1.0 Overview
BILDIOO ("BILDIOO," "we," "us") is committed to protecting the personal information of every homeowner, contractor, and visitor who uses our platform.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use bildioo.in or any associated BILDIOO service.
THE SHORT VERSION: We collect only what we need to match homeowners with contractors. We never sell your data. We never share it with anyone outside what is needed to operate the platform.
This policy is governed by the Digital Personal Data Protection Act 2023 (DPDP Act), the Information Technology Act 2000, and the IT (Reasonable Security Practices) Rules 2011.
2.0 What Personal Data We Collect
Information You Provide
- Identity: Full name, date of birth, PAN number, Aadhaar number (for KYC verification), passport or OCI card for NRI users.
- Contact: Mobile number, email address, WhatsApp number, residential or business address.
- Project Information: Plot location, plot dimensions, zone, project type, budget range, and any specific requirements you describe.
- Contractor Business Data: GST certificate, trade licence, completed project references, portfolio photographs, and bank account details for commission payment.
Information We Collect Automatically
- Usage data: Pages visited, features used, time spent, searches performed.
- Device data: Device type, operating system, browser type and version.
- Location data: Approximate location from IP address; precise GPS only if you enable location services.
- Log data: Server logs including IP address and timestamps.
From Third Parties
- AUDA / AMC zone records to verify plot location.
3.0 How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Identity, Contact | Contract / Consent |
| Processing your project brief | Project, Identity | Contract |
| Broadcasting your brief to contractors | Project data (zone, size, budget) | Contract |
| Verifying contractor credentials | Business, Identity | Contract / Legal |
| Arranging your free site visit | Contact, Location | Consent |
| Collecting contractor commission | Business, Financial | Contract |
| Fraud detection and platform security | Usage, Device, Log | Legitimate interest |
| Customer support and dispute resolution | All relevant data | Contract / Legitimate interest |
| Sending notifications and updates | Contact | Contract |
| Marketing communications | Contact | Consent (opt-in only) |
| Platform improvement and analytics | Usage, Device (anonymised) | Legitimate interest |
5.0 How We Protect Your Data
- Encryption in transit: All data between your device and BILDIOO servers is encrypted using TLS 1.2 or higher.
- Encryption at rest: Sensitive data fields including financial data and Aadhaar numbers are encrypted using AES-256.
- Access controls: Access to personal data is restricted to authorised personnel on a need-to-know basis only.
- Security audits: We conduct periodic security assessments of our platform.
- Breach response: We maintain a documented data breach procedure and will notify affected users within 72 hours of confirming a breach.
YOUR RESPONSIBILITY: You are responsible for keeping your account password confidential. BILDIOO will never ask you to share your password by phone, email, or message. If asked for this by anyone claiming to be BILDIOO, treat it as fraudulent.
6.0 Your Rights Under the DPDP Act 2023
As a Data Principal under the Digital Personal Data Protection Act 2023, you have the following rights:
- Right to Access: Request a summary of the personal data BILDIOO holds about you and how it is used.
- Right to Correction: Request correction of any inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where BILDIOO is no longer required to retain it. Note that data relating to active obligations may not be deleted until relevant retention periods expire.
- Right to Grievance Redressal: Raise a complaint with BILDIOO's Data Protection Officer and receive a response within 48 hours.
- Right to Withdraw Consent: Withdraw consent for processing based on consent (such as marketing) at any time without affecting past processing.
To exercise any of these rights, write to bildioo.official@gmail.com with your registered contact details. We will respond within 30 days and may need to verify your identity before processing your request.
7.0 Third-Party Services
The platform integrates with the following third-party services:
- WhatsApp Business API: Project notifications to users who opt in. Your number is used only for notifications you consent to.
- Google Analytics: Anonymised usage analytics. Data is aggregated and not linked to individual users.
The platform may contain links to third-party websites. BILDIOO is not responsible for the privacy practices of those sites.
8.0 Children's Privacy
BILDIOO is not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to BILDIOO, please contact us immediately at bildioo.official@gmail.com and we will delete it promptly.
9.0 Changes to This Policy
BILDIOO may update this Privacy Policy to reflect changes in our data practices or legal requirements. When we do, we will:
- Post the updated policy on bildioo.in with a revised date.
- Notify registered users by email at least 14 days before material changes take effect.
- Where required by law, obtain fresh consent for new processing activities.
Continued use of the platform after the effective date of any revision means you accept the updated policy.