Privacy Policy

1. Who we are

Madhyam360 is a broker-to-broker real-estate network operated by GenX Digital Solutions. For the personal data you share with us, we act as the "Data Fiduciary" and you are the "Data Principal" under the Digital Personal Data Protection Act, 2023.

2. The data we collect

• Account & identity: your name, mobile number, email, city, company and role, so we can create and secure your broker workspace.
• Professional details: RERA agent registration number, profile, photo, coverage areas and the listings you publish.
• Contacts & leads: the customer and enquiry details you choose to store in your workspace.
• Usage & device data: pages visited, actions taken, IP address, browser and cookies, to keep the service secure and improve it.
• Payment data: handled by our payment partner; we do not store full card or bank numbers on our servers.

3. Why we use it, and your consent

We collect only what a stated purpose needs: to run your workspace, connect you to the network, provide tools and the assistant, process payments, prevent misuse, and meet legal obligations.

We ask for your consent before collecting personal data and describe the purpose at the point of collection. Your consent is free, specific, informed and revocable. You can withdraw it at any time, after which we stop the related processing.

4. How network data is shared

Madhyam360 is a network, so information you choose to publish (your public profile, digital card and listings) is visible to other verified brokers and to visitors of the public portal. Your private workspace data (your contacts, leads and notes) is yours and is not shared with other brokers.

We do not sell your personal data. We share data with service providers (hosting, payments, analytics, communications) strictly to run the service, under confidentiality obligations.

5. Security

We apply reasonable security safeguards benchmarked to ISO/IEC 27001 practices: encryption in transit, access controls, audit logging and server-side storage. No system is perfectly secure, but we work to protect your data and to notify you and the Data Protection Board of a breach as the law requires.

6. How long we keep it, and erasure

We keep personal data only for as long as the purpose needs it or the law requires. When you withdraw consent or the purpose is served, we delete or anonymise your personal data, except where retention is legally required (for example, tax and transaction records).

7. Your rights

• Access: ask what personal data we hold about you.
• Correction: have inaccurate or incomplete data corrected or updated.
• Erasure: ask us to delete your personal data.
• Grievance redressal: raise a complaint and have it addressed within the statutory timeline.
• Nomination: nominate someone to exercise your rights if you are unable to.
• Withdraw consent: as easily as you gave it.

8. Grievance Officer

To exercise any right or raise a concern, contact our Grievance Officer through our contact page. We acknowledge grievances within 48 hours and resolve them within 90 days, or sooner where the law requires. If you are not satisfied, you may escalate to the Data Protection Board of India.

9. Cookies, children and changes

We use essential cookies to keep you signed in and secure, and, only after you accept, first-party analytics cookies to understand what's useful. We do not sell your data or use third-party ad trackers; you can decline analytics without losing any functionality, and change your choice at any time by clearing the cookie. The service is meant for professional brokers and is not directed at children. We may update this policy; the revised date appears at the top, and we notify you of material changes.

10. The Madhyam360 mobile app

The Android and iOS app collects the same account data as the website, plus what its features need. Every device permission is asked for at the moment you use the feature, never at first launch, and the app keeps working if you say no.

• Phone number and one-time code: your mobile number is your login. The code is sent by SMS or WhatsApp through a messaging provider and is never stored in clear text.
• Camera and photo library: property photos, room-by-room walkthrough shots, chat images and videos, and your profile or business-card photo. The app uses the system photo picker, so it only ever receives the photos you choose.
• Microphone: voice notes in chat, and calls where that feature is switched on. Recording is only ever started by you.
• Location: your approximate or precise location while the app is open, to show properties near you and to pin a listing on the map. Never in the background.
• Contacts: only when you tap Save to contacts on a customer, to write that one contact to your phone. We do not read or upload your address book.
• Push notifications: a device push token so we can tell you about messages, connection requests, visit requests and matches. You can switch notifications off in Settings.
• Device information: platform, app version and a session identifier, used to keep you signed in and to fix crashes.
• Listings, customers, requirements, messages, business-card details and property-view activity you create in the app, which is stored on our servers so it works across your devices.

11. Who processes your data for us

We do not sell personal data and we do not use advertising or tracking software. The following providers process data strictly to run the service, under contracts that bind them to confidentiality and to our instructions:

• Amazon Web Services (Mumbai region): hosting, the database, and storage of the photos, videos and documents you upload.
• Google Maps Platform: the addresses and coordinates of listings and, if you use it, your current location, to show maps, distances and nearby places.
• Google Gemini (AI Assist): the listing text you paste into AI Assist is sent to Google's Gemini model to be turned into a structured listing. We send only that text. It is not used to train models. Do not paste another person's personal information into AI Assist unless you have their permission.
• Expo push service (Apple Push Notification service and Firebase Cloud Messaging underneath): your push token and the notification text.
• SMS and WhatsApp messaging providers registered under India's DLT rules: your phone number and the one-time login code.
• Cashfree Payments, where paid plans or add-ons are offered: your name, phone number, email and the amount, so the payment can be taken. Card and bank details are entered on the payment provider's own pages and never touch our servers.
• Kiri Engine, when you generate a 3D walkthrough: the room photos or video you capture for that walkthrough, to build the 3D model.

12. Messages, reports and blocking

Chats, groups and broadcasts are delivered through our own servers and stored so that your conversations are available on every device you sign in on. They are not read by us in the normal course of the service and are never used for advertising.

When you report a message, listing or account, we keep a copy of what was reported together with your report so that a person on our team can review it, even if the sender deletes it afterwards. The person you report is not told who reported them. Reports are reviewed within 48 hours and kept for 12 months after they are closed. When you block someone, the block is recorded so that the other account can no longer message you, send you connection requests, or see your direct chats. You can undo a block at any time in Settings.

13. Deleting your account

You can delete your account yourself, at any time, in two ways: in the app under Settings, Delete account, or without the app by following the steps on our Delete your account page. Deletion is permanent.

Your profile, listings, customers, projects, chats, business card and uploaded media are removed from our live systems immediately and from our backups within 35 days. Records of payments and invoices are kept for the period Indian tax law requires, and reports you filed or that were filed about you are kept for 12 months for safety and legal reasons, in each case without your profile attached to them.

14. How to reach us

For any question about this policy, to exercise a right, or to reach our Grievance Officer, write to support@madhyam360.com or use our contact page. Please write from the phone number or email registered on your account so we can verify it is you.