How We Handle
Your Data

Personal Data We Collect

Data you give us directly

Data collected automatically

• Browser type, operating system, device type (via standard server logs)
• Pages visited, time spent, referrer URL (anonymous analytics)
• IP address (retained for 30 days, then anonymized)
• LocalStorage preferences: dark/light theme, language choice (stored on your device only)

Data we do NOT collect

• We do not collect Aadhaar, PAN, passport, or any government ID numbers
• We do not collect payment card or bank account details
• We do not use fingerprinting, invasive tracking, or cross-site ad tracking
• We do not access your device camera, microphone, or contacts

How We Use Your Data

1. To process and respond to property enquiries — matching your requirements with available listings and coordinating site visits via our team.
2. To send OTP authentication — when property owners log in via phone number, we send a one-time password via WhatsApp. OTPs expire in 5 minutes and are never stored after use.
3. To notify you of matching listings — if you submit a tenant requirement, we may send relevant listing updates via WhatsApp or phone call.
4. To manage the Owner Dashboard — owners who list properties can view their listing status, enquiry counts, and update property details after OTP login.
5. To improve our services — anonymized, aggregated usage data helps us understand which features and listing types are most useful.
6. To respond to contact and support queries — messages sent via the contact form or email are used solely to respond to you.
7. For legal compliance — we may retain certain records as required by Indian law, including GST-related transaction records for invoiced services.

Data Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

Property Owner Privacy Protections

We take the privacy of property owners very seriously. The following is our public disclosure policy — permanently enforced on all public-facing pages:

All enquiries from prospective tenants or buyers are routed through Orbit Housing. We never provide an owner's direct contact to a third party without the owner's explicit consent. Our brokerage model means we are the communication intermediary at all stages until a booking is confirmed.

WhatsApp & OTP Communications

Orbit Housing uses WhatsApp as a primary communication channel. By submitting your phone number on our platform, you consent to receiving the following types of messages on WhatsApp:

• One-time passwords (OTP) for owner login — expires in 5 minutes
• Confirmation messages when your property listing or tenant requirement is received
• Enquiry routing notifications to our field team (internal)
• Property match alerts if you submitted a tenant requirement (opt-out available at any time)

We do not use WhatsApp for unsolicited marketing. We do not add your number to broadcast lists without your explicit consent.

Cookies & Local Storage

Our website uses minimal, functional-only cookies and browser local storage. We do not use advertising cookies, third-party tracking pixels, or analytics cookies that identify individual users.

You can clear all local storage and cookies at any time through your browser settings. Doing so will log you out of the Owner Dashboard and reset theme/language preferences, but will not affect your listings or data on our servers.

Data Retention

• Enquiry form data — retained for 12 months from submission date, then deleted unless an active transaction is ongoing
• Owner listing data — retained for the duration of the active listing + 6 months after delisting
• OTP records — OTPs are deleted immediately after use or after 5-minute expiry; never retained
• WhatsApp message logs — retained for 6 months for dispute resolution purposes
• Server access logs (IP address) — anonymized after 30 days
• Job applications — retained for 12 months; deleted unless shortlisted
• GST-invoiced transaction records — retained for 7 years as required by Indian tax law

Your Rights Under DPDP Act 2023

Under India's Digital Personal Data Protection Act 2023 ("DPDP Act"), you have the following rights regarding your personal data:

1. Right to Access — Request a copy of all personal data we hold about you
2. Right to Correction — Request correction of inaccurate or incomplete data
3. Right to Erasure — Request deletion of your personal data (subject to legal retention requirements)
4. Right to Withdraw Consent — Withdraw consent for processing at any time; this will not affect prior lawful processing
5. Right to Nominate — Nominate another person to exercise your rights on your behalf in case of incapacity
6. Right to Grievance Redressal — Lodge a complaint with our Data Protection Officer and escalate to the Data Protection Board of India if unresolved

Security Measures

We implement reasonable technical and organizational measures to protect your personal data:

• All data transmitted between your browser and our servers is encrypted via HTTPS (TLS 1.3)
• The Admin Panel is protected by Cloudflare Access — only authorized Orbit email accounts can log in
• Owner data (phones, exact addresses) is stored separately from public listing data
• OTPs are time-limited (5 minutes) and single-use; never stored after use
• No raw owner contact details are accessible from public-facing pages at any time

Minors (Under 18)

Our services are intended for adults (18 years and above). We do not knowingly collect personal data from individuals under 18 years of age. Property listings, rental agreements, and financial transactions conducted through Orbit Housing require the user to be a legal adult.

If you believe a minor has submitted personal data through our platform, please contact us immediately at contact@orbithousing.in and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or best practices. When we make material changes:

• The "Last updated" date at the top of this page will be revised
• Registered users and active property owners will be notified via WhatsApp
• Continued use of our services after the effective date constitutes acceptance of the revised policy

Contact Our Data Protection Officer

For all privacy-related queries, data rights requests, or complaints, please contact:

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once it is constituted under the DPDP Act 2023.