Privacy Policy

Who we are

fare.deals is operated by Intellogenius Tech, 153/10 KA, Lashkari Rakab Gunj, Lucknow, Uttar Pradesh - 226018, India ("we", "us"). We run two products: the fare.deals marketplace (property for sale and rent, skilled trades, car rentals, item rentals and community ads) and Ledgers, a maintenance and accounts tool for residential societies. For the personal data you give us, we are the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

We collect only what a feature needs. Most of it you give us directly; some is created as you use the service.

• Account and contact details: your name, email address and phone number, the profile photo and name Google shares if you sign in with Google, and your language and city preferences.
• Business details: if you add them, a company name, GST number and registered office address, used on your tax invoices.
• Content you create: property listings, ads, worker and car-rental profiles, the photos you upload, reviews you write, messages you send in chat, enquiries, and messages you send us through the contact form.
• Location: the city and locality you choose, a map pin you place on a listing or profile, and — only if you allow it — your device location, used once to suggest your city or to find results near you. A "near me" search location is not stored.
• Identity and vehicle checks: where a feature requires it: an Aadhaar-based identity check and a driving-licence check through DigiLocker (we keep the result, not your Aadhaar number), and a vehicle registration (RC) check that returns the owner name, chassis number and registration details.
• Payment and financial records: plan purchases and invoices, rent amounts, deposits and rent receipts, and Ledgers bills, receipts and expenses. Card and UPI details are entered on Razorpay's own payment page and are never stored by us. If you receive payouts (a landlord or a society), we store a masked bank account reference, the IFSC and the PAN needed to set up your settlement account.
• Records about other people: landlords may enter tenant details, and society committees may enter resident details. Whoever enters them is responsible for having the right to share them with us.
• Technical data: your IP address (kept only in hashed form for rate limiting and view counts), your browser and device type (used to alert you to a sign-in from a new device), and server logs.
• Mobile app: a push notification token for your device, so we can send you notifications you have not switched off.

How we use it

• to create and secure your account and sign you in;
• to publish your listings, ads and profiles and connect you with the people who respond to them;
• to deliver chat messages, enquiries and notifications by SMS, email and push;
• to verify identities, vehicles and phone numbers where a feature requires it;
• to take payments, issue tax invoices, track rent and run society accounts;
• to prevent fraud, spam and abuse, and to enforce our Terms;
• to meet legal obligations, such as keeping tax and e-signature records.

We do not sell your personal data, and we do not use it for advertising. The service has no third-party advertising or analytics trackers.

Our legal basis

We process your personal data on the basis of the consent you give when you create an account or use a feature, and, where the DPDP Act allows it, for legitimate uses such as meeting a legal obligation or responding to a court or government order. You can withdraw consent at any time by deleting your account; this does not affect processing already done, and some records must be kept by law (see Retention).

AI features

Three features use Google's Gemini AI: Smart Search (the text of your search is sent to understand what you are looking for, and is not stored by us), writing a listing description, and translating a listing (the listing's own details are sent). We never send your contact details, your messages, your identity documents or your payment details to an AI model.

Who processes your data for us

We use the following service providers. Each processes data only on our instructions and under its own security terms:

• Supabase — our database and sign-in system.
• Amazon Web Services — stores photos and documents (S3, Mumbai region, ap-south-1).
• Vercel — hosts the website and runs our servers.
• Razorpay — processes payments and, for landlords and societies who receive payouts, holds the linked settlement account, including PAN and bank details.
• Cashfree — checks vehicle registration (RC) details.
• Sandbox / DigiLocker — Aadhaar-based identity checks and driving-licence checks. Your Aadhaar number is not stored by us.
• MSG91 — sends SMS messages, including one-time sign-in codes and reminders.
• Hostinger — sends and receives our email.
• Google — Google sign-in, maps, and the Gemini AI features described above.
• Webhooks you set up — if you connect a tool such as Zapier to your account, the lead details you choose are sent to the address you configure.

When you contact another user — for example by sending a message or revealing a phone number — the details involved are shared with that user, because that is what you asked us to do. We may also disclose data where the law requires it.

Where your data is stored

Photos and documents are stored in India (AWS Mumbai region). Some of our providers, such as Vercel and Google, may process data outside India, as the DPDP Act permits, under contracts that require them to protect it.

Cookies

We use only first-party cookies that the service needs to work. We use no advertising or analytics cookies.

• sb-…-auth-token — keeps you signed in (set by our sign-in system, Supabase).
• fd_csrf — protects your forms against forgery.
• fd_city — remembers the city you chose.
• fd_locale — remembers your language.
• fd_anon_survey — remembers your answers to our short "what are you looking for" question before you sign in.
• return_to, active_category — remember which page and category to return you to after you sign in, for a short time.

How long we keep it

We keep your data while your account is open. When you delete your account, your profile and content are erased at once (see Deleting your account), and the following are removed on a schedule after the deletion date:

• enquiries you sent are anonymized after 90 days;
• identity-check results are deleted after 30 days, unless you are still party to a running agreement;
• records of phone numbers you revealed are deleted after 180 days;
• AI usage records are deleted after 365 days.

Signed agreements, e-signature records, invoices and payment records are kept for as long as tax and e-signature laws require, with your personal details removed from your profile. An enquiry under an open dispute is kept until the dispute is closed.

Deleting your account

You can delete your account yourself at any time from Settings. Our account deletion page explains exactly what is erased, what is kept and why, and how to ask us if you cannot sign in.

Your rights

Under the DPDP Act you have the right to:

• get a summary of the personal data we hold about you and how we process it;
• correct, complete or update it — most of it you can edit yourself in Settings;
• have it erased, by deleting your account;
• withdraw your consent;
• nominate someone to exercise these rights on your behalf if you die or become unable to;
• have a grievance about our handling of your data resolved.

To exercise any of these rights, write to our Grievance Officer (below) or use our Contact page. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

fare.deals is for adults. You must be 18 or older to create an account, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

Security

All traffic is encrypted in transit (HTTPS). Access to data is enforced in the database itself, so each account sees only the records it is entitled to, private documents are served only through short-lived signed links, and administrative actions are logged. No system is perfectly secure; if a breach affects your data, we will notify you and the Data Protection Board as the law requires.

Our mobile app

• Notifications: the app asks for permission to send push notifications. You can turn them off at any time in your device settings.
• Location: the app may ask for your location to suggest your city or show results near you. This is optional and the app works without it.
• Camera and photos: the app accesses them only when you choose to upload a photo or document.

Changes to this policy

We will update this policy when our practices change and show the new date at the top. If a change materially affects how we use your data, we will tell you through the service before it takes effect.

Grievance Officer

For any question, complaint or request about your personal data, contact our Grievance Officer:

• Name: Manish Kumar Verma
• Email: grievance@fare.deals
• Address: Intellogenius Tech, 153/10 KA, Lashkari Rakab Gunj, Lucknow, Uttar Pradesh - 226018, India

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.