Privacy Policy
Last updated: 11 February 2026
Introduction
Welcome to GrihaHomes. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our home finding platform.
By using GrihaHomes, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
This policy applies to all information collected through our website (grihahomes.com), mobile application, and any related services (collectively, the "Services"). All data is processed and stored in India.
Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you register on the platform, including:
- Name and contact information (phone number, email)
- Account credentials (encrypted password)
- Profile information (photo, preferences)
- Property listings (photos, descriptions, location)
- Aadhaar/ID proof (for agent and owner verification — securely stored)
- Communication with agents and other users through the platform
Usage Data
We automatically collect certain information when you use GrihaHomes, including:
- Device information (browser, OS, device type)
- IP address and approximate location
- Usage patterns (pages visited, search queries)
- Property viewing history and saved listings
- Session recordings and heatmaps (via Microsoft Clarity, anonymized)
Location Data
With your permission, we collect location data to provide location-based property search and to display properties near you. You can disable location access through your device settings.
AI Chat Data
When you use our AI-powered chat feature, your messages and search queries are processed by Anthropic's Claude AI to provide property recommendations and assistance. Chat data is used only for the purpose of serving your request and is not used to train AI models.
How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide property listing, search, and booking services
- Authentication: To verify user identity via OTP and manage secure sessions
- Verification: To verify agent credentials, property listings, and tenant backgrounds
- Communication: To facilitate communication between home seekers and verified agents
- Personalization: To customize your experience and provide relevant property recommendations
- Marketing: To promote listed properties on our social media channels (Instagram, Facebook)
- Analytics: To understand usage patterns and improve our services
- Security: To detect and prevent fraud, spam, and unauthorized access
- Legal Compliance: To comply with applicable Indian laws and regulations
Data Storage and Security
We implement industry-standard security measures to protect your personal information:
- Encryption: All sensitive data is encrypted in transit (HTTPS/SSL via Cloudflare) and at rest
- Authentication: JWT-based authentication with 15-minute access tokens and 7-day refresh tokens
- Password Hashing: Bcrypt password hashing with industry-standard salt rounds
- Rate Limiting: OTP limited to 5 per hour per phone, account lockout after 5 failed login attempts
- Access Controls: Role-based access controls (user, agent, admin)
Important Notice: While we implement robust security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.
Data Retention
We retain your personal data as follows:
- Active accounts: Data is retained for as long as your account is active
- Deleted accounts: All personal data is permanently deleted within 30 days of account deletion request
- Property listings: Remain active until removed by the owner or admin; permanently deleted upon account deletion
- OTP data: Automatically expires after 2 minutes; deleted from cache immediately after
- Analytics data: Anonymized and retained for service improvement
Third-Party Services
GrihaHomes integrates with the following third-party services that may process your data:
Firebase
Authentication, real-time database, and cloud functions.
Cloudinary
Image and video storage, optimization, and delivery for property listings.
GrowwSaas
OTP/SMS verification services for phone number authentication.
Google Analytics
User behavior tracking and analytics (anonymized).
Microsoft Clarity
Session recording and heatmaps for UX improvement (anonymized).
Anthropic Claude AI
AI-powered search, matching, and recommendations in the chat feature.
Data Sharing: We do not sell, trade, or rent your personal information to third parties. All third-party services comply with Indian data protection standards. Data shared with these services is limited to what is necessary for their specific function.
Your Privacy Rights
You have the following rights regarding your personal information:
- Access: Request a copy of your personal data we hold
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and associated data (processed within 30 days)
- Portability: Receive your data in a machine-readable format
- Opt-Out: Unsubscribe from marketing communications
- Withdraw Consent: Withdraw previously given consent at any time
How to Exercise Your Rights: To exercise any of these rights, please contact us at [email protected] or call +91 80738 24467. We will respond to your request within 30 days.
Children's Privacy
GrihaHomes is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will delete that information immediately.
Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date at the top
- Sending an email notification (if you have provided an email address)
We encourage you to review this Privacy Policy periodically. Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, please contact us: