Privacy Policy

NM BuildSenseAI Pvt Ltd (“NM BuildSenseAI”, “PropOS”, “we”, “us”, or “our”) operates the website buildsense.in and the PropOS platform, including its WhatsApp-based AI agents (collectively, the “Services”). This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, use PropOS, or interact with our AI agents (including Ridhi, Sidhi, Riya, Aryan, Kuber, and Dev) on behalf of a real estate developer.

This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and other applicable Indian laws. By using our Services, you agree to the practices described in this Policy. If you do not agree, please do not use our Services.

PropOS is a business-to-business (B2B) SaaS platform used by real estate developers (“Customers”). In the course of providing our Services, we process personal data belonging to three broad categories of individuals:

• Developer Personnel — employees of our Customers (e.g., sales teams, project managers) who use PropOS directly.
• Channel Partners (Brokers) — individuals who communicate with a Customer's sales team via WhatsApp through Ridhi or other PropOS agents.
• Property Buyers / End Customers — individuals whose enquiry, booking, or payment-related information may be referenced in conversations processed by PropOS on behalf of a Customer.

Where a Customer (the real estate developer) is the one collecting and instructing us to process this data, NM BuildsenseAI acts primarily as a Data Processor on behalf of that Customer (the Data Fiduciary), and in certain respects — such as for our own website visitors — as a Data Fiduciary in our own right.

3.1 Information You Provide Directly

• Contact details: name, phone number, email address, company name, and designation, submitted via our website forms, demo requests, or onboarding process.
• Account and business information: company registration details, RERA project information, and unit inventory data, provided by Customers to configure PropOS.
• Communications: any information shared with us via email, WhatsApp, or phone when you contact us for support, sales, or partnership enquiries.

3.2 Information Processed Through PropOS Agents

• WhatsApp conversation content: messages exchanged between channel partners, buyers, and a Customer's team, processed by Ridhi and other PropOS agents to generate responses.
• Property and transaction data: unit availability, pricing, booking status, payment milestones, and related real estate transaction details supplied by the Customer.
• RERA compliance data: project registration numbers, regulatory filing dates, and compliance document metadata.

3.3 Information Collected Automatically

• Usage data: pages visited on buildsense.in, time spent, browser type, device type, and IP address.
• Cookies and similar technologies, as described in Section 7 below.

• To provide, operate, and maintain the PropOS platform and its AI agents, including generating responses to WhatsApp messages on behalf of a Customer.
• To process and route real estate enquiries (availability, pricing, site visit scheduling) accurately between channel partners, buyers, and a Customer's sales team.
• To improve the performance, reliability, and accuracy of our Services using anonymised, aggregated or de-identified data. We do not use Customer-specific confidential information, PII or conversation content to train publicly available AI models.
• To communicate with Customers, prospective customers and visitors regarding our Services.
• To comply with applicable legal, regulatory and contractual obligations, including those under RERA and the DPDPA.
• To detect, investigate and prevent fraud, misuse or security incidents.

PropOS uses third-party Large Language Model (LLM) providers — including but not limited to OpenAI and Anthropic — to process certain conversational data in order to generate AI agent responses.

• We select AI service providers that offer enterprise or business-tier data processing agreements that restrict the use of submitted data for the provider's own model training, wherever commercially and technically available.
• Where any LLM provider's infrastructure involves processing or storage outside India, transfers are conducted in a manner intended to comply with the cross-border data transfer provisions of the DPDPA and rules notified thereunder.
• We do not control the third-party provider's own privacy practices beyond our contractual arrangements with them. A Data Processing Agreement is available to Customers on request.

We also use cloud infrastructure providers (such as Amazon Web Services) to host PropOS, and WhatsApp Business Solution Providers (BSPs) to enable WhatsApp-based messaging. These providers process data solely to deliver the underlying infrastructure or messaging service and are bound by their own data processing terms.

6A. Customer Data Ownership

All customer data, project information, inventory data, broker information, buyer information, transaction records, WhatsApp conversation records, documents, reports, and other information processed through PropOS remain the property of the respective Customer (real estate developer). NM BuildSenseAI does not acquire ownership rights over Customer Data.

Upon termination of a Customer relationship, Customer Data shall be returned, deleted, anonymised, or otherwise handled in accordance with the applicable subscription agreement, data processing agreement, and legal retention obligations.

We do not sell personal data. We may share personal data:

• With the relevant Customer (real estate developer) on whose behalf the data was collected or generated.
• With third-party service providers described in Section 5, strictly as needed to operate the Services.
• With professional advisors (legal, accounting, compliance) where necessary for legitimate business operations.
• With government authorities or regulators where required by law, court order, or lawful government request.
• In connection with a merger, acquisition, financing, or sale of business assets, subject to confidentiality protections.

• Essential cookies necessary for the website to function correctly.
• Analytics cookies that help us understand how visitors use our website.
• You may control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

• Customer data is retained for the duration of an active subscription plus a reasonable period thereafter for legal, accounting or dispute-resolution purposes.
• WhatsApp conversation data is retained per the terms agreed with each Customer and may be deleted or anonymised on termination, subject to applicable retention requirements (e.g. RERA recordkeeping).
• Website visitor and enquiry data is generally retained for 24 months from the date of last interaction unless a shorter retention period is requested or a longer period is required by law.

If you are a Data Principal under the DPDPA, you have the following rights, subject to applicable conditions and exceptions:

• Right to access information about how your personal data is processed.
• Right to correction and updating of inaccurate or incomplete personal data.
• Right to erasure of personal data no longer necessary for its collection purpose, subject to legal retention requirements.
• Right to grievance redressal in relation to the processing of your personal data.
• Right to nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

Where NM BuildsenseAI acts as a Data Processor on behalf of a Customer, requests should generally be directed to the relevant Customer first. To exercise rights directly with us, or for any privacy-related query or grievance, please contact our Grievance Officer:

• Encryption of data in transit and at rest, wherever technically feasible.
• Access controls restricting personal data access to authorised personnel on a need-to-know basis.
• Regular review of our security practices as our systems and team scale.

No method of transmission or storage is completely secure. In the event of a personal data breach likely to result in harm, we will notify affected individuals and the Data Protection Board of India in accordance with the DPDPA and applicable rules.

Our Services are intended for use by businesses and individuals above the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete such data promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy on this page with a revised “Effective Date.”