Written to be read, not survived. If anything here is unclear, email privacy@byebyebroker.com and we’ll explain it in plain language.
ByeByeBroker Realty Private Limited, SCO 24, Sector 82, Mohali, Punjab 160055. CIN U68200PB2026PTC059412. We are the Data Fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023.
You give us: name, mobile number, email, city, budget, configuration preference, buying timeline, and whether you need a home loan. If you apply for finance through us: employment type, income band, and the documents the lender requires.
We record automatically: a hashed version of your IP address, your browser type, which pages you viewed, and the time of your consent. We hash the IP rather than storing it, because a raw IP address is personal data.
Referrals: if someone refers you, we receive your name and mobile number from them. We will tell you who referred you on our first contact, and you can ask us to delete your details immediately.
We do not collect your PAN, Aadhaar, bank statements or salary slips through this website. Those go directly to the lender through their own secure channel when you formally apply.
We do not use your data for anything else. We do not sell it. We do not share it with insurance companies, credit card sellers or anyone else who might find your number valuable.
We ask separately for each thing. Agreeing to a property callback does not mean agreeing to home loan marketing. Ticking a box for WhatsApp does not mean agreeing to email.
We keep a record of what you agreed to and when, including the version of this policy in force at that moment. That record exists so you can hold us to it.
Withdrawing is as easy as giving. Reply STOP to any WhatsApp or SMS, click unsubscribe in any email, or write to privacy@byebyebroker.com. We act within 72 hours and we do not ask you to explain yourself.
That’s the complete list. Your data stays on servers located in India.
If you become a customer, seven years after your transaction completes — required for tax and RERA records.
If you don’t, twenty-four months after your last meaningful contact with us. After that we delete or anonymise your personal data and keep only aggregate numbers that cannot identify you.
Under the DPDP Act you can ask us to:
Email privacy@byebyebroker.com. We verify it’s really you by sending a code to your registered mobile, then respond within 30 days. There’s no charge.
Your mobile number and email are encrypted in our database using AES-256. Our own staff see a masked version — 98****45 — in day-to-day work, and every time someone opens your full record, that access is logged with their name and the time.
Everything travels over TLS. Access is restricted by role. We run rate limiting and monitoring against scraping.
If a breach occurs that puts you at risk, we notify you and the Data Protection Board as the law requires. We won’t quietly hope you don’t notice.
Data Protection Officer: Amrita Sharma, privacy@byebyebroker.com, SCO 24, Sector 82, Mohali, Punjab 160055.
If you’re not satisfied with our response, you may complain to the Data Protection Board of India.
This is a demonstration build. Have this policy reviewed by a lawyer qualified in Indian data protection law before it goes live.