Legal

Privacy notice

Last updated: 30 Sep 2026.

Heads up: this is a working v1 notice, published so you can see what we collect before Doorzad takes real listings. The final wording is with the business and will replace this page. It is not reviewed legal copy — but everything it describes is what the app actually does today.

Who is responsible for your data

Growinture Technologies Pvt. Ltd., which operates Doorzad, is the Data Fiduciary for the personal data described here. Registered address: No. 572, 14th Main Road, MEI Layout, Near Shanthinikethana School, Bangalore 560073. Questions, requests and complaints go to support@growinture.com — see the grievance page for the officer's details.

What we collect

Your mobile number — this is how you sign in, and how a lister you enquire with can call you back.
Your name, and your email if you give one. The email is optional; we use it for receipts, invoices and notifications, and it is not a sign-in method.
What you post — listing details, photos, the locality and the asking price, for as long as the listing exists.
Enquiries you send, and listings you save. When you enquire, the lister is shown your name and mobile number — that is the point of an enquiry.
One verification document if you apply as an agent: a proof of workplace (shop & establishment licence, GST certificate, utility bill, office rent agreement, or a photo of the shopfront), plus an optional RERA certificate if you gave a RERA number.
Session records so you can see and sign out your own devices: the IP address, the browser and device the session came from, and when it was last used.
Notifications we have sent you in the app, and reports you file about a listing.

What we do not collect

No PAN. We do not ask for a PAN anywhere on Doorzad, and there is no column for one. We do not collect Aadhaar, bank details or card details from buyers or tenants, we do not track your location, and there is no advertising identifier.

Why we use it

To run your account and keep you signed in.
To publish your listings and show them to people searching.
To pass your enquiry to the lister, and their number to you when you ask for it.
To review listings and agent applications before they go live, and to act on reports.
To invoice a lister for Doorzad's share when they mark a deal closed (a legal obligation under GST once an invoice is issued).
To keep the platform safe — rate limits, abuse detection and a security audit trail.
To send you notifications about your own listings, leads and account.
To pass your name and number to a home-loan or rental-agreement partner — only when you tick the consent box on that offer, and to no one else.

Verification documents

The proof of workplace (and, if you add one, the RERA certificate) you upload to be verified is the evidence behind the badge other people rely on, so we keep it — privately. It is never shown to customers and has no public web address: only our staff can open it, one document at a time, and every time they do is logged. We keep it while your account is open, and delete it 180 days after you delete your account, or 180 days after an application is rejected (unless you resubmit). That is the period the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 ask us to keep registration information after an account is cancelled, so we can answer a lawful request from an authority. After that the file is gone; we keep only the note of which kind of proof was seen, who checked it and when.

Photos you upload

A photo taken on a phone usually carries hidden details — often the exact location it was taken at, the time and the phone model. We remove all of them from every photo and document the moment it is uploaded, before anyone else can see it, and we keep only the picture itself. So nobody can work out where a property is from its photos.

Cookies

Doorzad sets two first-party cookies and nothing else: ba_session, which keeps you signed in, and ba_csrf, which protects forms from being submitted by another site. There is no third-party analytics, no advertising and no cross-site tracking on Doorzad.

Who else sees it

The lister you contact sees your name and mobile number. Our own staff see what moderation, verification, support and invoicing need. Our SMS provider delivers the one-time code to your number, and our email provider delivers notifications and invoices to your address, each for that purpose only.

We do not sell or rent personal data to anyone, and we do not share it with advertisers or data brokers. We disclose data to an authority only where the law requires it.

Partners, and only if you ask us to. Doorzad offers to put you in touch with a home-loan partner or a rental-agreement partner. If — and only if — you tick the consent box on that offer, we pass your name and mobile number to that one partner so they can call you about it. Nothing else goes with it: not your email, not the properties you looked at, not your enquiries. We keep a record of the exact sentence you agreed to and when, so it can always be checked. It costs you nothing, the partner may pay us a referral fee, and we never pass your details to a partner without that tick — the box is never ticked for you, and declining changes nothing else about your account.

Where it is kept

Your data is in India. It is stored in a PostgreSQL database on this deployment's own server, and the photos and documents you upload are files on that same server's disk — not in a third-party object store today. Backups are taken and held by the operator of that server. Traffic between your browser and Doorzad is carried over HTTPS. We do not claim any certification beyond that.

How long we keep it

While your account is open. When you delete your account (Account → Delete account), your mobile number is released so it can be used again, your email is cleared, your listings are paused and removed from search, detail pages, saved lists and the sitemap, any pending agent application is closed, and every session is signed out. Records we must keep for accounting — an invoice for a deal that was closed, and the audit of staff decisions — are retained as the law requires. Verification documents are kept for 180 days after the account is deleted and then deleted, as described above.

Your rights under the DPDP Act 2023

Access and correct what we hold about you: Account → Name & email shows and edits it, Account → Mobile number changes your number, and your listings and enquiries are visible in the app.
Erase it — Account → Delete account, as described above.
Withdraw consent for anything that is not needed to run the account; withdrawing it for everything means deleting the account.
Nominate someone to exercise your rights if you cannot — write to the Grievance Officer and we will record it.
Complain. Write to our Grievance Officer first (details on the grievance page); we answer a data-subject request within 30 days, as the Act requires. If you are not satisfied, you may complain to the Data Protection Board of India.

Children

Doorzad is not meant for anyone under 18, and we do not knowingly collect a child's data. If you believe we have, tell the Grievance Officer and we will remove it.

Changes to this notice

If we change what we collect or why, we will update this page and the date at the top, and say so in the app when the change matters to you.