Data Policy

1. Data Collection

Spable collects and processes data to provide you with the best real estate experience. Our data collection includes:

• Account Data: Email, phone number, WhatsApp number, and profile information
• Property Data: Searches, favorites, viewing requests, and property interactions
• Communication Data: Messages, inquiries, and feedback
• Technical Data: Device information, IP address, browser details, and usage analytics
• Location Data: Geographic data to show relevant property listings

2. Data Processing

We process your data based on the following legal grounds:

• Consent: When you voluntarily provide information
• Contract Performance: To deliver services you've requested
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: When required by law

3. Data Storage

Your data is stored securely using:

• Encrypted databases hosted on secure servers
• Regular backups to prevent data loss
• Access controls limiting who can view your data
• Compliance with Indian data protection regulations

Data is retained as long as you maintain an active account, plus any legally required retention periods.

4. Data Sharing

We share your data only when necessary:

• With Property Owners/Agents: When you express interest in their listings
• With Service Providers: Hosting, analytics, and communication tools
• For Legal Compliance: When required by law enforcement or legal processes
• Business Transactions: In case of merger, acquisition, or sale

We never sell your personal data to third parties.

5. Data Security

We implement comprehensive security measures:

• SSL/TLS encryption for data transmission
• AES-256 encryption for stored sensitive data
• Multi-factor authentication options
• Regular security audits and penetration testing
• Employee training on data protection
• Incident response procedures

6. Your Data Rights

Under Indian data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to certain types of data processing
• Withdraw Consent: Revoke previously given consent

7. Data Breach Procedures

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours
• Inform relevant authorities as required by law
• Take immediate steps to contain the breach
• Provide guidance on protective measures you can take

8. International Data Transfers

Your data is primarily stored and processed in India. If we transfer data internationally, we ensure adequate safeguards are in place through standard contractual clauses or equivalent mechanisms.

9. Updates to Data Policy

We may update this policy periodically. Significant changes will be communicated via email or platform notification at least 30 days in advance.

10. Contact & Complaints

For data-related inquiries or to exercise your rights, contact our Data Protection Officer:

If you're not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.