Privacy Policy

Introduction

FloorAdda is operated by Bhojuveer, Varanasi, Uttar Pradesh, India. Our platform connects:

• Property marketplace — buy, rent, commercial, projects, PG, plots, and society microsites.
• Society ERP — billing, accounting, gate & visitors, helpdesk, amenities, governance, and resident app.
• Platform services — onboarding, payments, notifications, and customer support.

Services may be used by residents, owners, brokers, builders, management committees (MC/RWA), guards, facility staff, and our authorised platform team. Your housing society (when subscribed) is our direct customer for ERP services; residents use ERP features under society policy and consent.

Information we collect

What we collect depends on how you use FloorAdda and your privacy settings. Standard society features may need only name, flat/unit, and mobile number; advanced modules (billing, payments, gate photos, payroll) may need additional fields your society enables.

Marketplace users (buyers, owners, brokers, builders)

• Name, email, mobile number, password hash, and account type.
• Listing details: property description, photos, location, price, BHK, amenities, and enquiry messages.
• Saved searches, recently viewed listings, and optional profile fields you provide.
• Payment references when you use rent-pay or checkout (processed by regulated payment partners).

Residents & society ERP users

• Name, email, mobile, unit/tower, owner/tenant status, family members (if entered by society), vehicle numbers (if enabled).
• Billing, receipts, outstanding dues, and accounting records entered by your society.
• Visitor name, flat visited, entry/exit time, optional photo or ID capture as configured by your RWA.
• Helpdesk tickets, notices, polls, amenity bookings, and classifieds inside your society.

Guests, vendors & daily help

• Name and flat/unit to visit; additional fields (phone, photo, purpose, vehicle) only if your society’s gate policy requires them.
• Entry/exit timestamps and guard notes for security and audit.

Technical & usage data

• IP address, browser/device type, operating system, app version, and crash/diagnostic logs.
• Pages visited, referral URL, and cookies needed for login, security, and aggregated analytics.
• We do not sell cookie or device data to ad networks for unrelated profiling.

How information is collected

Directly from you — when you register, post a listing, submit a lead, pay a bill, approve a visitor, or fill forms on our platforms.

From your society — MC administrators may import or enter resident, unit, and billing data under their agreement with us.

Automatically — technical logs and cookies while you interact with our website or apps, to keep sessions secure and improve reliability.

From service providers — payment gateways, SMS/email delivery, cloud hosting, and (only with your or your society’s configuration) hardware integrations. They process data only under contract and for the service they provide.

Why information is collected

• Create and administer your account; verify identity and prevent fraud.
• Operate search, listings, gate passes, billing, helpdesk, notifications, and society workflows.
• Send service alerts you opt into (visitor entry, payment reminders, ticket updates, society notices).
• Provide customer support when you contact us.
• Meet legal, tax, audit, and regulatory obligations.
• Improve safety and reliability — detect abuse, security incidents, and technical errors.
• Produce aggregated, de-identified analytics that do not identify individuals.

We do not sell your personal information to data brokers or unrelated third parties for their own marketing.

Your privacy controls

• Review & update — edit profile fields in your account or resident app where your role allows.
• Notifications — opt out of non-essential push/SMS/email categories in app or account settings (critical security and billing alerts may still be sent where required by your society).
• Listing visibility — control how much contact detail appears on marketplace listings.
• Deletion — request erasure of your marketplace account by emailing privacy@flooradda.com. Society ERP records are controlled by your RWA; we facilitate requests but some deletion may need MC approval and legal retention.
• Marketing — unsubscribe from promotional emails via the link in each message or by writing to us.

Under India’s Digital Personal Data Protection Act, 2023 and applicable rules, you may request access, correction, or grievance redressal as described below.

Sharing your information

We share personal information only as needed to run the service or as required by law:

• With other users — when you take an action that requires it (e.g. enquiry on a listing shares your contact with the poster; society directory visibility follows MC settings).
• With your society — RWA/MC administrators and authorised staff (guards, treasurers) see data needed for operations, security, and compliance.
• With processors — cloud hosting, SMS, email, push, analytics, and payment partners under confidentiality and data-processing terms.
• With explicit consent — optional third-party offers (e.g. home loans, packers) only after you opt in.
• Legal & safety — courts, regulators, or law enforcement when we believe disclosure is required by law or necessary to protect users, societies, or the public.

Third-party websites linked from FloorAdda have their own privacy practices; we are not responsible for their content or policies.

Support staff & authorised access

How Creataum / FloorAdda support accesses society ERP

• Society-issued support key — Your MC admin generates a one-time, time-limited support key in ERP (Configuration → Creataum support key). The key expires within one hour and can be used only once.
• Ticket reason required — Support staff must enter a ticket number or call reference before access is granted.
• Visible session — When support is connected, a clear banner appears in the ERP so administrators know an authorised support session is active.
• Full audit trail — Start, end, and significant actions during support sessions are recorded in tenant support access audits visible to your society’s administrators.
• No key, no access — Support cannot self-generate keys or access tenant data without the society-provided key (except narrowly scoped platform admin tools used only by senior administrators for provisioning, with separate controls).

Marketplace & account support

• When you email or call support, staff see only the information needed to resolve your ticket (account email, listing ID, payment reference, etc.).
• Staff are bound by confidentiality obligations and may access production databases only through role-based tools — not personal downloads of resident or visitor databases.
• We do not share your personal information with support contractors outside Bhojuveer, Varanasi, Uttar Pradesh, India except under written confidentiality and security requirements.

What we never do with support access

• Sell or trade resident, visitor, or billing data accessed during support.
• Use society data for unrelated marketing without explicit consent.
• Share gate photos, visitor logs, or financial ledgers with third parties except as you or your society authorises or law requires.

Information security

• Encryption in transit (HTTPS/TLS) for web and API traffic; sensitive data encrypted at rest on production systems.
• Role-based access control (RBAC) across platform, CRM, support, and society ERP panels.
• Firewall, VPN, and multi-factor authentication for administrative access to infrastructure.
• Regular review of access rights; contractual confidentiality for employees and vendors who handle personal data.
• Incident detection and response procedures; we will notify affected users or societies where law requires.

No method of transmission over the internet is 100% secure. You are responsible for keeping your login credentials confidential. If you believe your account is compromised, contact support@flooradda.com immediately.

Retention & deletion

• Marketplace accounts — retained while active; deleted or anonymised after verified erasure request, subject to fraud-prevention and legal holds.
• Visitor & gate logs — retained per society configuration (default periods apply); societies may choose shorter retention where the product allows.
• Billing & tax records — retained as required by applicable law and society audit needs.
• Support audit logs — retained to demonstrate who accessed ERP data and why.

Deletion requests are verified for identity. Backup systems may retain encrypted copies for a limited period before automatic purge.

Data Protection Officer & grievances

We have designated a Data Protection Officer (DPO) to oversee privacy compliance and handle grievances.

Data Protection Officer
Email: privacy@flooradda.com
Bhojuveer, Varanasi, Uttar Pradesh, India
Bengaluru, Karnataka, India

For privacy-related complaints, access requests, or correction/erasure requests, write to the DPO with your registered email or phone for verification. We aim to acknowledge within 7 business days and resolve within statutory timelines (typically within 30 days, subject to society approval where ERP data is involved).

You may also use our Grievance redressal page or general support: support@flooradda.com.

Children

Our services are not directed at children under 18. We do not knowingly collect personal data from minors without parental or guardian consent as required by law.

Changes to this policy

We may update this Privacy Policy when our services or legal requirements change. Material updates will be posted on this page with a revised date. Continued use after changes constitutes acceptance of the updated policy.

Last updated: June 2026.