Privacy Policy

1. Introduction & Overview

BrokerOS Technologies ("we", "us", "BrokerOS") values your privacy and is committed to protecting personal data. This Privacy Policy details how personal data is collected, processed, stored, and erased in accordance with the Digital Personal Data Protection Act (DPDPA), 2023 and the Information Technology Act, 2000 of India.

2. Data We Collect

We process personal data in two capacities:

• Account User Data: Names, email addresses, phone numbers, and workspace roles of broker agency owners, managers, team leaders, and executives.
• Lead & Customer Data (Data Processor Role): Names, phone numbers, email addresses, property locality preferences, budget ranges, buying motivations, and site visit logs ingested via Meta Lead Ads webhooks, landing pages, or manual broker input.

3. Purpose of Processing

Personal data is processed strictly for legitimate operational purposes:

• Routing and attributing inbound ad leads to assigned sales executives.
• Scheduling site visits, follow-up buffers, and managing deal pipelines.
• Authenticating users and enforcing role-based permissions (Row Level Security).
• Generating workspace performance reports and managing subscription billing.

4. Data Retention & Workspace Deletion (Cascading Purge)

In strict accordance with DPDPA 2023 Section 12 (Data Minimization & Erasure):

• Active workspace data is retained only for the duration of the organization subscription.
• Complete Workspace Erasure: When an organization workspace is deleted or terminated, all associated leads, site visit records, project inventories, deal records, and webhook logs are permanently purged from database servers via cascading deletion.

5. Data Security & Storage

BrokerOS employs industry-standard security safeguards, including TLS 1.3 encryption in transit, row-level security (RLS) policies at the database layer, HMAC signature verification for external webhooks, and secure authentication tokens. Data is stored on secure cloud database infrastructure.

6. Your Data Principal Rights (DPDPA 2023)

Under Indian privacy law, Data Principals have the right to:

• Access a summary of personal data being processed.
• Request correction, completion, or updating of inaccurate personal data.
• Withdraw consent for data processing at any time.
• Nominate an individual to exercise rights in the event of incapacity.

7. Grievance Officer Contact

In accordance with DPDPA 2023 and IT Rules 2021, if you have questions, concerns, or data erasure requests, contact our designated Grievance Officer: