Privacy Policy

Depending on how you use HomeThingy, we may collect the following categories of information.

A. Information You Provide

• Name
• Email address
• Phone number
• Account credentials
• Property addresses or properties you search for
• Search preferences
• Saved properties
• User-generated content
• Communications with us
• Feedback and support requests
• Information you voluntarily provide when using our Services

B. Property and Real Estate Information

When you search for or analyze a property, we may process information associated with that property, including:

• Property address
• Property characteristics
• Property ownership information where publicly available
• Property history
• Sales history
• Tax information
• Property assessments
• Property value estimates
• Building characteristics
• Geographic information
• Neighborhood information
• Publicly available records

Much of this information may originate from public records or third-party data providers.

C. Automatically Collected Information

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Search activity
• Approximate geographic location derived from IP address
• Date and time of access
• Referring website
• Device identifiers
• Usage and interaction information

D. Cookies and Similar Technologies

We may use cookies, pixels, local storage, analytics tools, and similar technologies to operate our website, remember preferences, maintain sessions, understand how users interact with our Services, improve our products, detect fraud and abuse, measure performance, and improve marketing and communications. You may be able to control cookies through your browser or device settings. Disabling certain cookies may affect functionality.

Where required by law, non-essential cookies (analytics and marketing cookies) are set only after you provide consent through our cookie banner, and you may withdraw that consent at any time through the cookie settings link in the footer of our website. Our Services do not currently respond to browser "Do Not Track" signals.

We may use information to: provide and operate HomeThingy; create and manage accounts; provide property and neighborhood analysis; generate AI-powered insights; personalize the user experience; improve our algorithms and Services; analyze usage and product performance; respond to customer requests; communicate with users; detect security incidents and fraud; prevent misuse of our Services; comply with legal obligations; enforce our Terms and Conditions; develop new products and features; and conduct internal research and analytics.

Under the DPDP Act, we process your personal data on one of the following grounds:

• Consent — for most processing (e.g., creating an account, generating a Report, marketing communications), we rely on your free, specific, informed, and unambiguous consent, given through a clear affirmative action such as ticking a box or clicking "I Agree." You may withdraw consent at any time, as easily as it was given, by writing to enquiry@thoughtverve.com; withdrawal does not affect processing carried out before withdrawal and may limit your ability to use certain features.
• Certain legitimate uses recognised under Section 7 of the DPDP Act — for example, where you voluntarily provide data for a specific purpose (such as raising a support ticket) and processing is limited to that purpose, or where processing is necessary to comply with a legal obligation, respond to a medical emergency, or for purposes related to employment (where applicable).

Where we intend to rely on a ground other than consent, we will identify that ground to you at or before the point of collection, to the extent required by law.

HomeThingy uses artificial intelligence and machine-learning technologies to analyze information and generate insights. Depending on the feature, information may be processed by third-party AI, cloud, analytics, or technology providers. AI-generated information may be inaccurate, incomplete, outdated, or incorrect. We do not guarantee that AI-generated outputs are accurate or complete.

Please do not submit sensitive personal information to HomeThingy unless specifically requested and necessary for the Service.

HomeThingy may obtain property and neighborhood information from government agencies, public records, county and municipal records, publicly available databases, real estate data providers, property data providers, mapping providers, market data providers, and other third-party sources. Information obtained from these sources may be incomplete, inaccurate, delayed, or inconsistent. HomeThingy does not guarantee the accuracy or completeness of third-party information.

Service Providers

We may use third-party companies to provide services such as cloud hosting, data storage, analytics, AI processing, email delivery, customer support, security, payment processing, and website infrastructure. These providers may process information on our behalf, under contractual terms that require them to protect it and use it only for the purposes we specify.

Legal Requirements

We may disclose information when reasonably necessary to comply with applicable law, respond to legal process, protect our rights, protect users, prevent fraud or abuse, or protect the security of our Services.

Business Transfers

If HomeThingy is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction.

Some of our service providers (including cloud-hosting and AI infrastructure providers) may store or process personal data outside India. As of the date of this Policy, the DPDP Act permits transfer of personal data outside India except to countries restricted by the Central Government by notification; we will not knowingly transfer personal data to a restricted country. Where we transfer personal data internationally, we require our service providers to maintain security safeguards materially consistent with those described in Section 10 of this Policy.

This clause will be updated as and when the Central Government notifies country-specific restrictions or additional cross-border transfer conditions under the DPDP Rules.

HomeThingy does not sell personal information for monetary consideration in the ordinary operation of the Services.

Where applicable law provides additional definitions or rights concerning "sale," "sharing," or targeted advertising, HomeThingy will comply with applicable legal requirements.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, or as required by law. As a general guide:

• Account information: for as long as your account is active, and for up to 24 months after account closure to handle disputes, comply with legal obligations, and prevent fraud.
• Generated Reports and search history: up to 36 months from creation, or your account's lifetime if shorter, unless you request earlier deletion.
• Payment records: as required by applicable tax, accounting, and RBI/payment-processor rules, typically 8 years.
• Support communications and grievance records: up to 24 months after resolution.
• Where personal data is used to train or improve AI models in de-identified/aggregated form, the underlying identifiers are removed as soon as reasonably practicable and, once removed, the retention periods above no longer apply to the de-identified data.

Where you exercise your erasure right under Section 12 below, we will erase or anonymise your personal data unless retention is required to comply with a legal obligation or to establish, exercise, or defend a legal claim.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption of data in transit, access controls, and vendor security review. However, no system or method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a personal data breach that is likely to affect you, we will notify the Data Protection Board of India and affected Users as required under the DPDP Act, and, where the breach also constitutes a cyber-security incident, report it to the Indian Computer Emergency Response Team (CERT-In) within the timelines prescribed under the CERT-In Directions issued under the Information Technology Act, 2000 (currently within 6 hours of becoming aware of certain categories of incident).

Notification to affected Users will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it, to the extent then known.

As a Data Principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and the processing activities we carry out with it.
• Correct, complete, update, and erase your personal data, subject to any legal obligation that requires us to retain it.
• Withdraw your consent at any time, as described in Section 3 above.
• Nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
• Grievance redressal — you may raise a complaint with us (Section 18 of the Terms and Conditions, or enquiry@thoughtverve.com), and we will respond within the timelines stated in this Policy.
• Complain to the Data Protection Board of India if you are not satisfied with our response to your grievance, once the Board's complaint mechanism is operational.

To submit a request under this Section, contact us using the contact information in Section 17. We may need to verify your identity before processing certain requests, and may decline a request to the extent permitted by law (for example, where erasure would prevent us from complying with a legal or regulatory obligation).

The DPDP Act contemplates that you may, in the future, manage, review, and withdraw your consent across data fiduciaries (including HomeThingy) through a registered Consent Manager. We do not currently operate our own Consent Manager platform; once Consent Manager registration and interoperability requirements are notified and operational, we will update this Policy to explain how you can manage your consent to HomeThingy through a Consent Manager of your choice.

Consistent with Section 3 of the Terms and Conditions (Eligibility), the Services are not directed to, and may not be used by, anyone under 18 years of age. Under the DPDP Act, a "child" is any individual under 18, and processing a child's personal data requires verifiable consent from a parent or lawful guardian.

We do not knowingly collect personal data from anyone under 18, do not knowingly process it for behavioural monitoring, tracking, or targeted/behavioural advertising directed at children, and will not do so unless and until we implement a verifiable-parental-consent mechanism compliant with the DPDP Act.

If you believe a person under 18 has provided personal data to us, please contact us at enquiry@thoughtverve.com so we can investigate and, where appropriate, delete that data.

Our Services may contain links to third-party websites. HomeThingy is not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of third-party websites before providing personal information.

We may update this Privacy Policy periodically. When we make material changes, we will provide notice through the Services or by other appropriate means, consistent with Section 22 (Notices) of the Terms and Conditions. The updated policy will become effective when posted unless otherwise required by law.

Questions regarding this Privacy Policy, or requests to exercise your rights as a Data Principal, may be submitted to enquiry@thoughtverve.com or to the Grievance Officer identified in Section 18 of the Terms and Conditions.