Legal

Privacy Policy

Last updated: March 2026  ·  Effective immediately

The short version: We never store your phone number in our database. You share it only when you choose to — directly with the owner, through WhatsApp, on your own terms.

1. Who we are

resale.center is a direct-owner property platform serving Gurugram, India. We connect verified flat owners directly with genuine buyers — with no brokers, no commission, and no phone numbers stored on our servers.

For any privacy queries, contact us at hello@resale.center.

2. What data we collect

When you log in with Google:

  • Your name and email address (from Google OAuth)
  • Your Google account ID (used only as a unique identifier)
  • Profile photo URL (optional, for display purposes)

When you verify your WhatsApp number:

  • Your phone number — encrypted using AES-256-CBC before storage
  • We store only the encrypted version. The plaintext number is never written to our database

When you submit a listing:

  • Property details (BHK, area, price, sector, description)
  • Photos uploaded to our server (stored in /uploads/listings/)
  • Your selfie (encrypted reference stored; image kept in a protected directory)

Automatically collected:

  • IP address (used for rate limiting and spam prevention)
  • Session cookies (for login state — never used for tracking)
  • Property view counts (anonymous, no user association)

3. What we never collect

  • Your phone number in plaintext — ever
  • Browser fingerprints or cross-site tracking identifiers
  • Third-party advertising cookies
  • Behavioural or marketing profiles
  • Any data from minors (our platform is for adults only)

4. How we use your data

  • To authenticate you via Google OAuth
  • To send WhatsApp OTP for phone verification (via WATI)
  • To display your listing to potential buyers
  • To enable anonymous chat between buyers and owners
  • To process payments via Razorpay (we never see your card details)
  • To send platform notifications (listing activity, chat alerts)
  • To enforce platform rules (flag system, rate limiting)

5. Data sharing

We do not sell, rent, or trade your personal data. Period.

We share limited data only with:

  • Google — for OAuth login (governed by Google's Privacy Policy)
  • WATI / WhatsApp — your phone number is sent to WATI only to deliver your OTP; it is not stored by them beyond that transaction
  • Razorpay — for payment processing; they receive your payment details, not us
  • Hostinger — our hosting provider stores encrypted data on their servers in India

We may disclose data to law enforcement if legally required by Indian courts or regulatory authorities.

6. Data retention

  • Active listings: retained for up to 6 months from the listing date
  • Chat messages: auto-deleted 180 days after a listing is marked sold or expired
  • Account data: retained while your account is active; deleted within 30 days of account deletion request
  • Payment records: retained for 7 years as required by Indian tax law
  • OTP records: deleted after 10 minutes (used or expired)

7. Your rights

Under applicable Indian data protection law, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Withdraw consent for data processing (this may limit platform access)

To exercise any of these rights, email us at hello@resale.center. We will respond within 15 business days.

8. Cookies

We use a single session cookie (rc_sess) to keep you logged in. This cookie:

  • Is httpOnly and Secure — not accessible to JavaScript
  • Expires after 30 days
  • Contains no personal data — only a session identifier
  • Is never used for advertising or cross-site tracking

We do not use Google Analytics, Meta Pixel, or any advertising cookies.

9. Security

All data is transmitted over HTTPS/TLS. Phone numbers are encrypted at rest using AES-256-CBC. Uploaded documents (selfies, company IDs) are stored outside the public webroot and protected by .htaccess deny rules. Admin access is protected by a secret URL slug and password.

No security system is perfect. If you discover a vulnerability, please disclose it responsibly to hello@resale.center.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact

resale.center
Gurugram, Haryana, India
hello@resale.center