Privacy Policy

1. Scope

This policy covers personal data processed when you visit landeo.in, create an account, use the app, or open a property page a firm shared with you. It is written to satisfy India's Digital Personal Data Protection Act, 2023 (DPDP) and, for visitors from the European Union, the GDPR. The separate DPDP and GDPR notices give the region-specific detail.

2. What we collect

Directly from you:

• account details: name, mobile number, email address, firm name, city, state, RERA number if you provide one
• content you add: properties, owner and buyer details, leads, documents, photos, invoices, notes
• buyer portal details: name and mobile number when you save favourites or request a visit
• support messages you send us

3. Collected automatically

• server logs: IP address, timestamps, pages requested, needed for security and debugging
• session cookies: a signed-in session token only; we do not run advertising trackers or third-party analytics cookies

4. Why we process it

• to provide the service you signed up for (contractual necessity)
• to send one-time sign-in codes by SMS (contractual necessity)
• to process subscription payments through our payment partner (contractual necessity)
• to secure the platform, including malware scanning of uploads and rate limiting (legitimate interest / security obligation)
• to meet tax and accounting obligations on invoices (legal obligation)

5. Sharing

We do not sell personal data. We share it only with processors needed to run the service: our hosting provider, our SMS delivery provider for sign-in codes, and our payment gateway for billing. Content you place in a share link or public firm page is visible to whoever has that link, controlled by you. We disclose data to authorities only when legally required, and we tell you when the law allows it.

6. Retention

Account and workspace data is kept while the account is active. After account deletion, live data is removed within 30 days and encrypted backups expire on their normal 14-day cycle. Invoice records are retained as long as Indian tax law requires. One-time codes expire in minutes and are stored only as hashes.

7. Security

Data is encrypted in transit, passwords and codes are stored only as strong hashes, every firm's data is isolated at the database level with row-level security, uploads are scanned for malware, and privileged platform actions are recorded in an audit log.

8. Your rights

You can access, correct or export your data from within the app, and you can ask us to delete your account and workspace. Region-specific rights are described in the DPDP and GDPR notices. For any request, write to support@landeo.in; we respond within the timelines those laws set.

9. Children

Landeo is a business tool and is not directed at children. We do not knowingly process children's data.

10. Changes and contact

We will post any material change to this policy here and, for significant changes, notify account owners in the app. Contact for privacy matters: support@landeo.in.