Privacy Policy

1. Information we collect

• Account and staff information, such as name, staff code, role, contact details and sign-in records.
• Employee personal and professional details supplied for personnel administration, including addresses, emergency contacts, qualifications, employment history, PAN and full Aadhaar numbers where appropriately authorised. Full employee Aadhaar numbers are stored encrypted and displayed only in masked form to authorised administrators.
• Customer and lead information entered by authorised personnel, including name, phone number, contact details, property requirements, budgets, demographics and follow-up remarks where provided.
• Authorised cold-calling uploads, contact assignments, telecaller-entered outcomes and remarks, follow-up reminders and qualification history.
• Internal property inventory supplied through authorised uploads, including property specifications, rent/sale terms and owner contact details, plus employee contact unlocks, weekly allowance usage, access requests and administrator decisions.
• Onboarding, property and transaction information, including identity details or documents where provided, visit records, deal information, commissions and earnings.
• Site-visit location coordinates, reported accuracy and visit time, and an optional customer/site photograph.
• Project and employee star ratings and optional comments submitted through a visit feedback link.
• Operational information needed for security and support, such as session identifiers, IP address, browser/device information and activity logs.

2. Why we use this information

We use information to authenticate users, manage customer enquiries and property requirements, assign leads, record follow-ups and visits, review transactions, calculate authorised earnings, receive customer feedback and maintain the security and reliability of our services.

Employees should explain the purpose of collecting customer information and obtain any permission required before recording customer details, identity documents or photographs.

Employee profile information is used for authorised personnel administration. Admin and Super Admin can manage these profiles, and employees can submit and update their own details through the field app. Stored full Aadhaar numbers are not returned to the app or shown in full, and employee profiles are never exposed through public links.

3. Location, camera and phone calling

The field app requests location permission to record the current location when an employee checks in for a site visit. It does not continuously track background location. Camera permission is used to take a visit photo, and the visit photo can be skipped.

Lead calling opens the device's phone dialler after an authorised call reservation. Propways records the call attempt and employee-entered outcome or remarks; it does not record call audio or automatically establish whether a call was completed.

The web telecaller workspace displays only assigned calling contacts. Its call link can open a supported phone dialler without using the field-app call quota. Call outcomes are entered by the telecaller; no audio is recorded and calls are not automatically placed or verified.

4. Storage and third-party disclosure

Application records are stored in the company's database. Uploaded photographs and documents are stored separately in private server file storage. Production infrastructure is hosted on the company's Hostinger VM.

Propways does not sell customer or employee personal data or share it with third parties for their own marketing or independent commercial use. Hosting and infrastructure providers may process information as necessary to operate the service; this is distinct from providing customer data for third-party use. Disclosure may also be required by applicable law or a lawful request.

5. Access and public links

Access to internal records is limited by account roles and permissions. Authorised administrators may review visit feedback; the employee app shows feedback status, not the customer's rating or comment contents.

Employees and brokers can browse internal inventory without owner names or phone numbers. Brokers cannot access owner contacts. Employees can explicitly unlock contacts for five new properties per week, resetting every Monday at midnight in India time; additional properties require administrator approval. Item-specific access remains until revoked, and earlier unlocks do not consume a later week's allowance. Contacts are disclosed only to authorised administrators or an employee with current access to that property. Revocation blocks later retrieval but cannot recall details already seen or copied.

Public project pages display listed project information, brochures and any designated public contact details. Visit feedback pages display the project name, employee name and visit date, but not customer names, phone numbers, GPS coordinates, photographs or internal remarks. Anyone who receives a private feedback link can use it, so it should only be shared with the intended customer.

6. Sessions and cookies

The dashboard uses a session cookie for sign-in. The field app securely stores its sign-in session token on the device. These support authentication and access control; these services do not use advertising cookies.

7. Your requests and choices

To request access to, correction of or deletion of your information, or to raise a privacy concern, contact Propways using the company contact details provided directly to employees and customers. We may need to verify your identity before processing a request. Some records may need to be retained for legal, transaction, accounting or dispute purposes.

You can manage location and camera permissions in your device settings. Without location permission, a location-based site check-in cannot be completed; declining an optional photograph does not prevent submitting a visit.

8. Retention, security and policy changes

Information is retained as needed for the purposes described here and applicable obligations. See our Data Policy for data handling and retention details. We use access controls, authenticated sessions, HTTPS and restricted file access, but no system can guarantee absolute security.

We may update this policy as services or requirements change. The date above identifies the latest revision.