Privacy Policy

Rooflane Realty ("Rooflane", "we", "us", "our") operates an exclusive real-estate marketplace for Mumbai and Thane at https://rooflanerealty.com. We act as an intermediary that connects prospective buyers with RERA-registered developers and agents; we are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP) in respect of the personal data described below.

This Privacy Policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have. It applies to our website and related services. If you do not agree with it, please do not use our services.

Information you provide: your name, email address, phone number, and the contents of any enquiry, message, or property preference you submit through our lead-capture, contact/enquiry, appointment-booking and registration forms; and, if you register, your account credentials and profile details.

Business information (developers/partners): company name, MahaRERA registration number, RERA agent id, and agency name.

Buyer information submitted by channel partners: where a channel partner refers you, we receive your name and contact details from them (they confirm they have your consent to do so).

Chat content: if you use our AI assistant, the messages you type are processed to generate responses (see Section 6).

Information collected automatically: your IP address, device and browser characteristics, pages viewed and actions taken, and marketing-attribution parameters (UTM tags and click identifiers such as fbclid). Some of this is collected via cookies and similar technologies - see our Cookie Policy at https://rooflanerealty.com/cookies.

We do not intentionally collect "sensitive personal data" (such as financial account details, health, or biometric data). Please do not submit such information through our forms or the chat.

To respond to your enquiries, arrange and confirm site visits, and connect you with the relevant RERA-registered developer or agent for a project you are interested in.

To create and manage your account, provide customer support, and operate our CRM and sales workflow.

To send you service messages about your enquiries and appointments, and - only where you have consented - marketing communications about new launches and offers.

To verify developer/partner credentials (including RERA), maintain security, prevent fraud and abuse, measure and improve our services, and comply with law.

Where you voluntarily submit an enquiry or book a visit, we process your data on the basis that it is necessary to provide the service you have requested (including the "certain legitimate uses" basis under DPDP s.7).

Marketing communications, advertising/analytics cookies, and the sharing of your data for those purposes are based on your consent (DPDP s.6), which you may withdraw at any time (see Section 9).

Where we are required to retain or disclose data by law or a valid legal request, we rely on that legal obligation.

Because Rooflane is an intermediary, when you submit an enquiry about a project we share your name, contact details and enquiry information with the relevant RERA-registered developer or agent so they can respond to you and assist with your enquiry. That developer/agent is an independent controller of the data once they receive it, and their own use of it is governed by their privacy practices.

We offer an optional AI chat assistant powered by OpenAI (model GPT-4o mini). When you use it, the messages you type - and the context of the page you are viewing - are sent to OpenAI to generate a response. Data sent through the OpenAI API is not used to train their models.

Using the assistant is entirely optional. If you would rather not have your messages processed this way, simply do not use the chat - you can reach us by phone, email, or the contact form instead. Please do not enter sensitive personal information into the chat.

We use trusted service providers (processors) who process personal data on our behalf under contract, and only as needed to provide their service: Supabase (database, authentication and storage), Vercel (website hosting and analytics), Cloudflare (security and content delivery), Resend (transactional and marketing email), Google (Tag Manager and Analytics; Google Workspace Gmail/Calendar for our sales workflow; Google Maps), Meta (advertising Pixel and Conversions API - only where you consent to marketing), OpenAI (the AI assistant), Sentry (error monitoring, with personal data scrubbed), and SurePass (RERA/KYC verification).

We may also disclose personal data where required to comply with law, enforce our terms, protect our rights or safety, or in connection with a merger, acquisition or sale of assets.

Some of our service providers store or process data outside India (for example, in the United States). Where we transfer personal data abroad we do so in accordance with DPDP s.16 and applicable restrictions, and require appropriate safeguards from those providers.

We keep personal data only as long as necessary for the purposes above or as required by law. Indicative periods: unconverted/lost leads are anonymised after 18 months of inactivity; closed enquiries are deleted after 12 months; IP addresses in our audit log are removed after 90 days. Active enquiries are retained while the relationship is ongoing.

Records we must keep as legal evidence - such as your consent records and grievances - are retained for the applicable limitation period.

Subject to applicable law, you have the right to: access the personal data we hold about you and a summary of how we process it; have inaccurate or incomplete data corrected, completed or updated; request erasure of your personal data; nominate another person to exercise your rights in the event of death or incapacity; and grievance redressal (DPDP ss.11–14).

You can exercise these rights yourself: registered users can export or delete their data at https://rooflanerealty.com/dashboard/profile, and anyone can make a request via https://rooflanerealty.com/grievance or by emailing [email protected]. We will respond in accordance with applicable law.

Where we rely on your consent, you can withdraw it at any time - this will not affect processing already carried out. You can unsubscribe from marketing emails using the one-click link in every such email, or by contacting us. You can change or withdraw cookie consent any time via "Cookie Preferences" in the footer.

We use necessary cookies to run the site and, with your consent, analytics and marketing cookies and tags. This includes a first-party attribution cookie (_rl_utm, 30-day lifetime). Non-essential cookies and tags (Google Tag Manager, Vercel Analytics, Meta Pixel) load only after you consent, and we operate Google Consent Mode. Full details and controls are in our Cookie Policy at https://rooflanerealty.com/cookies.

Our services are intended for adults (18 years and older). We do not knowingly collect personal data from children under 18 without verifiable parental/guardian consent (DPDP s.9). If you believe a child has provided us data, contact [email protected] and we will delete it.

We maintain reasonable technical and organisational security measures (SPDI Rules 2011 r.8; DPDP Rules 2025), including row-level access controls on our database, encryption in transit, restricted service-role access, and scrubbing of personal data from our error-monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users without undue delay and within the timelines required under the DPDP Act 2023 and the DPDP Rules 2025 (which specify notification within 72 hours of becoming aware, extendable only as permitted).

For any question, concern, or complaint about your personal data, or to exercise your rights, contact our Grievance Officer / Data Protection Officer using the details below. We acknowledge complaints within 24 hours and aim to resolve them within 15 days, in line with IT Rules 2021 and DPDP s.13.

We may update this policy from time to time. The version and effective date are shown at the top of the page, and we will notify you of material changes. Please review it periodically.