Privacy & data

India Property Listing Services Private Limited decides why and how your personal data is processed on this site. Under the Digital Personal Data Protection Act, 2023 that makes us the Data Fiduciary, and you the Data Principal.

Questions about anything on this page go to info@edulease.in. That address is monitored by the person named at the foot of this document.

Almost all of it is what you type in yourself. We do not buy contact lists, and we do not take your details from anywhere but you.

We do not ask for, and ask you not to send, anything about your health, religion, caste, sexual life, political views or biometrics. None of it is needed to buy, sell or lease property.

Payment card and bank details are entered on Razorpay's own checkout. They never reach our servers and we never store them.

Section 4 of the DPDP Act allows processing for a lawful purpose, either with your consent or for a legitimate use. Each thing we do falls under one of these.

We do not sell your personal data. We do not share it with other agents or with anyone for their own marketing.

We use a small number of processors, each for one named function, each under contract, and none of them is permitted to use your data for its own purposes.

Beyond these, we share your details with the agent or owner handling the property you enquired about — that is the purpose of the enquiry — and with our professional advisers, or a government agency or court where the law requires it.

Some of these providers process data on servers outside India. Section 16 of the DPDP Act permits that except to a country the Central Government restricts, and we will stop any transfer that becomes restricted.

Replies in the assistant are generated by an AI model run by Anthropic. Your messages are sent to that model to produce the reply.

The assistant answers from our own published listings. It is not advice, it does not bind us, and it can be wrong — confirm anything that matters with a person.

Please do not type anything sensitive into it. If you want something removed from a conversation, ask us.

When you open the home page, our server looks up which city your internet address belongs to, in a database it keeps itself — no one else is asked. The answer decides which homes you see first and where the search starts. We store neither your address nor the answer. On mobile data the guess is often wrong; “Change city” fixes it, and choosing “Anywhere” turns it off.

“Near me” asks your browser for your position, and your browser asks you first. We round it to about a kilometre and use it for that one search; we do not store it. It does travel in the address of the results page, so sharing that link shares your rough location.

Section 8(7) of the DPDP Act requires us to erase your data once the purpose is served and no law requires us to keep it. The invoice row is the usual reason something survives a deletion request — we are not permitted to destroy it.

Sections 11 to 14 of the DPDP Act give you the following. Exercising any of them is free, and we will respond within 30 days.

• Access — a summary of what we hold about you and who we have shared it with.
• Correction — have anything inaccurate corrected, anything incomplete completed, and anything outdated updated.
• Erasure — have your data deleted where no law requires us to keep it.
• Withdraw consent — as easily as you gave it. We stop the processing that relied on it; what happened before stays lawful.
• Nominate — name someone to exercise these rights for you if you die or become incapable.
• Grievance — a route to complain before you go to the Data Protection Board.

Most of this you can do yourself in your account — correct your profile, change your contact preferences, or request erasure. Anything else, write to info@edulease.in.

When you request erasure we anonymise rather than shred: your name, phone and email are removed from your profile and your enquiries, and your listings are archived. What remains carries nothing that identifies you, except where a tax record must be preserved.

Section 15 of the Act puts three duties on you, and we are required to set them out.

• Do not impersonate anyone else when giving us your details.
• Do not suppress material information where the law requires it to be disclosed.
• Do not raise a false or frivolous grievance, and give authentic details when you ask for correction or erasure.

Section 8(5) requires reasonable security safeguards. Ours are these.

• Everything travels over HTTPS, and is encrypted at rest by our database provider.
• Row-level security in the database means one account cannot read another's records — it is enforced by the database itself, not only by our code.
• Privileged actions are written to an append-only audit record.
• Forms and the assistant are rate-limited, to blunt scraping and abuse.
• Access to production data is limited to people who need it to do their work.

If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board as section 8(6) requires.

This site is not for anyone under 18. We do not knowingly process a child's personal data, and we do not profile or advertise to children — section 9 forbids both.

If you believe a child has given us details, write to us and we will delete them.

If you are not signed in, this site sets no cookies at all. Signing in sets one, to keep you signed in. There is no advertising or analytics tracking here, which is why you are never asked to dismiss a banner. The cookie notice lists each one.

Write to the Grievance Officer named below, or use the grievance route. We acknowledge within 24 hours and resolve within 15 days.

If we do not resolve it, you may complain to the Data Protection Board of India under section 13(3) of the DPDP Act. You have to come to us first.

We will post any change here and move the date at the top. Where a change materially affects how we use data you have already given us, we will tell you directly and, where the law requires it, ask again for your consent.