1. About this policy
This policy explains what personal data Ghosla collects when you use the website, the apps and the Ghosla WhatsApp number, why we use it and the choices you have. It is written with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in mind.
2. What we collect
- Account: your phone number, and any name, email, photo and profile details you add.
- Listings: what you post: address or location, rent, photos, videos, descriptions, reviews and ratings.
- Messages: chats on Ghosla, and messages, voice notes and photos you send to our WhatsApp number. Voice notes are turned into text.
- Contact views: which listings' contact details you viewed or unlocked and when, so the daily limit and free contacts work.
- Numbers you share: if you use the share form, the listing link, the number, the screenshot you upload and when you shared it.
- Referrals: your referral code, who joined with it, and whose code you used, so rewards go to the right people and misuse can be spotted.
- Device and usage: IP address, device and browser type, app version, pages and screens visited, searches and errors.
- Location: only if you allow it, to show listings near you.
3. Listings from other sources
Ghosla also shows listings collected from property websites and public social media posts. These can include a lister's name, photos or phone number as published at the source. We show contact details only to logged-in users, within daily limits. If a listing includes your details and you want it removed, write to ghoslaapp@gmail.com.
4. Why we use it
- to run Ghosla: log you in, show listings, connect renters with owners and tenants, and run the WhatsApp assistant;
- to keep Ghosla safe: daily contact limits, spotting brokers posing as owners, fake listings, scraping and fraud;
- to improve Ghosla: understand what people search for and fix problems;
- to send you messages you asked for, such as OTPs, replies about your listing and alerts. You can turn alerts off.
We use your data with your consent, which you give when you tick the box at login, and where the law otherwise allows, for example to prevent fraud or comply with a legal request.
5. Who we share it with
We do not sell your personal data. When you post a listing, the details you post are public, and your phone number is shown to logged-in users within daily limits. A number you share through the form is shown to other logged-in users with that listing, without your name or screenshot; screenshots are seen only by the Ghosla team. We also use service providers who handle data for us, under contract:
- Supabase (database, login and storage);
- Meta / WhatsApp (messages to our WhatsApp number);
- SMS providers that deliver login codes;
- AI model providers that read WhatsApp messages and voice notes to create listings, and that receive only what is needed;
- PostHog (product analytics and error tracking);
- Vercel and Cloudflare (hosting, storage and security checks);
- map providers (MapTiler, OpenStreetMap data).
We may share data if the law requires it, to protect people from harm or fraud, or as part of a merger or sale of Ghosla, in which case this policy continues to apply.
6. Where and how long we keep it
Data is stored with our providers, in India or other countries. We keep account data while your account is open. When you delete your account we delete or anonymise your personal data within 30 days, except what we must keep by law or to settle disputes, such as records of contact views, shared numbers, screenshots, referrals and reports, which we keep for up to one year. Listings that are taken down may be kept for up to one year for safety and records.
7. Your rights
You can ask to see, correct or delete your personal data, withdraw your consent, or nominate someone to act for you, by writing to ghoslaapp@gmail.com. You can delete your account from your profile in the app. Withdrawing consent means we can no longer provide parts of Ghosla that depend on it, such as your account and listings.
8. Security
We protect data with encryption in transit, access controls, row-level rules in our database and limits on how much data anyone can view. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
9. Cookies and similar storage
We use cookies and browser storage to keep you logged in, remember settings such as your city, protect against bots and measure usage. You can clear or block them in your browser, but some parts of Ghosla may stop working.
10. Children
Ghosla is for adults aged 18 and over. We do not knowingly collect data from children. If you think a child has given us data, write to us and we will delete it.
11. Changes to this policy
We will post changes here with a new date and, for important changes, tell you in the app or when you next log in.
12. Contact and grievances
Write to ghoslaapp@gmail.com with any question or complaint about your data. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.