Privacy policy

Last updated: 1 October 2026

This policy explains how NinePlusInfra ("we", "us") processes your personal data when you use nineplusinfra.in. It is published under the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For the purposes of the DPDP Act, NinePlusInfra is the Data Fiduciary.

1. Data we collect

• Account details: name, email, mobile number, account type (buyer, owner, agent, builder, channel partner).
• Listing details: property information, photos, location, price and documents you choose to upload.
• Enquiry details: messages, preferred contact method and callback time.
• Technical data: IP address, device and browser type, pages visited, and ad impressions/clicks.
• We do not collect passwords in readable form, bank or card details (payments are handled by licensed payment partners), or biometric data.

2. Purpose and legal basis

We process your data only for lawful purposes you consent to, or for legitimate uses allowed under Section 7 of the DPDP Act, including:

• Creating and running your account and listings.
• Sharing your enquiry with the seller or agent of the listing you contact.
• Verifying mobile numbers and preventing fraud, spam and duplicate listings.
• Sending service messages, and marketing messages only if you opt in.
• Meeting legal obligations and responding to lawful requests from authorities.

3. Sharing of data

• With the listing owner or agent when you send an enquiry.
• With service providers (hosting, SMS, email, payment) bound by confidentiality, only as needed.
• With government or law-enforcement agencies when required by law.
• We do not sell your personal data.
• Exact property addresses are not shown publicly unless the owner chooses to show them.

4. Your rights under the DPDP Act

• Right to access a summary of your personal data and how it is processed.
• Right to correction, completion, updating and erasure.
• Right to withdraw consent at any time (this does not affect processing done before withdrawal).
• Right to grievance redressal, and to nominate another person to exercise your rights in case of death or incapacity.
• Right to complain to the Data Protection Board of India once you have used our grievance process.

5. Retention

We keep personal data only as long as your account is active or as needed for the stated purpose, then delete it, unless the law requires us to keep it longer (for example, tax or IT Rules record-keeping, generally up to 180 days for logs).

6. Security

We use reasonable security practices, including encrypted connections (HTTPS), access controls, private storage for property media and role-based staff access. No system is fully secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board as required by law.

7. Cookies

We use essential cookies and local storage to keep you signed in and remember preferences, plus basic analytics for ad and page performance. You can clear or block cookies in your browser; some features may stop working.

8. Children

The service is meant for users aged 18 and above. We do not knowingly process data of children without verifiable parental consent.

9. Changes

We may update this policy. Significant changes will be shown on this page with a new date.

10. Contact and grievances

For questions, requests or complaints, contact our Grievance Officer (see the Grievance redressal page) using the details below.

This policy is a general template and should be reviewed by a qualified Indian lawyer.