Privacy Policy

1. Who we are

Madhyam360 is a broker-to-broker real-estate network operated by GenX Digital Solutions. For the personal data you share with us, we act as the "Data Fiduciary" and you are the "Data Principal" under the Digital Personal Data Protection Act, 2023.

2. The data we collect

• Account & identity — your name, mobile number, email, city, company and role, so we can create and secure your broker workspace.
• Professional details — RERA agent registration number, profile, photo, coverage areas and the listings you publish.
• Contacts & leads — the customer and enquiry details you choose to store in your workspace.
• Usage & device data — pages visited, actions taken, IP address, browser and cookies, to keep the service secure and improve it.
• Payment data — handled by our payment partner; we do not store full card or bank numbers on our servers.

3. Why we use it, and your consent

We collect only what a stated purpose needs: to run your workspace, connect you to the network, provide tools and the assistant, process payments, prevent misuse, and meet legal obligations.

We ask for your consent before collecting personal data and describe the purpose at the point of collection. Your consent is free, specific, informed and revocable — you can withdraw it at any time, after which we stop the related processing.

4. How network data is shared

Madhyam360 is a network, so information you choose to publish — your public profile, digital card and listings — is visible to other verified brokers and to visitors of the public portal. Your private workspace data (your contacts, leads and notes) is yours and is not shared with other brokers.

We do not sell your personal data. We share data with service providers (hosting, payments, analytics, communications) strictly to run the service, under confidentiality obligations.

5. Security

We apply reasonable security safeguards benchmarked to ISO/IEC 27001 practices — encryption in transit, access controls, audit logging and server-side storage. No system is perfectly secure, but we work to protect your data and to notify you and the Data Protection Board of a breach as the law requires.

6. How long we keep it, and erasure

We keep personal data only for as long as the purpose needs it or the law requires. When you withdraw consent or the purpose is served, we delete or anonymise your personal data, except where retention is legally required (for example, tax and transaction records).

7. Your rights

• Access — ask what personal data we hold about you.
• Correction — have inaccurate or incomplete data corrected or updated.
• Erasure — ask us to delete your personal data.
• Grievance redressal — raise a complaint and have it addressed within the statutory timeline.
• Nomination — nominate someone to exercise your rights if you are unable to.
• Withdraw consent — as easily as you gave it.

8. Grievance Officer

To exercise any right or raise a concern, contact our Grievance Officer through our contact page. We acknowledge grievances within 48 hours and resolve them within 90 days, or sooner where the law requires. If you are not satisfied, you may escalate to the Data Protection Board of India.

9. Cookies, children and changes

We use essential cookies to keep you signed in and secure, and — only after you accept — first-party analytics cookies to understand what's useful. We do not sell your data or use third-party ad trackers; you can decline analytics without losing any functionality, and change your choice at any time by clearing the cookie. The service is meant for professional brokers and is not directed at children. We may update this policy; the revised date appears at the top, and we notify you of material changes.