Your data and privacy

Last updated 21 October 2026 · Version 2026-10-21

This page lists, item by item, the personal data BuyBloc collects, why, who else receives it and how long we keep it.

BuyBloc is for people aged 18 or older. If you are under 18, please do not sign in or share your details.

When you ask us about your data, we identify you by the phone number you sign in with.

What we collect

Phone number

Why we use it: To sign you in with a one-time code, and to send messages about your groups, site visits and payments.
Who else receives it: The SMS services that deliver codes and messages (Combirds/Edumarc, MSG91). WhatsApp (Meta) only if you choose WhatsApp. Razorpay when you pay. A project's builder when you book a visit or your group reaches the builder step. A land poster when you send them an enquiry.
How long we keep it: While your account is open. After you delete your account, one year (the legal minimum), then erased.

Name and email address

Why we use it: To address you, and to send receipts, tickets and the updates you choose.
Who else receives it: Our email service (Hostinger). Razorpay when you pay. A project's builder and its sales team for visits, webinars and group deals on that project. A land poster when you send them an enquiry.
How long we keep it: As for your phone number.

Profile photo (if you add one)

Why we use it: To show on your account.
Who else receives it: Stored on our file service (Bunny). Anyone with its link can open it.
How long we keep it: Until you remove it or delete your account; erased at once when you delete your account.

Payments, refunds and bookings

Why we use it: To take group fees, pay refunds and referral rewards, record a flat you book with a builder through BuyBloc, and keep the accounts the law requires.
Who else receives it: Razorpay handles the payment. We keep the order, payment and refund numbers, and the UPI ID used for a referral payout. We never see your card or bank details. A booking's record, with your name and contact details, is shared with that builder.
How long we keep it: As long as tax law requires. A booking's record is kept as the record of the sale, even after your account is erased.

Groups, interests, waitlists, site visits, webinars and event sign-ups

Why we use it: To run them: places, fees, reminders and the hand-over to the builder.
Who else receives it: The project's builder for that project only.
How long we keep it: While your account is open; one year after you delete it, then erased. Event sign-ups lose your name and contact details 13 months after the event.

Saved searches, wishlist, private notes and search history

Why we use it: So you can come back to them.
Who else receives it: No one.
How long we keep it: Until you remove them; erased at once when you delete your account.

Notification choices and your device's push token

Why we use it: To send only the messages you want, to the device you allowed.
Who else receives it: Google Firebase delivers push messages.
How long we keep it: While your account is open.

Questions you ask Mappi and the Ask box, and chat messages

Why we use it: To answer them.
Who else receives it: The AI services that write the answers: Google Gemini (chat), Groq and Cloudflare Workers AI (Ask), Jev (Ask and voice commands). We remove phone numbers, email addresses and ID numbers before sending.
How long we keep it: In our Ask log with your IP address for 13 months; after that the IP address, the link to you and the text are removed.

Your voice, when you tap the microphone

Why we use it: To turn what you say into text for Mappi.
Who else receives it: Groq or Cloudflare Workers AI, or your browser's own speech service (Google in Chrome).
How long we keep it: The recording is not stored. The words heard may stay in our staff activity feed for 13 months, then they are removed.

Location, only when you choose to share it

Why we use it: For land walks, live location sharing on a visit, and places near you.
Who else receives it: Google Maps sees what you type into the map search.
How long we keep it: Live location: up to 8 hours. A land walk stays with that land listing.

Land listings you post

Why we use it: To show the land to buyers.
Who else receives it: The listing is public on BuyBloc.
How long we keep it: The listing record stays; when you delete your account, your name and contact details are removed from it after one year.

Room measurements from a site visit

Why we use it: Your own record of the rooms.
Who else receives it: No one, unless you choose to share them; shared ones carry no name.
How long we keep it: Until you remove them.

Support tickets and messages

Why we use it: To answer you.
Who else receives it: No one outside BuyBloc.
How long we keep it: While your account is open; one year after you delete it, then erased.

Calls to our phone line

Why we use it: To answer your call. The call is recorded, and we say so at the start.
Who else receives it: OmniDimension, the service that runs the line, holds the recording, the transcript and your number.
How long we keep it: Until you ask us to delete it.

How the site is used (BuyBloc Insights)

Why we use it: To see which pages help and what breaks. Phone numbers and emails typed into searches are masked.
Who else receives it: No one. We use no Google Analytics or Meta tracking scripts.
How long we keep it: 180 days. Your IP address is not kept. Turned off when your browser sends Do Not Track or Global Privacy Control.

Ad and link clicks (where you came from)

Why we use it: To know which campaigns bring people to BuyBloc.
Who else receives it: No one.
How long we keep it: 13 months, then the link to you is removed.

Server logs: IP address, page asked for and time

Why we use it: To keep the site secure and to find misuse.
Who else receives it: No one, unless the law requires it.
How long we keep it: One year (the legal minimum), then erased.

Data	Why we use it	Who else receives it	How long we keep it
Phone number	To sign you in with a one-time code, and to send messages about your groups, site visits and payments.	The SMS services that deliver codes and messages (Combirds/Edumarc, MSG91). WhatsApp (Meta) only if you choose WhatsApp. Razorpay when you pay. A project's builder when you book a visit or your group reaches the builder step. A land poster when you send them an enquiry.	While your account is open. After you delete your account, one year (the legal minimum), then erased.
Name and email address	To address you, and to send receipts, tickets and the updates you choose.	Our email service (Hostinger). Razorpay when you pay. A project's builder and its sales team for visits, webinars and group deals on that project. A land poster when you send them an enquiry.	As for your phone number.
Profile photo (if you add one)	To show on your account.	Stored on our file service (Bunny). Anyone with its link can open it.	Until you remove it or delete your account; erased at once when you delete your account.
Payments, refunds and bookings	To take group fees, pay refunds and referral rewards, record a flat you book with a builder through BuyBloc, and keep the accounts the law requires.	Razorpay handles the payment. We keep the order, payment and refund numbers, and the UPI ID used for a referral payout. We never see your card or bank details. A booking's record, with your name and contact details, is shared with that builder.	As long as tax law requires. A booking's record is kept as the record of the sale, even after your account is erased.
Groups, interests, waitlists, site visits, webinars and event sign-ups	To run them: places, fees, reminders and the hand-over to the builder.	The project's builder for that project only.	While your account is open; one year after you delete it, then erased. Event sign-ups lose your name and contact details 13 months after the event.
Saved searches, wishlist, private notes and search history	So you can come back to them.	No one.	Until you remove them; erased at once when you delete your account.
Notification choices and your device's push token	To send only the messages you want, to the device you allowed.	Google Firebase delivers push messages.	While your account is open.
Questions you ask Mappi and the Ask box, and chat messages	To answer them.	The AI services that write the answers: Google Gemini (chat), Groq and Cloudflare Workers AI (Ask), Jev (Ask and voice commands). We remove phone numbers, email addresses and ID numbers before sending.	In our Ask log with your IP address for 13 months; after that the IP address, the link to you and the text are removed.
Your voice, when you tap the microphone	To turn what you say into text for Mappi.	Groq or Cloudflare Workers AI, or your browser's own speech service (Google in Chrome).	The recording is not stored. The words heard may stay in our staff activity feed for 13 months, then they are removed.
Location, only when you choose to share it	For land walks, live location sharing on a visit, and places near you.	Google Maps sees what you type into the map search.	Live location: up to 8 hours. A land walk stays with that land listing.
Land listings you post	To show the land to buyers.	The listing is public on BuyBloc.	The listing record stays; when you delete your account, your name and contact details are removed from it after one year.
Room measurements from a site visit	Your own record of the rooms.	No one, unless you choose to share them; shared ones carry no name.	Until you remove them.
Support tickets and messages	To answer you.	No one outside BuyBloc.	While your account is open; one year after you delete it, then erased.
Calls to our phone line	To answer your call. The call is recorded, and we say so at the start.	OmniDimension, the service that runs the line, holds the recording, the transcript and your number.	Until you ask us to delete it.
How the site is used (BuyBloc Insights)	To see which pages help and what breaks. Phone numbers and emails typed into searches are masked.	No one. We use no Google Analytics or Meta tracking scripts.	180 days. Your IP address is not kept. Turned off when your browser sends Do Not Track or Global Privacy Control.
Ad and link clicks (where you came from)	To know which campaigns bring people to BuyBloc.	No one.	13 months, then the link to you is removed.
Server logs: IP address, page asked for and time	To keep the site secure and to find misuse.	No one, unless the law requires it.	One year (the legal minimum), then erased.

Your rights

See your data: Account, Your data, Download my data. The file also lists everyone we shared it with.
Correct it: Account, My account. Change your phone number or email with a one-time code.
Delete it: Account, Your data, Delete my account. We close it at once. Some records stay for one year because the law requires it, and payment records as long as tax law requires. If you sign in again within that year, you can reopen it.
Withdraw consent: Account, Notifications: switch off offers, email, push, SMS or WhatsApp at any time. It is as easy as switching them on.
Name someone to act for you: Email us the name and contact details of the person who may use these rights if you cannot.
Complain: Email us first. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.

Go to Your data in your account

Outside India

Some of these services process data outside India, for example Google, Meta, Groq and Cloudflare. Our encrypted backups are stored in Singapore.

Security

Backups are encrypted. Staff sign in with a second step, and every time staff open a buyer's details it is logged. If your data is ever exposed, we will tell you and the Data Protection Board of India without delay.

Contact us

Privacy and grievance contact, BuyBloc Private Limited: privacy@buybloc.in

We reply within 30 days.

Version 2026-10-21, last updated 21 October 2026. See also our Privacy Policy.