Privacy Policy

Last updated: 18 October 2026

1. About This Policy

BypassBroker is a zero-brokerage property marketplace that connects property owners directly with tenants, and sellers directly with buyers. This policy explains what information we collect, why we collect it, who can see it and how we protect it. By using the app, you agree to the practices described here. Your use of the platform is also governed by our Terms & Conditions.

2. Information We Collect

We follow a strict data-minimisation approach. To run your account, we need only three essentials:

• Phone number: verified by OTP and used to sign you in.
• Email address: for account notices, receipts and support.
• Date of birth: to confirm you are old enough to enter into a property agreement.

Beyond these, we hold only what you choose to give us while using the app: your name and city on your profile, the details and photos of any property you list, your saved properties and searches, your in-app messages, a record of the owner contacts you reveal and of your subscription purchases, and, if you ask to redeem your reward points, the name and payment details you enter so we can pay you. If you refer a property to us, we hold the owner's name and phone number you give us. If you allow location access on your phone, we also collect your device's precise location while you use the app: to show properties near you, to place your listing's pin if you ask us to, and once each time you publish a listing, to help keep brokers off the platform. You can turn location access off at any time in your phone's settings.

3. Information Collected Automatically

Some technical information is sent whenever you use the app. We use it to keep your account secure, to spot brokers who run several accounts, and to keep the app working:

• Device information: an identifier for your phone (the Android ID on Android, or Apple's identifier for vendors on iPhone), its model and operating system, and the app version.
• Sign-in history: when, and from which device, you sign in and out, and the network (IP) address each request comes from.
• Notifications: if you allow notifications, a push token so we can deliver them to your phone.
• Usage analytics: which screens you open and a few key actions, such as starting a listing or contacting an owner. These are linked to your account ID, never to your phone number, name or email, and are not used to work out your location.
• Crash reports: technical details of what went wrong when the app crashes, linked to your account ID. Phone numbers are removed before a report leaves your phone.

None of this is used for advertising. The app contains no advertising or cross-app tracking code.

4. What We Never Collect

We do not harvest, scrape or sell unnecessary personal information. In particular, we do not collect:

• Your full card number or CVV, or your bank or UPI PIN or password. Payments are processed by our payment partner, Razorpay, and those never reach our servers. Razorpay does send us a record of each payment, which can include the payment method, your UPI ID or the last four digits of your card, and the email and phone number used. We keep it with your purchase history.
• Your contacts list. If you pick an owner from your contacts when referring a property, your phone shows us only the one contact you choose.
• Your location in the background, or at all if you have not allowed location access.
• Any data from your social media profiles.

We do not collect government ID numbers, such as Aadhaar or PAN, on our servers today. The Rent Receipt tool lets you type your landlord's PAN, but it stays on your phone and is never sent to us (see section 12). We may in future ask for a government-issued ID to verify that a lister is the genuine owner. Before we do, we will update this policy to say what we collect, why, and how long we keep it, and we will let you know inside the app. If any screen in the app ever asks you for something beyond what is listed in this policy, treat it as unusual and email us.

5. How We Use Your Information

• To create, verify and secure your account.
• To publish your listings and show you relevant properties and alerts.
• To enable direct contact between owners and prospective tenants or buyers.
• To process subscriptions and respond to support requests.
• To detect and prevent fraud, spam and misuse of the platform, including use by brokers. This uses the device and sign-in information in section 3, where listings are published from, the pattern of contact reveals, the message checks in section 6, and automated checks of listing photos for phone numbers and other contact details, identity documents, and other property portals' or brokers' watermarks.
• To understand how the app is used, and to find and fix crashes, so we can improve it.

6. How Contact Details and Messages Are Shared

BypassBroker is a peer-to-peer platform, so contact sharing is deliberate and controlled:

• An owner's or seller's phone number is private by default and is never shown on a listing.
• It is revealed only to a buyer or tenant who taps "Contact Owner" on that property, using one of their free contacts or a contact from their plan.
• Each reveal is logged against the account that requested it, so misuse can be traced. The owner can see the name and profile photo of each person who revealed their number.
• Your name and contact details are never shown to anyone you have not chosen to contact, or who has not contacted you in this way.

Messages you send in the app are delivered to the other person and stored on our servers. To keep brokers and scams off the platform, messages are checked automatically for warning signs, such as phone numbers, requests for money or wording brokers commonly use, and a flagged message is sent to our team for review. Our team can read a conversation to verify a report, a flagged message or other signs of broker activity or fraud, and every such access is logged. If someone has blocked you, the messages you send them are not delivered. When you get a notification about a new message, a short preview of it passes through Expo, Apple or Google so your phone can show it.

7. Maps and Address Search (Google)

Maps in the app are provided by Google Maps. When you list a property, the apartment or society name you type is first matched against our own list of societies. It is sent to Google, through our servers, only if none of ours match and you tap "Search Google Maps". With it, we send Google only the bounds of your city to search within, never your account details or your device's location. Depending on how you set your listing's location, we keep:

• The society you pick from our list, or the name you type if your society isn't listed. A new society name may be reviewed by our team before it is added to the list.
• If you pick an address from Google: Google's identifier for the place, so the address can be looked up again, and the area name in that address, used to show your listing to buyers searching that area. The area name is never shown to other users.
• The pin you place on your building and confirm. This is the location saved with your listing, and it is shown on the map to people viewing the listing. If you skip the pin, we save the centre of the locality you chose instead.

Your house, flat, plot or shed number is never sent to Google and never shown on your listing. Only you can see it, and our team when they need it to review a listing. Google's use of the information it receives, including information about your device when a map is shown, is governed by the Google Privacy Policy: https://policies.google.com/privacy.

8. No Selling of Data

Because we are a zero-brokerage platform, we do not sell, rent, trade or share your personal data or enquiries as leads with real-estate agents, brokers, property consultants, advertisers or data brokers, under any circumstances.

We share data only with service providers that help us run the app, and only as much as they need: Amazon Web Services, in Mumbai, for hosting, photo storage and the automated checks of listing photos in section 5, our database provider, our SMS provider for OTP delivery, Razorpay for payments, Google Maps for maps and address search, Expo, Apple and Google for delivering notifications, PostHog for usage analytics, and Sentry for crash reports. PostHog and Sentry may process data outside India. We may also disclose information when required by law or by a lawful request from a government authority.

9. Data Security

Your data is encrypted in transit and stored on secured infrastructure. Within BypassBroker, access is limited to what is needed to run the app and answer support requests. No method of transmission or storage is completely secure, but we treat your data as something to protect, not to monetise.

10. Data Retention & Account Deletion

We keep your data for as long as your account is active. Some records are deleted on a fixed schedule even while it is:

• Sign-in history: 180 days.
• Where a listing was published from: 1 year.
• Server logs: 90 days.
• In-app notifications: 90 days.
• Device records, meaning which accounts have signed in on which phone: for as long as they are needed to stop removed brokers from returning, including after an account is deleted.

To delete your account, open Profile and tap Delete account; it is deleted straight away. You can also email us as described in the Help centre, and we delete it within 7 days of confirming the request is yours. Your name, email, date of birth, city and profile photo are removed, your listings are taken down and their photos deleted, your phone number can no longer be revealed to anyone, and you can no longer log in. Messages you already sent stay in the other person's conversation, shown as from a deleted user. We keep only what the law or fraud prevention requires: payment records, for as long as tax law requires; your phone number, with the closed account record; and fraud-prevention records, namely your device records and sign-in history for the periods above, a hidden record of your past listings, without their photos, so a removed broker cannot re-list the same properties, and block-list entries for accounts removed for broker activity.

11. Your Rights

You may:

• View or update your profile at any time from Personal Information.
• Ask us what personal data we hold about you.
• Ask us to correct inaccurate data.
• Withdraw location consent at any time by turning off location access for the app in your phone's settings.
• Withdraw consent entirely by deleting your account.

12. Rent Receipt Generator

The details you enter in the Rent Receipt tool (your name, your landlord's name, address and PAN, the property address, rent amounts and payment references) are handled entirely on your phone:

• The receipt PDF is created on your phone. None of these details are sent to BypassBroker's servers or to any of our service providers.
• Your last-entered details are saved on your phone so you can make next month's receipt quickly. They are deleted when you sign out. If you use the tool without signing in, they stay on your phone until you uninstall the app or clear its data. The most recent receipt PDF is kept in the app's temporary storage until you make the next one.
• Our usage analytics record only that receipts were made, the number of months, the payment method and whether the receipt was shared. They never include names, addresses, PAN or amounts.
• When you share or save a receipt, for example by email, WhatsApp or cloud storage, it goes to the app or service you choose, and that service's own privacy policy then applies.

Your landlord's details are their personal data. Enter them only with their knowledge, and only to make receipts for rent you have paid them.

13. Changes to This Policy

We may revise this policy from time to time. The latest version is always available in the app and on this page, and the date at the top shows when it was last updated. Please review it periodically. If a change is significant, we will also let you know inside the app.

14. Contact & Grievances

For any question, request or complaint about your privacy or this policy, write to us at the address below. We aim to acknowledge every request promptly.