Privacy Policy

1. What we collect

Account details (name, phone, email), identity and KYC/KYB documents submitted for verification, property and transaction data you enter or that is generated as you use the platform (listings, leads, site visits, loan applications, documents), and technical/usage data (device, approximate location when you grant it, and anonymous product-usage events).

2. Why we collect it

To operate the marketplace and workflow tools (matching buyers with brokers and builders, running verification checks, processing loan and insurance applications, escrow tracking), to communicate with you about your transactions, and to improve the product. This is a simulated identity-verification pass, not a government KYC/Aadhaar/PAN verification. It reflects a Tier 1 baseline check only — see the verification tier explanations below for what each tier confirms.

3. Consent

You may grant or withdraw consent for each purpose separately at any time. Withdrawing consent does not affect processing already carried out lawfully before withdrawal.

Withdrawing a consent takes effect immediately — SitesNSign stops using it for that purpose and channel from this moment on. It does not undo actions already taken while the consent was active.

4. Sharing with third parties

We share data with a lender, credit bureau, insurer, or document-sharing partner only where you have given consent for that specific purpose — for example, a bureau pull for a loan application, or sharing a document with a bank for disbursement. If your data was shared with a third party (a lender, a credit bureau, a document-sharing partner) while a consent was active, that sharing event stays on record even after you withdraw — see the downstream-sharing log below.

5. Your rights and how to exercise them

Access, correction, erasure and grievance requests are reviewed by our data protection team. Some information may be retained where required by law (e.g. transaction, tax or dispute records) even after an erasure request.

Access, correction and erasure requests can be raised from your account's Privacy & Consent page once signed in, or by writing to privacy@sitesnsign.com if you are not able to sign in.

6. Retention

Personal data is retained only as long as needed for the purpose it was collected for, or as required by law — for example, transaction, tax and dispute-related records may be retained even after an erasure request, as described above.

7. Breach notification

Confirmed personal-data breaches are reported to the Data Protection Board and affected users within 72 hours of discovery, as required under the DPDP Act 2023.

8. Grievance officer

For complaints about how your personal data has been handled, contact our Grievance Officer at grievance-officer@sitesnsign.com. See Grievance Redressal for full escalation timelines.

9. Changes to this policy

This policy may be updated as the platform evolves. Material changes will be reflected on this page.