Welcome to Propdart. We are a real estate information service connecting people in the residential real estate market. Propdart and our subsidiaries and affiliates (collectively "Propdart") provide you with access to a variety of services, including but not limited to the www.propdart.com website (the "Website"), Propdart's mobile applications, and all products and services available through our Website (collectively, the "Services"). The Website is owned and operated by Propdart, with its studio at Himalaya Pride, Techzone 4, Greater Noida — 201310, Uttar Pradesh, India.

Our Privacy Policy is incorporated as part of the Propdart Terms of Use. Please read this Privacy Policy and our Terms of Use carefully before using our Services. By using Propdart's Services, you agree to the provisions of this Privacy Policy. If you do not want to be bound by this Policy, please do not use our Services.

This Policy is published in accordance with the Information Technology Act, 2000, the rules and regulations made thereunder, and India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). It is an electronic record generated by a computer system and does not require any physical, electronic or digital signature to be valid and binding on you.

Propdart is a real estate information service. We use the information we collect to:

• Help you find the most relevant information for your situation by customising our Services to optimise your experience;
• Keep you connected with Propdart across the internet and update you with residential real estate news and information; and
• Put you in touch with the right people to sell, buy, rent or research residential real estate, obtain a mortgage, and otherwise optimise the information we share with those parties to initiate a productive and efficient relationship.

Our goal here is to be completely transparent about the data we collect, why we collect it, and how we use it — so finding your next home stays a calm and considered experience.

Some parts of this Policy are directed at specific groups. This Policy applies to everyone who uses our Services, but we sometimes address particular users:

• Users — everyone who uses our Services.
• Real Estate Professionals (REPs) — users who have created accounts (free or paid) with us to sell or rent property, participate in our advertising services, or otherwise engage in Services directed at the professional real estate community. REPs include landlords, agents, developers, institutional property consultants, mortgage professionals and subscribers. We forward leads to REPs on your behalf, as described in this Policy.

From all visitors. Like most online services, we use technologies such as session and persistent cookies, web beacons, log data and third-party analytics services to understand how our Services are used. This includes user search preferences, interaction with ads on our Website and approximate location.

Our servers automatically record information ("Log Data") created by your use of the Services. Log Data may include your IP address, browser type, operating system, referring web page, pages visited, location, mobile number, mobile carrier, email address, device, search terms and cookie information. We use Log Data to provide, measure, customise and improve our Services, both individually and in aggregate. This Policy does not apply to — nor do we take responsibility for — information collected by third parties through links or advertisements on our Website.

Personal information you provide. We collect details such as your name, contact details, mobile number, email address and profile image/photo when you create an account or interact with our Services, so we can provide a smoother experience and tailor results to your preferences.

Cookies. Cookies are small data files transferred to your device. We use session cookies to keep you signed in and understand how you interact with our Services, and persistent cookies to recognise you on return visits (for example, remembering your last search or whether an advisor has responded). Most browsers accept cookies by default; you can change your settings or use third-party tools to refuse or delete cookies. Please note that some parts of our Services may not work correctly if cookies are disabled.

If you create a REP account — as a landlord, agent, developer or subscriber — we will ask you to provide certain information to set up the account, including your name, company (if applicable), phone number and email address. Paid REP accounts and subscribers must additionally submit campaign details and financial information such as card details and billing address so we can handle billing. A Propdart representative may call subscribers to verify the information provided.

Augmented data. We may occasionally obtain information about you from third parties to help advisors serve you better — for example, partners may help us estimate income ranges or buying likelihood. This augmented data is shared only with REPs (subscribers) you have chosen to contact through the Propdart Services.

Location data. If you provide location information (a postcode, street address or city) during registration or through account settings, we will store it and associate it with your account. We use location data to provide localised features, to analyse our Services with the help of third-party analytics, to share relevant marketing material, and to otherwise improve and customise the Services.

If you do not want us to share your information with other companies or organisations, please email support@propdart.com. If you want your information deleted from our Website, write to us at the same address.

As you use and navigate our Website, we collect information that may or may not be personally identifiable. We classify it as:

• Personal Information — personally identifiable information such as your name, address, age, email address and phone number.
• Sensitive Personal Information — financial information, passwords, and any biometric, medical or health-related information.
• Other Information — everything else, including device information, usage patterns and preferences, logs, local browser caches, location and IP address. This list is illustrative, not exhaustive.

Personal information is used to allow you to sign in, resolve service issues, inform you of new features and communicate with you about your use of the Website. Other information is used for:

• our business purposes, including viewing or advertising residential and commercial real estate or rental properties;
• analytics and data usage;
• improving the Website and your user experience; and
• providing targeted advertisements.

We will share information we collect — including personal information — with a third party if we believe in good faith that it is required to comply with applicable law, regulation, legal process or enforceable government request, or to protect our rights or interests.

From time to time we may make email addresses of Website visitors available to reputable organisations whose products or services we believe may interest you. If you do not want us to share your email, write to support@propdart.com and legal@propdart.com. The same applies if you do not wish to receive calls or text messages about new products, services or events.

Consent. Where the law requires it, we process your personal data on the basis of the consent you provide when you create an account, submit an enquiry, or otherwise interact with our Services. By using Propdart you consent to the collection, storage, processing, sharing and transfer of your information as described in this Policy. Your consent is free, specific, informed and unambiguous, and you give it through a clear affirmative action.

Withdrawing consent. Where we rely on consent, you may withdraw it at any time, as easily as you gave it, by writing to support@propdart.com or adjusting your account settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may mean we can no longer provide certain features of the Services.

Other lawful bases. In addition to consent, we may process your data where it is necessary to perform a contract with you, to comply with a legal obligation, to protect the vital interests of any person, or for our legitimate interests — such as securing our platform, preventing fraud, and improving the Services — provided those interests are not overridden by your rights and freedoms.

Marketing choices. You can opt out of promotional emails using the "unsubscribe" link in any message, change your notification preferences in your account settings, or write to support@propdart.com. We may still send you essential, non-promotional service and transactional messages (for example, security alerts, billing notices or responses to your enquiries).

Ad servers. To show offers that may interest you, we work with companies that place ads on our pages. As a result, ad-server companies may collect your domain type, IP address and clickstream information.

Non-Personally Identifiable Information (Non-PII). Non-PII cannot by itself identify an individual. It includes information from your browser, operating system or device — for example browser settings, device identifiers, URLs visited, app names, timestamps and referring pages. It may also include the number of times an ad has been shown to a particular browser or device, generic interest categories (e.g. "flat buyer"), and precise location when you permit such collection.

Use of Non-PII. We and our advertising and analytics partners use Non-PII (including cookie data, log data and mobile data) to provide and improve our Services, deliver interest-based advertising, sequence ads, customise ads by region, measure response and report aggregated effectiveness. We may also share anonymous profiles of users who viewed a property with REPs.

Opt out. You may opt out of Non-PII tracking on our Services. Opting out inserts a cookie in your browser identifying you as opted out. We will not be able to recognise you as opted out if you clear cookies, use a different browser or use a different device.

Direct contact with a REP. If you fill out a form or call a REP through our Website or app, we may share personally identifiable information you submit, along with information about your use of our Services, with the party you wished to contact. This may include search criteria you entered or Log Data we collected. If a REP wishes to contact you based on the anonymised profile of Propdart pages you visited, we will reach out first to confirm whether to make that connection. Occasionally we may share limited personally identifiable information with a third party that helps us improve the leads provided to subscriber REPs, solely for that purpose.

Mortgage services. If you request a mortgage quote through our Services, you authorise us to share the personally identifiable information necessary for our partners to deliver the quote. They may not use it for any other purpose.

User-generated content. If you use user-generated content services — posting a question, answer or blog on our Website — any personally identifiable information you submit can be read, collected or used by other users and may attract unsolicited messages. We are not responsible for the personally identifiable information you choose to submit in such forums.

Protecting ourselves and our users. We may release personal information when we believe it appropriate to comply with a legitimate law, regulation or legal request; to enforce our policies; to bill and collect amounts owed; to protect our rights or property; to safeguard our users; to address fraud, security or technical issues; or where we reasonably believe an emergency involving immediate danger of death or serious physical injury requires disclosure without delay.

All Propdart websites — including this Website — fully comply with applicable Indian laws. Propdart cooperates with all lawful enquiries and may disclose all or part of your personal details in response to law-enforcement requests or to prevent an imminent breach of law.

Mobile ad networks & analytics. For our mobile products we use third-party service providers for the limited purpose of analysing mobile Log Data and location data so we can improve and localise our Services, show relevant advertisements and understand how users interact with our Website and Services.

Subject to applicable law — including the DPDP Act — you have the following rights over your personal data, which you can exercise free of charge:

• Right to access — obtain confirmation of whether we process your data, together with a summary of the data we hold and how we use and share it.
• Right to correction & updating — have inaccurate or misleading data corrected, and incomplete data completed or updated.
• Right to erasure — request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to withdraw consent — withdraw any consent you previously gave, as easily as you gave it.
• Right to grievance redressal — have your complaints addressed by our Grievance Officer (see the final section).
• Right to nominate — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
• Right to data portability & to object — where applicable law (such as the EU/UK GDPR) grants it, receive your data in a structured, portable format or object to certain processing.

To exercise any of these rights, write to support@propdart.com or our Grievance Officer. We will verify your identity before acting on a request and respond within the timelines required by applicable law. These rights are not absolute and may be limited where the law permits — for example, to comply with a legal obligation, to establish or defend legal claims, or to prevent fraud. We will never discriminate against you for exercising any of your rights.

Region-specific rights. If you are in the European Economic Area or the United Kingdom, you may also lodge a complaint with your local data-protection authority. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information — we do not sell your personal information for money.

We retain personal data only for as long as is necessary to fulfil the purposes set out in this Policy — including to provide the Services, maintain your account, comply with our legal, tax, accounting and regulatory obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. The retention period varies depending on the type of data and the purpose for which it is held.

When personal data is no longer required, we will delete it or irreversibly anonymise it so it can no longer be associated with you. Where immediate deletion is not possible (for example, data held in secure backups), we will isolate the data and protect it from any further active use until deletion is possible. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required or permitted by law to retain it.

Our Services are intended for users who are 18 years of age or older, and we do not knowingly collect personal data from children. Under the DPDP Act, processing the personal data of a child (in India, a person under the age of 18) requires verifiable consent from a parent or lawful guardian. We do not undertake any processing that is likely to cause a detrimental effect on the well-being of a child, and we do not track, behaviourally profile, or direct targeted advertising at children.

If you are a parent or guardian and believe a child has provided us with personal data without your consent, please contact support@propdart.com and we will take reasonable steps to delete that information promptly.

Propdart is based in India, and your information is primarily stored and processed on secure servers located in India. To operate the Services we rely on reputable cloud and technology providers whose infrastructure may be located in other countries; as a result, your information may be transferred to, stored in, or processed in jurisdictions outside your own, whose data-protection laws may differ from those of your country.

Wherever your data is processed, we take reasonable steps to ensure it is treated securely and in accordance with this Policy, including putting in place appropriate contractual and technical safeguards with our service providers. We do not transfer personal data to any country or territory restricted for such transfers by the Government of India.

How we protect your data. We maintain commercially reasonable technical and organisational safeguards — including encryption of data in transit using Secure Sockets Layer (SSL/TLS), access controls, network protections and periodic security reviews — to protect your information against unauthorised access, loss, misuse or alteration. No method of transmission over the internet or method of electronic storage is completely secure, however, and we cannot guarantee absolute security.

Your role in security. Keeping your account credentials confidential is an essential part of protecting your data. Do not share your password with anyone, and notify us immediately at support@propdart.com if you suspect any unauthorised access to or use of your account.

Breach notification. In the unlikely event of a personal-data breach that affects you, we will act promptly to investigate and contain it, and will notify the relevant authorities — including the Data Protection Board of India — and the affected users where required by, and in the manner and within the timelines prescribed under, applicable law.

Account responsibility. You are responsible for maintaining the secrecy and accuracy of your password, email address and other account information at all times. We recommend a strong password that you do not reuse elsewhere. We are not responsible for personal data transmitted to a third party as a result of an incorrect email address.

Third-party websites. Our Website may contain links to other sites. We are not liable for any misuse of information by sites we link to, nor for the content of websites that use Propdart search functionality. Please review the privacy statements of those websites, which may differ from ours.

Sale or merger. Information about our users and our Website is a business asset of Propdart. As such, user information, including personal information, may be disclosed as part of any merger, acquisition, restructuring, sale, pledge of assets, insolvency, bankruptcy or receivership in which personal information would be transferred as a business asset.

Security. We use commercially reasonable security measures to protect against loss, misuse and alteration of information under our control. We cannot, however, absolutely guarantee the protection of information shared with us. When you enter sensitive information (such as a card number) on our forms, we encrypt the transmission using Secure Sockets Layer (SSL).

Policy changes. We may update this Privacy Policy to reflect changes to our information practices. If we make a material change to how we use your personal information, we will notify you by posting a notice on this Website before the change takes effect. We encourage you to review this page periodically.

Access to and use of our computer resources, platform and Services are subject to applicable laws, this Privacy Policy and our User Agreement. Any non-compliance may result in immediate suspension or termination of access and removal of non-compliant information. Continued use of the Services after updates constitutes acceptance of such updates.

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, the name and contact details of our Grievance Officer — who also handles data-protection queries and complaints — are provided below:

• Name: Prashant Kumar
• Entity: Propdart
• Address: Himalaya Pride, Techzone 4, Greater Noida — 201310, Uttar Pradesh, India
• Email: support@propdart.com
• Phone: +91 99993 24498

We aim to acknowledge every complaint within 48 hours of receipt and to resolve it within the timelines prescribed under applicable law. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India or any other competent regulatory or judicial authority.