1. Introduction
NxtSFT PropTech innovations ("NxtSft.com", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, or any related services (collectively, the "Platform").
This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and, where applicable, the Digital Personal Data Protection Act, 2023 ("DPDPA").
By using the Platform, you consent to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of the Platform immediately.
2. Information We Collect
We collect the following categories of personal data:
- Account registration data: name, email address, phone number, and password.
- Property listing information: address, property type, photographs, price, and description.
- Communication data: messages sent through our in-Platform messaging, contact forms, or support channels.
- Payment information: billing address and transaction reference numbers (we do not store card or banking credentials).
- Identity verification documents: where required for agent or developer onboarding.
- Usage data: pages viewed, search queries, features used, time spent, and click patterns.
- Device information: IP address, browser type, operating system, device identifiers.
- Location data: approximate location derived from IP address; precise location only with your explicit consent.
- Cookies and similar tracking technologies (see Section 6).
- Social login providers (Google, Facebook) when you choose to register using them.
- Property data aggregators and RERA portals for verification of listings.
- Analytics and advertising partners, subject to their own privacy policies.
3. How We Use Your Information
We use personal data for the following purposes:
- To create and manage your account and verify your identity.
- To display and facilitate property listings, searches, and transactions.
- To process payments and manage Credits on your account.
- To connect buyers, tenants, sellers, landlords, and agents through the Platform.
- To send transactional communications, including account alerts, booking confirmations, and receipts.
- To send promotional communications and property recommendations, where you have opted in.
- To analyse usage patterns and improve our services, features, and user experience.
- To detect, prevent, and investigate fraud, abuse, and security incidents.
- To comply with legal obligations, resolve disputes, and enforce our Terms of Use.
- To conduct research and develop new products and features.
6. Data Security
We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, encrypted storage of sensitive data, role-based access controls, and regular security audits.
While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that poses a risk to your rights, we will notify you and the appropriate authorities as required by law.
You are responsible for keeping your account credentials confidential. Report any suspected unauthorised access immediately to care@nxtsft.com.
7. Data Retention
We retain your personal data for as long as your account is active, as necessary to provide our services, or as required to comply with legal obligations, resolve disputes, and enforce agreements.
Account data is retained for a minimum period as required under applicable Indian law. Upon account closure, we will delete or anonymise your personal data within 90 days, except where retention is required by law or legitimate business necessity.
Transactional records and logs may be retained for up to 7 years for financial compliance purposes.
8. Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request erasure of your personal data, subject to legal retention obligations.
- Withdrawal of consent: Withdraw consent for processing based on consent, without affecting lawfulness of prior processing.
- Portability: Receive your personal data in a machine-readable format where technically feasible.
- Objection: Object to processing for direct marketing purposes at any time.
- Nomination: Under DPDPA, nominate a person to exercise rights on your behalf in the event of death or incapacity.
To exercise any of these rights, please contact our Grievance Officer (see Section 11). We will respond within 30 days. We may verify your identity before processing requests.
9. Children's Privacy
The Platform is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a person under 18, please contact us at care@nxtsft.com and we will promptly delete such data.
10. Cross-Border Data Transfers
Your personal data is primarily processed and stored on servers located within India. Where data is transferred to service providers outside India (e.g., for cloud hosting or analytics), we ensure appropriate safeguards are in place as required under applicable Indian data protection law, including contractual commitments that meet applicable legal standards.
11. Grievance Officer
In accordance with the Information Technology Act, 2000, and the SPDI Rules, 2011, we have appointed a Grievance Officer to address any complaints regarding data processing. You may reach our Grievance Officer at:
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, the Platform, or applicable law. When we make material changes, we will notify you by email (to your registered address) or through a prominent notice on the Platform at least 7 days before the changes take effect.
Your continued use of the Platform after the updated Policy takes effect constitutes acceptance of the revised Policy. We encourage you to review this page regularly.