Privacy Policy

WhyNotBroker is designed around minimal data collection. We collect only what is necessary to deliver a seamless property discovery experience. Here's exactly what we collect and why.

At Registration

• Full name — for your profile display and correspondence.
• Mobile number (+91) — used exclusively for OTP-based authentication. We do not collect email at registration.
• Timestamp of registration — stored for DPDPA audit compliance.

During Platform Use

• Property search queries, filters, and viewed listings — to personalise recommendations.
• Saved / shortlisted properties and PG listings.
• Enquiry messages sent to landlords, PG operators, and brokers.
• City and locality preference (never GPS coordinates without explicit permission).
• Device type, browser, and OS — for responsive design optimisation and fraud detection.
• Session logs and page navigation — aggregated, never tied to individual identity for analytics.

With Your Explicit Consent Only

• Financial profile for home loan referrals — collected only after you give DPDPA-compliant E-4 consent.
• Aadhaar / PAN — never collected by WhyNotBroker directly; handled exclusively by regulated lenders.
• Document uploads for broker or landlord verification.

Your data is used only for purposes you would reasonably expect when using a real estate platform. We do not use your data for advertising profiles or sell it to data brokers — ever.

• Match you to relevant buy, rent, PG, and flatmate listings based on your search history and stated preferences.
• Send OTP messages via SMS for authentication — no marketing SMS without your consent.
• Deliver service notifications: enquiry replies, listing status updates, rent due reminders.
• Personalise your dashboard, saved searches, and recently viewed properties.
• Facilitate DPDPA-compliant home loan referrals — only when you have given explicit, informed consent.
• Detect fraudulent listings, spam enquiries, and suspicious account activity.
• Generate aggregate, anonymised market trend reports (individual identity is never in these reports).
• Comply with legal obligations under Indian law, including RERA and IT Act.

WhyNotBroker does not sell your personal data. Sharing is strictly limited to what is required to provide the service you are actively requesting.

Shared When You Initiate Contact

• Landlords and PG operators — your name and phone number are shared only when you submit an enquiry.
• RERA-registered brokers — contact details shared only when you tap "Contact Broker".
• Co-living platforms and flatmate candidates — only the profile fields you choose to make visible.

Shared With Service Providers (Data Processors)

• Cloud infrastructure (AWS / GCP) — encrypted storage and compute; bound by data processing agreements.
• SMS / OTP gateway provider — receives only your phone number for OTP delivery; no other data.
• Aggregate analytics provider — receives pseudonymous session data only; no PII.
• Payment gateway — for Premium subscriptions; WhyNotBroker does not store card details.

Shared With Lending Partners (Consent-Gated)

Financial data for home loan referrals is shared only after you provide explicit, specific, informed DPDPA E-4 consent. You can withdraw this consent at any time from Loan Referral Consent Settings.

Shared When Required by Law

• Government authorities or courts — only pursuant to a valid legal order or statutory obligation.
• RERA dispute resolution — if required by a consumer grievance proceeding.

Under India's Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights as a Data Principal. These rights are enforceable and can be exercised at any time from your account settings.

To exercise any of the above rights, you may also write to our Grievance Officer (see Section 06) or email [email protected]. We will respond within 30 days of receipt of your request.

WhyNotBroker uses a minimal set of cookies. We do not use third-party advertising cookies or cross-site tracking pixels.

You can manage or disable non-essential cookies at any time through your browser settings. Disabling session cookies will prevent you from staying logged in.

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, 2021, WhyNotBroker has appointed a designated Grievance Officer to address privacy-related concerns.

If your grievance is not resolved to your satisfaction within 30 days, you may escalate to the Data Protection Board of India once established under DPDPA §18.

For any privacy-related queries not addressed in this policy, or to exercise your DPDPA rights, please reach out through any of the following channels.