Privacy Policy
BannaAI RealtyTech Private Limited
Effective Date: January 15, 2025 | Last Updated: January 15, 2025 | Version 1.0
1. Introduction
BannaAI RealtyTech Private Limited (BannaAI,Company, we, us, or our), a company incorporated under the Companies Act, 2013, and recognized by DPIIT under Startup India (Registration No. DIPP235394), is committed to protecting the privacy and personal data of individuals who use our services.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered real estate valuation platform, WhatsApp services, website (www.bannaai.com), and related services (collectively, Services).
This Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000 (IT Act), and applicable rules thereunder.
1.1 Consent
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. In accordance with Section 6 of the DPDPA 2023, we process your personal data only with your free, specific, informed, unconditional, and unambiguous consent.
2. Definitions
Personal Data means any data about an individual who is identifiable by or in relation to such data, including name, contact information, location data, and property preferences.
Data Principal means the individual to whom the personal data relates (i.e., you, the user).
Data Fiduciary means BannaAI, which determines the purpose and means of processing personal data.
Processing includes collection, storage, use, disclosure, and erasure of personal data.
3. Information We Collect
3.1 Information You Provide Directly
- Identity Information: Name, email address, phone number (WhatsApp number)
- Property Search Preferences: Budget range, preferred locations, BHK preferences, property type requirements
- Communication Data: Messages exchanged via WhatsApp, queries, feedback
- Transaction Data: Payment information for premium reports (processed through third-party payment gateways)
3.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type, IP address
- Usage Data: Pages visited, features used, time spent on platform, search queries
- Location Data: Approximate location based on IP address or device settings (with consent)
- WhatsApp Metadata: Message timestamps, interaction patterns (content is encrypted by WhatsApp)
3.3 Information from Third Parties
- Property Data Providers: Public property records, market data for valuation purposes
- Payment Processors: Transaction confirmation (we do not store full payment card details)
- WhatsApp Business API: User profile information shared through WhatsApp
4. Purpose of Data Collection
5. Legal Basis for Processing
Under the DPDPA 2023, we process your personal data based on:
- Consent: Your explicit consent obtained at the time of registration or service use
- Contractual Necessity: Processing necessary for providing our Services
- Legal Obligation: Processing required to comply with applicable laws
- Legitimate Interests: Processing for our legitimate business interests, balanced against your rights
6. Data Sharing and Disclosure
6.1 We May Share Your Data With:
- Service Providers: Cloud hosting providers, payment processors, analytics services, WhatsApp Business API providers
- Property Partners: Real estate agents, builders, or sellers (only with your explicit consent for specific property inquiries)
- Legal Authorities: When required by law, court order, or government request
- Business Transfers: In case of merger, acquisition, or sale of assets (with prior notice to users)
6.2 We Do NOT:
- ✗ Sell your personal data to third parties for marketing purposes
- ✗ Share your WhatsApp conversations with unauthorized parties
- ✗ Transfer data outside India without adequate safeguards (as per DPDPA requirements)
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy:
- Active User Data: Retained while your account is active and for 3 years thereafter
- Transaction Records: Retained for 8 years as per tax and accounting requirements
- Communication Logs: Retained for 2 years for service improvement
- AI Training Data: Anonymized data may be retained indefinitely
Upon request for deletion, we will erase your data within 30 days, except where retention is required by law.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Role-based access with multi-factor authentication
- Regular Audits: Periodic security assessments and vulnerability testing
- Incident Response: Documented procedures for data breach notification
In case of a data breach affecting your rights, we will notify you and the relevant authorities within 72 hours as required by law.
9. Your Rights Under DPDPA 2023
As a Data Principal, you have the following rights:
You can request a summary of your personal data processed by us and the processing activities.
You can request correction of inaccurate or incomplete personal data.
You can request deletion of your personal data, subject to legal retention requirements.
You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
You can raise concerns with our Data Protection Officer or the Data Protection Board of India.
You can nominate another individual to exercise your rights in case of death or incapacity.
To exercise any of these rights, contact us at: privacy@bannaai.com
10. Cookies and Tracking
Our website uses cookies and similar technologies:
- Essential Cookies: Required for website functionality (always active)
- Analytics Cookies: To understand usage patterns (with consent)
- Marketing Cookies: For personalized content (with consent)
You can manage cookie preferences through your browser settings or our cookie consent banner.
11. AI and Automated Decision-Making
Our Services use AI and machine learning for property valuations. Important disclosures:
- Nature: AI valuations are indicative estimates based on historical data and market trends
- Accuracy: Our model achieves approximately 97% accuracy on training data, but actual results may vary
- Human Oversight: AI decisions are subject to human review for premium services
- Not Legal Advice: AI valuations do not constitute legal property appraisals or certified valuations
You have the right to request human intervention in AI-based decisions affecting your interests.
12. Children Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete such data promptly.
13. Cross-Border Data Transfers
Your data is primarily stored and processed in India. If we transfer data outside India, we will:
- • Ensure the recipient country provides adequate data protection
- • Implement appropriate safeguards (standard contractual clauses, binding corporate rules)
- • Obtain your consent where required by law
14. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing any personal data.
15. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- • Posting the updated Policy on our website with a new Last Updated date
- • Sending a notification via WhatsApp or email
- • Requiring re-consent for significant changes affecting your rights
Continued use of our Services after such changes constitutes acceptance of the updated Policy.
16. GRIEVANCE OFFICER / DATA PROTECTION OFFICER
Company Information
privacy@bannaai.com
Phone
+91 81409 99907
Address
BannaAI RealtyTech Pvt. Ltd., Ahmedabad, Gujarat, India
Data Protection Officer
Name: BannaAI RealtyTech Pvt. Ltd.
Designation: : Data Protection Officer
Response Time: Within 30 days
17. Governing Law & Dispute Resolution
This Privacy Policy is governed by the laws of India, specifically the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of courts in Ahmedabad, Gujarat.
You may also approach the Data Protection Board of India for grievance redressal under DPDPA 2023.
18. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Company Details
Company Name
BannaAI RealtyTech Private Limited
CIN:
U62099GJ2025PTC169754
DPIIT Recognition
DIPP235394
Registered Address
Ahmedabad, Gujarat, India
Contact Information
contact@bannaai.com
Phone
+91 81409 99907
Website
www.bannaai.com
By using BannaAI Services, you acknowledge that you have read and understood this Privacy Policy.
BannaAI RealtyTech Private Limited | DPIIT Recognized Startup
Your privacy is our commitment. DPDPA 2023 Compliant | Military-Grade Encryption