Privacy Policy
Effective date: 20 September 2026
1. Scope
This Privacy Policy explains how allbutall.com collects, uses, stores, discloses and protects personal data when you visit or use our property-search, listing, account and communication services. It applies to visitors, registered users, property owners, agents and people who contact us.
2. Data we collect
Depending on your use, we may collect:
- Account data: name, email, mobile number, password hash, verification and account status, and login timestamps.
- Verification and security data: OTP records, verification attempts, password-reset events, authentication logs and security notifications. We do not store plain-text passwords.
- Property data: title, description, type, price, measurements, availability, address and location, pincode, amenities, photographs, listing role and moderation history.
- Activity data: listings, edits, shortlists, contact-detail views, photo requests, reports and contact-form enquiries.
- Technical and analytics data: session identifier, page path, referrer, browser and device category, user agent, timestamps and IP information. Visitor analytics generally use a hashed IP identifier; restricted administrators may access raw IP information where available for security, abuse investigation or legal compliance.
- Communications: support messages and email or SMS delivery status.
3. How we collect data
We collect data directly from you, automatically from your browser or device, from activity on the Platform, and from service providers supporting hosting, security, analytics, email or SMS. Information entered into a public listing is collected for publication after moderation.
4. Why we use personal data
We use personal data to:
- create, authenticate, verify and protect accounts;
- accept, review, publish, update and moderate listings and photographs;
- provide search, shortlist, contact-detail, photo-request, reporting and support features;
- enforce contact-view limits and prevent spam, fraud, misuse and unauthorized access;
- send OTPs, verification, password, listing-status and service communications;
- measure sessions and page performance, diagnose errors and improve usability;
- administer advertising and project features where enabled;
- comply with law, lawful requests, disputes and record-keeping obligations.
We process data with consent where required, to provide requested services, for legitimate security and operational purposes, and to comply with law.
5. Public listing information
Approved listings may be visible to anyone and indexed by search engines. Titles, property details, general location, photographs, amenities, availability and selected poster information may become public. Contact details are revealed only through Platform controls where enabled.
Do not place passwords, OTPs, financial credentials, government identifiers or unnecessary personal information in publicly visible listing content.
6. Cookies and sessions
We use essential cookies or similar browser storage to maintain login sessions, protect forms, remember necessary state and count one visitor per browser session. Disabling essential cookies may prevent features from working. We may use limited analytics information to understand page usage and performance.
7. Communications
We may send transactional email or SMS for verification, OTP login, password resets and changes, listing submission, approval or rejection, photograph moderation and requests, security and support. Marketing communications, if introduced, will provide applicable choices.
8. When we disclose data
We may disclose data:
- to another user when you intentionally request or provide property contact details;
- to hosting, database, email, SMS, security and other processors acting on our instructions;
- to administrators, reviewers and support personnel who need access for their role;
- to advisers or authorities when required by law, legal process, safety, fraud prevention or enforcement of rights;
- in a merger, restructuring or transfer of the Platform, subject to appropriate safeguards.
We do not sell personal data as a standalone product.
9. Advertising and external links
The Platform may display sponsored content and links. We may record impressions or clicks and use contextual property information to select eligible campaigns. External sites and advertisers control their own privacy practices.
10. Retention
We retain data only as long as reasonably necessary for active accounts and listings, moderation, security, fraud prevention, backups, disputes and legal obligations. OTP and reset records are retained for shorter operational periods. Deleted content may remain temporarily in backups or be preserved for a complaint, investigation or legal obligation.
11. Security
We use reasonable administrative and technical controls, including password hashing, access restrictions, sessions, verification, audit logging and moderated publication. No internet service is completely secure. Keep your credentials confidential and use a secure device and connection.
12. Your choices and rights
Subject to applicable law and identity verification, you may request access to information about your personal data, correction, deletion where retention is no longer required, withdrawal of consent, or grievance redressal. Supported profile and listing data can be updated through your account.
Withdrawal or deletion may prevent some services and does not affect processing already lawfully completed. We may retain information for security, legal claims or statutory obligations.
13. Children
The Platform is intended for adults. We do not knowingly permit anyone under 18 to create property listings or transact through the Platform. Contact us if you believe a child has provided personal data.
14. Data location and transfers
Providers may process or store data in India or other jurisdictions where they operate. Where cross-border processing occurs, we take reasonable steps to use providers and arrangements consistent with applicable requirements.
15. Automated processing
Rules may automatically apply access limits, eligibility filters, error detection, display order, recommendations or advertisement selection. Final moderation and account actions may involve administrator review. We do not currently use solely automated processing to make legal or similarly significant decisions.
16. Policy changes
We may update this Policy when services, providers or legal requirements change. The revised Policy will be posted here with a new effective date, and material changes will be communicated where reasonably required.
17. Privacy and grievance contact
For privacy questions, correction or deletion requests, or grievances, email support@allbutall.com or use our Contact Us page. Include enough information to identify your account and request, but never send your password or OTP. We may verify identity before acting.