PRIVACY POLICY
MillionFlats Pvt. Ltd.
Last Updated: 11th Feb, 2026
Jurisdiction: India (Primary) | UAE Operations Covered
1. INTRODUCTION
MillionFlats Pvt. Ltd. (“Company,” “we,” “us,” or “our”) is a company duly incorporated under the laws of India, having its registered office at [Insert Registered Address]. We own and operate the platform MillionFlats accessible via website www.millionflats.com and mobile applications (collectively, the “Platform”).
This Privacy Policy (“Policy”) explains how we collect, process, store, disclose, and protect your Personal Data when you access or use our Platform and services. This Policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) , the Information Technology Act, 2000, and the rules thereunder .
By accessing or using our Platform, you expressly consent to the collection, processing, storage, and disclosure of your Personal Data as described in this Policy. If you do not agree with any provision herein, you must immediately cease using our Platform.
2. DEFINITIONS
| Term | Definition |
|---|---|
| “Platform” | means the website www.millionflats.com, mobile applications, APIs, and all related digital services operated by MillionFlats. |
| “Services” | means all offerings provided through the Platform, including but not limited to AI-powered property recommendations, immersive 3D tours, AI Trust Score™ analytics, agent ProScore™ verification, ecosystem partner referrals, and SaaS subscriptions. |
| “User” or “You” | means any person who accesses or uses the Platform, including property buyers, sellers, investors, real estate agents, developers, ecosystem partners, and visitors. |
| “Personal Data” | means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, 2023. |
| “Ecosystem Partners” | means third-party service providers including home loan providers, legal firms, insurance companies, interior designers, packers and movers, property managers, and Vastu/Feng Shui consultants. |
| “AI AI™” | means our proprietary artificial intelligence system that generates trust scores, property valuations, and investment insights. |
3. PERSONAL DATA WE COLLECT
3.1 Information You Provide Directly
We collect the following categories of Personal Data when you:
| Category | Specific Data Points | Purpose |
|---|---|---|
| Registration & Profile | Name, email address, phone number, password, profile photo, user type (buyer/seller/agent/developer/partner) | Account creation, identity verification, personalized experience |
| Agent/Developer/Partner Information | License numbers, RERA registration details, business registration certificates, years of experience, specialization areas, portfolio links | Verification for AIPro™ scoring, platform trust building |
| Property Information | Property address, ownership documents, photographs, floor plans, pricing details | Listing creation, 3D tour generation, AI valuation |
| Financial Information | Bank account details (for subscription payments), transaction history | Payment processing, subscription management |
| Ecosystem Partner Onboarding | Company registration, contact details, service categories, certifications, fee structures | Partner verification, user matching |
| Communications | Queries, feedback, support requests, chat history | Customer support, service improvement |
3.2 Information Collected Automatically
Usage Data: Pages visited, features used, time spent, clicks, searches, properties viewed, 3D tour interactions
Device Information: IP address, browser type, operating system, device identifiers
Location Data: Approximate location based on IP address; precise location only with explicit consent
Cookies & Tracking Technologies: We use cookies, pixels, and similar technologies for analytics, personalization, and advertising
3.3 Information from Third Parties
AI AI Data: Our AI generates insights, trust scores, and valuations based on your platform activity and publicly available data
Ecosystem Partners: We may receive confirmation of service delivery, lead status, and transaction updates from partners
Social Media: If you interact with our social media pages, we may receive publicly available profile information
4. HOW WE USE YOUR PERSONAL DATA
We use your Personal Data only for the following legitimate purposes:
| Purpose | Legal Basis (DPDP Act) |
|---|---|
| To provide and deliver our Services, including AI-powered property matching, 3D tours, and trust scores | Performance of contract |
| To verify agent and developer credentials for AIPro™ scoring | Consent and legitimate interest |
| To connect you with ecosystem partners (loans, legal, insurance, etc.) based on your expressed interest | Consent |
| To process subscription payments and manage your account | Performance of contract |
| To communicate with you regarding service updates, inquiries, and transaction-related information | Performance of contract |
| To send marketing and promotional communications about properties, services, and offers (with opt-out option) | Consent |
| To improve our AI algorithms, Platform functionality, and user experience | Legitimate interest |
| To comply with legal obligations and respond to lawful requests from government authorities | Legal obligation |
| To detect, prevent, and address technical or security issues | Legitimate interest |
Cross-Border Data Transfer: As we operate in India and the UAE, your Personal Data may be transferred to and processed in the UAE. By using our Platform, you consent to such cross-border transfer in compliance with the DPDP Act, 2023 .
5. DISCLOSURE AND SHARING OF PERSONAL DATA
We do not sell your Personal Data. We may share your information only in the following circumstances:
5.1 Within the MillionFlats Ecosystem
| Recipient | Circumstance | Data Shared |
|---|---|---|
| Real Estate Agents & Developers | When you express interest in a property listing | Your name, contact information, inquiry details |
| Ecosystem Partners | When you request a specific service (loan, legal, interior design, etc.) | Your name, contact details, property/service requirements |
| Other Users | For transactions you initiate (e.g., seller to buyer) | As necessary to complete the transaction |
5.2 Third-Party Service Providers
We engage trusted third parties to assist in operating our Platform:
Cloud Infrastructure: Hosting providers in India and UAE
Payment Processors: For secure subscription payment processing
Analytics Providers: Google Analytics, Meta Pixel, LinkedIn Insights
Customer Support Tools: For managing communications
AI/ML Service Providers: For enhancing our AI AI capabilities
All such providers are contractually bound to process data only on our instructions and in compliance with applicable data protection laws.
5.3 Legal Obligations
We may disclose your Personal Data if required to:
Comply with any valid legal process, government request, or applicable law
Enforce our Terms & Conditions
Protect the rights, property, or safety of MillionFlats, our users, or the public
5.4 Business Transfers
In the event of a merger, acquisition, financing, or sale of assets, your Personal Data may be transferred as a business asset. We will notify you of any such change of ownership or control.
6. YOUR RIGHTS AND CHOICES
Under the DPDP Act, 2023 and other applicable laws, you have the following rights:
| Right | Description | How to Exercise |
|---|---|---|
| Right to Access | Request confirmation of whether we process your Personal Data and obtain a copy | Email grievance officer |
| Right to Correction | Request correction of inaccurate or incomplete Personal Data | Update via account settings or email |
| Right to Erasure | Request deletion of your Personal Data, subject to legal retention requirements | Email grievance officer |
| Right to Withdraw Consent | Withdraw consent for non-essential processing (e.g., marketing) | Unsubscribe link or email |
| Right to Grievance Redressal | Lodge complaints regarding data processing | Contact grievance officer |
Response Time: We will respond to all legitimate requests within 15 days of receipt, as mandated under Indian law .
Opt-Out of Marketing Communications: You may unsubscribe from promotional emails by clicking the “unsubscribe” link in any such communication, or by contacting us directly.
7. DATA RETENTION
We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including:
As long as your account is active
To provide you with Services
To comply with legal obligations (e.g., tax, audit, anti-money laundering laws)
To resolve disputes and enforce our agreements
When Personal Data is no longer required, we securely delete or anonymize it.
8. DATA SECURITY
We implement reasonable and appropriate technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These include:
Encryption: SSL/TLS encryption for data in transit
Access Controls: Role-based access restrictions for employees and contractors
Regular Audits: Periodic security assessments
Secure Storage: Data stored on secure servers with firewall protection
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take all reasonable precautions to protect your information.
9. CHILDREN'S PRIVACY
Our Platform is not intended for individuals under the age of 18. We do not knowingly collect Personal Data from minors. If we become aware that a minor has provided us with Personal Data, we will take steps to delete such information.
10. THIRD-PARTY LINKS
Our Platform may contain links to third-party websites, including those of our ecosystem partners, advertisers, and social media platforms. This Privacy Policy does not apply to such third-party sites. We encourage you to review the privacy policies of any third-party websites you visit .
11. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies to:
Recognize you when you return to our Platform
Remember your preferences and settings
Analyze how you interact with our Platform
Deliver relevant advertising
Your Choices: Most web browsers allow you to control cookies through their settings. Disabling cookies may affect your ability to use certain features of our Platform .
12. INTERNATIONAL USERS
Our Platform is primarily intended for users in India and the UAE. If you access our Platform from outside these jurisdictions, you do so at your own initiative and are responsible for compliance with local laws. By providing your Personal Data, you consent to its transfer, storage, and processing in India and the UAE.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will be posted on this page with a revised “Last Updated” date. If we make material changes, we will notify you via email or a prominent notice on our Platform prior to the change becoming effective .
Your continued use of the Platform after such updates constitutes your acceptance of the revised Policy.
14. GRIEVANCE REDRESSAL AND CONTACT INFORMATION
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Grievance Officer:
| Designation | Details |
|---|---|
| Name | Tarique Mansuri |
| Designation | CEO |
| [email protected] | |
| Address | Rajkot, 360005, Gujarat, India |
| Response Commitment | Acknowledgment within 24 hours; resolution within 15 days |
For general inquiries: [email protected]