Privacy Policy

01 Who is Responsible for What

Linkfloo is a customer relationship management (CRM) utility for real estate professionals. Under data protection law (including India's Digital Personal Data Protection Act, 2023), two distinct categories of data exist within the Services:

• (a) Your Account Data (Data Fiduciary): Data concerning you as a broker, agent, or agency administrator (e.g., your name, mobile number, login credentials, and subscription status). For this data, LinkFloo acts as the Data Fiduciary determining the purposes and means of processing.
• (b) Your Client & Lead Data (Data Processor): Information you enter regarding prospective buyers, tenants, property owners, and channel partners ("Client Data"). For this data, you (or your brokerage organization) act as the Data Fiduciary deciding why and how information is gathered. LinkFloo acts strictly as a Data Processor hosting, indexing, and synchronizing records solely according to your directions.

02 Information We Collect

2.1 Information You Provide Directly

• Account Registration: Full name, mobile phone number, email address, workspace name, agency role, and organization invite codes.
• Real Estate Records (Client & Property Data):
  • Leads: Client names, contact numbers, property preferences (budget range in Lacs/Crores, BHK configuration, locality, transaction type: Buy/Rent/Invest), follow-up timelines, and notes.
  • Listings: Property addresses, pricing, unit specifications, floor plans, and uploaded media assets.
  • Activity History: Manual call outcome logs, site visit schedules, deal statuses, and timeline notes.
• Direct Inquiries: Communications submitted to our support team or through feedback channels.

2.2 Information Collected on the Website

• Early Access / Onboarding Form: Name, phone number, work email address, city/market, and agency team size submitted on linkfloo.com.
• Server & Network Logs: IP address, browser type, referring URL, device operating system, and timestamp metrics collected via cloud infrastructure.

2.3 Information Collected Automatically in the Mobile App

• Technical Identifiers: Device model, operating system version, LinkFloo application build version, language settings, and unique cryptographic installation IDs.
• Authentication Credentials: Secure session tokens (JWT) encrypted within on-device secure storage (Keystore / Keychain) to maintain authentication state.

2.4 Offline Local-First Database

LinkFloo is engineered offline-first. Your leads, listings, notes, and preferences are stored directly on your mobile device using an encrypted local SQLite/Drift database. When offline, all queries run locally. Delta synchronization occurs in the background once cellular or Wi-Fi connectivity is detected.

2.5 Mobile Device Permissions

• Phone Calling (Intent): Triggers your native phone dialer (tel:). LinkFloo does not record audio, tap phone lines, or read native carrier call recordings. We observe app return states to open follow-up outcome cards.
• Photos & Storage: Requested solely when you choose to capture or attach property photos, floor plans, or export branded PDF brochures.
• Notifications: Enables local device alerts for follow-up reminders and scheduled site visits.
• Contacts (Optional): If explicitly permitted, allows you to import client contacts directly from your phone book into LinkFloo without typing numbers manually.

03 How We Use Information

We process collected data strictly for legitimate operational purposes:

1. To provision and manage your individual account and multi-agent agency workspaces.
2. To execute core CRM operations: maintaining lead logs, follow-up cadences, property matching, and delta synchronization across your authorized devices.
3. To dispatch transactional communications, including Firebase OTP verification codes, critical security alerts, and system notices.
4. To review and respond to early onboarding inquiries submitted via the website.
5. To preserve system security, debug application crashes, and prevent unauthorized attempts to breach sync endpoints.
6. To satisfy applicable regulatory, tax, and law enforcement requirements in India.

04 Legal Basis & Consent

We process personal data on the basis of your explicit consent provided during mobile OTP verification, website form submission, or workspace onboarding. Where permissible under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, processing is also conducted for specified legitimate uses, including fulfilling service commitments, securing systems, and legal compliance.

You may revoke consent at any time (see Section 9). Revocation may restrict or deactivate features that rely on cloud synchronization.

05 Who We Share Data With

• Your Organization Workspace: Records entered by team members are shared across that organization’s workspace in accordance with role configurations defined by the agency administrator.
• Cloud Infrastructure Providers: We utilize trusted enterprise infrastructure providers, primarily Amazon Web Services (AWS) (hosting compute, managed databases, object storage, and edge distribution). These partners process data strictly under confidentiality agreements to provide infrastructure services.
• Legal & Statutory Demands: We may disclose data if legally required by valid court orders, subpoenas, or statutory law enforcement directives under Indian jurisdiction.
• Business Transfers: In the event of a merger, acquisition, or restructuring, user records may be transferred to the successor entity under equal privacy protections, with advance notice provided to you.

06 Storage, Cloud & Security

• Server Location: Cloud databases and sync endpoints are hosted on Amazon Web Services (AWS) infrastructure located in India (Asia Pacific - Mumbai ap-south-1).
• Encryption Standards: Data in transit is secured using modern TLS 1.3 encryption (HTTPS). Locally stored tokens utilize device-level cryptographic sandboxing.
• Security Measures: We enforce tokenized REST APIs, rate limiting, and role-based access controls to safeguard data integrity.
• Device Hygiene: Because LinkFloo stores operational data locally, you are responsible for maintaining a screen lock (PIN, biometric) on your mobile device. If your device is lost or compromised, notify our support desk immediately.

07 Data Retention Timeline

• Active Accounts: We retain account data and customer listings for as long as your workspace account remains active.
• Account Deletion: Upon receiving an account termination request, production server records are deleted or permanently anonymized within thirty (30) days, except where statutory retention mandates require preservation.
• Disaster Recovery Backups: Residual encrypted database snapshots are purged and overwritten through automated backup cycles within ninety (90) days.
• Website Inquiries: Early access inquiries submitted through the website are retained for up to twelve (12) months or until deletion is formally requested.
• Local Device Records: Locally cached records are immediately erased whenever you log out or uninstall the App from your device.

08 Cookies & Website Logs

The website linkfloo.com is a static informational and onboarding portal. It does not deploy intrusive cross-site advertising trackers. Standard server-side logs capture operational metrics (IP addresses, request headers, error codes) solely to maintain web performance, prevent DDoS attacks, and optimize page load speeds across Indian internet service providers.

09 Your Legal Rights (DPDPA 2023)

In accordance with the Digital Personal Data Protection Act, 2023, you hold specific statutory rights regarding your personal information:

1. Right to Access: You may request a summary of your personal data processed by LinkFloo along with processing identities.
2. Right to Correction & Updating: You may modify or update inaccurate or incomplete information directly inside App settings or by contacting our team.
3. Right to Erasure: You may request the deletion of your personal data when it is no longer necessary for the purpose it was gathered.
4. Right to Withdraw Consent: You may withdraw processing consent at any time by sending written notice.
5. Right to Nominate: You have the right to nominate another individual who shall exercise your data rights in the event of death or incapacity.
6. Right of Grievance Redressal: You have the right to register complaints regarding data handling directly with our designated Grievance Officer.

Note regarding Client Records: If you are a prospective buyer or tenant whose contact was recorded by an agent using LinkFloo, please direct your request to that agent or brokerage firm first, as they determine the lawful basis of your data. We will assist in routing requests where appropriate.

10 Children's Privacy

LinkFloo is a specialized B2B commercial productivity tool designed exclusively for adult real estate professionals aged 18 and older. We do not knowingly collect personal data from minors. If we discover that a minor's information has been submitted, we will take immediate measures to erase that data from our production storage.

11 Policy Modifications

We may update this Privacy Policy from time to time to align with platform enhancements or legislative updates. The "Last updated" date at the top indicates the current effective release. Material changes will be highlighted via in-app alerts, website notices, or email communications. Continuing to utilize LinkFloo after publication signifies acceptance of the amended terms.

12 Grievance Redressal & Operator Details

In accordance with the Information Technology Act, 2000, the rules framed thereunder, and the Digital Personal Data Protection Act, 2023, our designated Grievance Officer and operational details are provided below: