following types of cookies:

• __session (HttpOnly): A secure, server-set cookie that maintains your authenticated session for 5 days. This cookie is essential for platform functionality and cannot be disabled.
• Google Analytics 4 (GA4): We use GA4 to collect anonymised usage data including page views, session duration, referral sources, and general device information. GA4 data is processed by Google in accordance with their Privacy Policy. No personally identifiable information (PII) is transmitted to GA4.

You can opt out of GA4 tracking using browser extensions such as the Google Analytics Opt-out Browser Add-on.

We retain your data for as long as your account is active and as necessary to:

• Provide our services and maintain platform integrity.
• Comply with legal obligations (tax records, dispute resolution).
• Enforce our Terms of Use.

Inquiry data is retained for up to 2 years from submission to support dispute resolution and audit purposes. Listing data is archived (not deleted) when a listing expires or is removed, and is retained for up to 3 years.

If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law or legitimate business interest.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete your account and associated personal data (subject to legal retention requirements).
• Object to processing of your data for certain purposes.
• Withdraw consent where processing is based on your consent (this does not affect the lawfulness of prior processing).

To exercise any of these rights, please contact us at Click to reveal email. We will respond within 30 days.

We implement industry-standard security measures to protect your personal data, including:

• HTTPS encryption for all data in transit (TLS 1.2+).
• Firebase Authentication with server-side session cookies (HttpOnly, Secure, SameSite) for account access.
• Firestore security rules that restrict data access to authorised users only.
• Phone-number-only login (OTP) — no passwords that can be compromised.
• Seller phone numbers are masked in public-facing inquiry flows.

While we take reasonable precautions, no data transmission over the internet is completely secure. We cannot guarantee the absolute security of information you transmit to us.

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you as required by applicable law.

For privacy-related queries, data access requests, or concerns, please contact:

NammaNest Technologies
Bengaluru, Karnataka, India
Click to reveal email

We aim to respond to all privacy-related enquiries within 30 business days.