Privacy Policy

1. Scope

This Privacy Policy explains how allbutall.com collects, uses, stores, discloses and protects personal data when you visit or use our property-search, listing, account and communication services. It applies to visitors, registered users, property owners, agents and people who contact us.

2. Data we collect

Depending on your use, we may collect:

• Account data: name, email, mobile number, password hash, verification and account status, and login timestamps.
• Verification and security data: OTP records, verification attempts, password-reset events, authentication logs and security notifications. We do not store plain-text passwords.
• Property data: title, description, type, price, measurements, availability, address and location, pincode, amenities, photographs, listing role and moderation history.
• Activity data: listings, edits, shortlists, contact-detail views, photo requests, reports and contact-form enquiries.
• Technical and analytics data: session identifier, page path, referrer, browser and device category, user agent, timestamps and IP information. Visitor analytics generally use a hashed IP identifier; restricted administrators may access raw IP information where available for security, abuse investigation or legal compliance.
• Communications: support messages and email or SMS delivery status.

3. How we collect data

We collect data directly from you, automatically from your browser or device, from activity on the Platform, and from service providers supporting hosting, security, analytics, email or SMS. Information entered into a public listing is collected for publication after moderation.

4. Why we use personal data

We use personal data to:

• create, authenticate, verify and protect accounts;
• accept, review, publish, update and moderate listings and photographs;
• provide search, shortlist, contact-detail, photo-request, reporting and support features;
• enforce contact-view limits and prevent spam, fraud, misuse and unauthorized access;
• send OTPs, verification, password, listing-status and service communications;
• measure sessions and page performance, diagnose errors and improve usability;
• administer advertising and project features where enabled;
• comply with law, lawful requests, disputes and record-keeping obligations.

We process data with consent where required, to provide requested services, for legitimate security and operational purposes, and to comply with law.

5. Public listing information

Approved listings may be visible to anyone and indexed by search engines. Titles, property details, general location, photographs, amenities, availability and selected poster information may become public. Contact details are revealed only through Platform controls where enabled.

Do not place passwords, OTPs, financial credentials, government identifiers or unnecessary personal information in publicly visible listing content.

6. Cookies and sessions

We use essential cookies or similar browser storage to maintain login sessions, protect forms, remember necessary state and count one visitor per browser session. Disabling essential cookies may prevent features from working.

With your permission, we may also load optional analytics technologies such as Google Analytics to understand page usage and performance. You can accept or reject optional analytics from the cookie banner and change that choice later using Cookie Settings in the footer.

7. Communications

We may send transactional email or SMS for verification, OTP login, password resets and changes, listing submission, approval or rejection, photograph moderation and requests, security and support. Marketing communications, if introduced, will provide applicable choices.

8. When we disclose data

We may disclose data:

• to another user when you intentionally request or provide property contact details;
• to hosting, database, email, SMS, security and other processors acting on our instructions;
• to administrators, reviewers and support personnel who need access for their role;
• to advisers or authorities when required by law, legal process, safety, fraud prevention or enforcement of rights;
• in a merger, restructuring or transfer of the Platform, subject to appropriate safeguards.

We do not sell personal data as a standalone product.

9. Advertising and external links

The Platform may display sponsored content and links. We may record impressions or clicks and use contextual property information to select eligible campaigns. External sites and advertisers control their own privacy practices.

10. Retention

We retain data only as long as reasonably necessary for active accounts and listings, moderation, security, fraud prevention, backups, disputes and legal obligations. OTP and reset records are retained for shorter operational periods. Deleted content may remain temporarily in backups or be preserved for a complaint, investigation or legal obligation.

11. Security

We use reasonable administrative and technical controls, including password hashing, access restrictions, sessions, verification, audit logging and moderated publication. No internet service is completely secure. Keep your credentials confidential and use a secure device and connection.

12. Your choices and rights under DPDP Act (India)

In accordance with the Digital Personal Data Protection Act (DPDP Act, 2023) of India and applicable regulations, you have the following rights regarding your personal digital data:

• Right to Access: You may request a summary of the personal data being processed by us and the processing activities undertaken.
• Right to Correction & Erasure: You can request correction of inaccurate or misleading personal data, completion of incomplete data, and erasure of personal data that is no longer necessary for the specified purpose for which it was processed.
• Right of Grievance Redressal: You have the right to readily available grievance redressal in respect of any act or omission regarding personal data obligations.
• Right to Nominate: You have the right to nominate another individual who shall, in the event of death or incapacity, exercise your data rights.
• Right to Withdraw Consent: Where processing is based on consent (such as property marketing alerts or subscriptions), you may withdraw consent easily at any time.

13. Children

The Platform is intended for adults. We do not knowingly permit anyone under 18 to create property listings or transact through the Platform. Contact us if you believe a child has provided personal data.

14. Data location and transfers

Providers may process or store data in India or other jurisdictions where they operate. Where cross-border processing occurs, we take reasonable steps to use providers and arrangements consistent with applicable requirements.

15. Automated processing

Rules may automatically apply access limits, eligibility filters, error detection, display order, recommendations or advertisement selection. Final moderation and account actions may involve administrator review. We do not currently use solely automated processing to make legal or similarly significant decisions.

16. Policy changes

We may update this Policy when services, providers or legal requirements change. The revised Policy will be posted here with a new effective date, and material changes will be communicated where reasonably required.

17. Data Protection & Grievance Redressal Officer

Pursuant to India's Digital Personal Data Protection Act, we have designated a Grievance Officer to address any privacy inquiries, consent withdrawals, or data rights requests. You may reach out to: