At EstateXapp ("us", "we", or "our"), we are deeply committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains in detail how we collect, use, disclose, and safeguard your information when you use our mobile application, web platform, and related services (collectively, the "Service"). By using our Service, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
To provide you with a comprehensive and seamless real estate experience, we collect the following categories of information:
1.1 Personal Information
- Identity Data: Full name, date of birth, and professional credentials (for registered Agents/Members)
- Contact Information: Email address, phone number, business address, and company/agency name
- Account Credentials: Username, encrypted password, and authentication tokens
- Subscription Data: Payment plan details, billing information, and transaction history
1.2 Property & Business Data
- Listing Information: Property addresses, descriptions, photos, videos, pricing, and specifications
- Lead Information: Client requirements, contact details, preferences, and communication history
- Business Cards: Digital business card data shared within the platform
1.3 Technical & Usage Data
- Device Information: Device type, operating system, unique device identifiers
- Log Data: IP address, browser type, access times, pages viewed, and interaction patterns
- Location Data: City and area information (not precise GPS coordinates)
- Analytics Data: How you interact with our Marketplace, search queries, and feature usage
2. How We Use Your Information
We use the collected data for the following legitimate business purposes:
- Service Delivery: Providing and maintaining our Property Management tools, Marketplace, and Smart Lead Matching features
- Business Connections: Facilitating connections between Real Estate Agents, Clients, and Team Members
- Billing & Subscriptions: Processing subscription payments, managing invoices, and handling financial transactions
- Platform Security: Monitoring for "Ghost Listings," fraudulent activities, spam, and ensuring Marketplace integrity
- Legal Compliance: Adhering to legal obligations under the Prevention of Electronic Crimes Act (PECA) 2016 and its 2025 amendments
- Communication: Sending important updates, notifications, and responding to support inquiries
- Improvement: Analyzing usage patterns to enhance user experience and develop new features
3. Data Sharing and Disclosure
Important: We do NOT sell your personal data to third parties for marketing purposes.
However, we may share your information in the following specific circumstances:
3.1 Public Marketplace Listings
- Information you voluntarily post in the Marketplace (properties, requirements, business cards) is visible to other registered users
- You control what information is made public through your privacy settings
3.2 Service Providers & Business Partners
- Payment Processors: Secure third-party payment gateways for subscription billing
- Cloud Storage: Cloudflare and other infrastructure providers for media hosting
- Analytics: Tools to understand user behavior (anonymized where possible)
3.3 Team & Sharing Features
- When you use Team Management features, designated team members can access shared listings and leads
- Information shared with "friends" in the network as per your sharing preferences
3.4 Legal Requirements & Law Enforcement
Mandatory Disclosure:
As per Section 8 of our Terms & Conditions and Pakistani law, we are legally obligated to disclose user records to the National Cyber Crime Investigation Agency (NCCIA) or other authorized law enforcement agencies if a user is found guilty of:
- Blasphemy or religious offense
- Anti-State activities or national security threats
- Spreading fake news or misinformation
- Hate speech or incitement to violence
- Any other criminal activity prohibited under PECA 2016
4. Data Security Measures
We implement industry-standard security measures to protect your information:
- Encryption: All passwords are securely hashed using modern encryption algorithms
- Secure Connections: HTTPS/SSL encryption for data transmission
- Access Controls: Role-based access to limit who can view sensitive data
- Regular Audits: Periodic security assessments and vulnerability testing
- Cloudflare Protection: DDoS protection and secure media delivery
User Responsibility: While we implement robust security measures, users are responsible for safeguarding their own login credentials. EstateXapp serves as a connection platform; we cannot be held liable for security breaches occurring due to user negligence or third-party attacks beyond our control.
5. Content Monitoring (AI & Manual Review)
In compliance with Social Media Protection and Regulation Authority (SMPRA) guidelines and our commitment to national laws:
- AI-Powered Monitoring: Our system uses artificial intelligence algorithms to detect and flag prohibited content including:
- Hate speech and discriminatory language
- Anti-State propaganda or terrorism-related content
- Blasphemous or religiously offensive material
- Inappropriate or explicit content
- User Reporting: Users can utilize the "Report" button to flag illegal, offensive, or suspicious content
- Manual Review: Our moderation team reviews flagged content within 24-48 hours
- Zero Tolerance Policy: Accounts engaging in prohibited activities may be suspended or permanently banned
6. Financial Transactions & Third-Party Dealings
Platform Role Clarification:
EstateXapp facilitates connections between real estate professionals and clients but does not process property sale/rental payments directly between parties. We are not responsible for:
- Privacy practices of users during offline financial dealings
- Disputes arising from property transactions conducted outside our platform
- Security of financial information exchanged between parties via external channels
Note: We only process subscription fees for platform access and features.
7. Your Privacy Rights
Depending on your jurisdiction and applicable laws, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate or incomplete information
- Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
- Opt-Out: Unsubscribe from marketing communications while retaining account access
- Data Portability: Receive your data in a structured, machine-readable format
- Restriction: Request limitation of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
How to Exercise Your Rights: Contact our Privacy Team at legal@estatexapp.com with your request. We will respond within 30 days.
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide you with our services
- Comply with legal obligations (e.g., tax records, law enforcement requests)
- Resolve disputes and enforce our agreements
- Maintain business records and analytics
After account deletion, we may retain certain information in anonymized form for analytical purposes and legal compliance.
9. Children's Privacy
Age Restriction: EstateXapp is intended for use by real estate professionals aged 18 years or older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at legal@estatexapp.com.
10. International Data Transfers
Your information may be transferred to and processed in countries outside Pakistan, including cloud storage providers. We ensure adequate safeguards are in place through:
- Contractual agreements with third-party processors
- Compliance with international data protection standards
- Use of secure, reputable service providers (e.g., Cloudflare)
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in:
- Our business practices
- Legal or regulatory requirements
- Industry standards and best practices
We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Effective Date"
- Sending an email notification to registered users (for significant changes)
- Displaying an in-app notification upon login
Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
This Privacy Policy is compliant with PECA 2016 & 2025 amendments