AUCTION AVENUE PRIVATE LIMITED
Join Free

Privacy Policy

Last updated: August 2026

Effective Date: August 15, 2026
Last Updated: August 2026

Auction Avenue Pvt. Ltd. ("Auction Avenues", "Company", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy rights. This Privacy Policy outlines our transparent practices regarding the collection, use, storage, processing, and safeguarding of your information in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By accessing or using our website, applications, or services, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy.

1. Categories of Data We Collect

We collect personal data strictly to the extent necessary to deliver, enhance, and secure our property marketplace:

  • Account & Profile Information: Name, email address, mobile phone number, and password credentials when you register as a buyer, tenant, broker, property owner, builder, or contractor.
  • Identity & Verification Data (KYC): For verified brokers, developers, and participating users where statutory verification is required, we collect masked PAN details, RERA registration numbers, GSTIN/business credentials, and government identity documents.
  • Property & Search Preferences: Search parameters (budget, state, city, property type), saved wishlist items, custom auction alerts, site visit requests, and inquiry communication threads.
  • Technical & Usage Analytics: IP address, browser type, device identifiers, session timestamps, and interaction logs captured automatically to detect fraud, prevent scraping, and optimize platform performance.

2. Purpose & Lawful Grounds for Processing

We process personal information under lawful grounds for the following legitimate purposes:

  • Enabling Property Discovery & Buyer-Seller Connections: Facilitating property searches, matching buyer requirements with listings, and enabling direct inquiries with mutual consent.
  • Identity Verification & Anti-Fraud Security: Authenticating broker and vendor credentials (including RERA status), verifying user phone numbers via OTP, and preventing deceptive listings.
  • Transactional Communications: Sending essential system notifications, such as inquiry status updates, site visit confirmations, bank auction date alerts, and account security notices.
  • Subscription Management: Administering broker and vendor subscription tiers, add-ons, and invoicing.
  • Statutory Compliance: Fulfilling legal obligations under applicable Indian laws, tax regulations, and lawful orders from judicial or regulatory authorities.

3. Absolute No-Sale Policy & Third-Party Sharing

We never sell, rent, trade, or monetize your personal data to telemarketers, data brokers, or third-party advertisers.

We share data only under the following limited and necessary circumstances:

  • Between Transacting Users (With Consent): When a prospective buyer or tenant submits an inquiry or schedules a site visit, relevant contact information is shared with the listing broker or owner following mutual approval or admin review.
  • Vetted Infrastructure Partners: We work with trusted technology partners who process data under strict confidentiality obligations:
    • Cloudinary: Secure media and document storage.
    • Resend: Transactional email and notification delivery.
    • Razorpay: PCI-DSS certified payment gateway for subscription processing. (We do not store debit/credit card CVVs or net banking passwords).
  • Law Enforcement & Legal Directives: When required under binding court summons, judicial orders, or statutory notices issued by authorized law enforcement agencies under Section 79 of the Information Technology Act, 2000.

4. Data Security & Storage Standards

We enforce comprehensive technical, administrative, and physical safeguards:

  • Encryption: HTTPS/TLS 1.3 encryption across all web traffic and robust cryptographic hashing (bcrypt) for stored credentials.
  • Access Control: Role-based access restrictions ensuring only authorized personnel access operational records.
  • Infrastructure Security: Secure cloud infrastructure adhering to industry-standard ISO/IEC 27001 and SOC 2 compliance benchmarks.

5. Data Retention & Account Deletion

  • Active Retention: We maintain your personal records as long as your account remains active to provide seamless access to your dashboard, saved searches, and agreements.
  • Right to Erasure & Account Deletion: You may request complete account deactivation and personal data deletion at any time from your profile settings or by contacting our Grievance Officer. Personal records will be permanently erased within 30 days, except where retention is legally mandated (such as tax invoices or statutory transaction records).

6. Your Rights Under DPDPA 2023

As a Data Principal under Indian Law, you are entitled to:

  1. Right to Access: Request a summary of the personal data processed by us.
  2. Right to Correction: Update or correct inaccurate, outdated, or incomplete details in your profile.
  3. Right to Withdraw Consent: Opt out of non-essential marketing emails and notifications at any time.
  4. Right to Grievance Redressal: Access an expedited, time-bound grievance resolution procedure.

7. Grievance Officer & Privacy Contact

In compliance with the Information Technology Act, 2000, the IT (Intermediary Guidelines) Rules, 2021, and the Digital Personal Data Protection Act, 2023, our designated Grievance Officer is:

  • Designation: Grievance Officer & Data Privacy Lead
  • Company: Auction Avenue Pvt. Ltd.
  • Email: info@auctionavenues.in
  • Office Address: 652/9 Nehru Nagar Main Road, Atal Dwar Main Rd, in front of Shiv Mandir, Indore, Madhya Pradesh 452011
  • Turnaround: Acknowledged within 24–48 hours; resolved within statutory timelines.