BrokerDost

Privacy Policy

NBY Tech Solutions LLP · GSTIN 24AATFN1092N1ZP · Effective: May 1, 2026

1. Who We Are

BrokerDost is a SaaS platform built by NBY Tech Solutions LLP, a Limited Liability Partnership registered in Gujarat, India (GSTIN 24AATFN1092N1ZP). We help Indian real estate brokers automate leads, WhatsApp conversations, content creation, site visits, and inventory management.

For privacy questions, contact us at ashish@nebex.in.

2. Information We Collect

Information you provide

  • Account details: name, email, phone, agency name, RERA number, city, state
  • Listings you upload: property details, owner contact, photos, RERA registration
  • Buyer/tenant lead details captured via WhatsApp, calls, or web forms
  • Payment information processed via Razorpay (we do not store card numbers)
  • Content you generate: WhatsApp templates, social posts, marketing material

Information collected automatically

  • Usage data: features used, session duration, pages visited
  • Device and browser information
  • IP address (for security and fraud prevention)
  • Cookies and local storage for session management and language preferences

3. How We Use Your Information

  • To provide and operate BrokerDost services
  • To send transactional WhatsApp messages, emails, and notifications you have asked us to send
  • To process payments and prevent fraud
  • To respond to support queries and improve our products
  • To comply with legal obligations including RERA, DPDP Act 2023, GST, and TRAI regulations
  • To detect, prevent, and respond to security incidents

4. Data Sharing

We share data only with carefully selected service providers, and only as needed:

  • Supabase (Mumbai region) — database, authentication, file storage
  • Razorpay — payment processing
  • Meta WhatsApp Cloud API / AiSensy — WhatsApp Business messaging
  • ElevenLabs / Sarvam — voice synthesis (only when you opt in)
  • Anthropic / OpenAI / Xiaomi MiMo — AI inference for content and lead qualification
  • Indian government authorities — only when legally required

We do not sell your data to advertisers or data brokers.

5. Data Storage and Security

Your data is stored on Supabase (PostgreSQL) in the Mumbai (ap-south-1) region inside India. We use HTTPS/TLS for all data in transit, AES-256 encryption at rest for sensitive backups, and role-based access controls. We retain data for as long as your account is active and for up to 36 months after account closure for legal and accounting requirements.

6. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to erasure")
  • Withdraw consent at any time
  • File a grievance with our Data Protection Officer at ashish@nebex.in
  • Escalate to the Data Protection Board of India if unresolved within 30 days

7. WhatsApp & TRAI Compliance

7.1 Opt-in

We will only send WhatsApp messages to you if you have explicitly opted in. You can opt in by:

  • Ticking the “Send me updates on WhatsApp” checkbox during signup, or
  • Toggling the WhatsApp switch in your Settings → WhatsApp messaging page.

We log your consent timestamp, IP address, and device information so we can prove the opt-in if Meta or any regulator asks.

7.2 What you will receive

If you opt in, BrokerDost may send up to 1 marketing WhatsApp message per day, plus occasional transactional messages (account confirmation, OTP, payment confirmation, deal updates) which are exempt from the daily limit.

7.3 How to opt out

You can stop WhatsApp messages at any time by:

  • Replying STOP, UNSUBSCRIBE, BAND KARO, or any similar phrase to any BrokerDost WhatsApp message.
  • Toggling the WhatsApp switch off in your Settings page.

Opt-out is honored immediately. You will receive a one-time confirmation message and then no further WhatsApp messages from us. Reply START to opt back in.

7.4 Right to be forgotten (DPDP Act 2023)

You can request permanent deletion of your account and all associated data via Settings → Delete account. Once requested, all messaging stops immediately and your data is purged within 30 days.

7.5 Calls

We use the official Meta WhatsApp Business API. Buyers and tenants who message you via Click-to-WhatsApp links explicitly initiate the conversation. Recipients of broadcast messages can opt out at any time by replying STOP, which we honor immediately. Voice messaging follows TRAI's DND framework — outbound voice calls are made only with explicit prior consent.

7.6 Facebook & Instagram Messenger DMs

BrokerDost operates a Facebook Page (Broker Dost, id 1108612442337529) and an Instagram business account (@brokerdost.ai). When you message either of these accounts, we use the Meta Messenger Platform to receive your message in our internal admin inbox (/admin/messenger-dms) and to reply within Meta's 24-hour standard messaging window.

What we receive: your Page-Scoped ID (PSID) or Instagram-Scoped ID, your display name, your username (Instagram), the text of your message, any attachments, and the timestamp.

What we do with it: our admin reviews your message, an AI assistant drafts a suggested reply (we use this only as a draft — a human admin reviews and clicks Send), and the reply is dispatched via Meta's Send API. Conversations are stored for up to 2 years in our private database for customer-support history, then permanently deleted.

We do NOT: share your DM content with any third party, sell it, use it to train external AI models, or use it for advertising. AI classification and drafting run on our own infrastructure hosted in an Indian datacenter.

7.7 Meta Lead Ads (Facebook & Instagram)

When you submit a Lead Form on a BrokerDost ad running on Facebook or Instagram, Meta passes the form data to us via the Meta Lead Ads webhook so we can contact you about your enquiry. This is the explicit purpose for which you submit the form.

What we receive: the fields you filled in the Lead Form — typically full name, phone number, email, city, budget, and your stated requirement — plus the campaign, ad, and form identifiers.

What we do with it: within ~30 seconds we send you a WhatsApp confirmation (brokerdost_lead_followup UTILITY template, pre-approved by Meta) acknowledging your enquiry. For broker-attributed forms we route the lead to the appropriate broker partner; for unattributed forms we triage internally. Your data is stored in our private database for CRM follow-up.

We do NOT: sell your data, share it beyond the specific broker handling your enquiry, or use it for any purpose other than answering the enquiry you submitted. You can request deletion at any time by emailing support@brokerdost.ai (30-day SLA).

8. Cookies

We use essential cookies for session management and a small number of preference cookies (language, theme). We do not use advertising or cross-site tracking cookies.

9. Children's Privacy

BrokerDost is a B2B platform for licensed real estate brokers. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy as our services evolve or law changes. Material changes are notified via email and a banner inside the dashboard at least 14 days before they take effect.

11. Contact

NBY Tech Solutions LLP
GSTIN: 24AATFN1092N1ZP
Gujarat, India
Email: ashish@nebex.in