Privacy Policy

Draft for legal review. Version 2026-10-25-draft. The final text is being reviewed by a lawyer before BrokerBase launches publicly.

BrokerBase is a CRM for real estate brokerages in India, operated by Navior Tech, a sole proprietorship of Ajay Kumar, Room No. 7, RSB Tower, Mauli Baidban, Sector 80, Mohali, Punjab 140308, India ("we"). This policy explains what personal data BrokerBase handles and how.

Two kinds of data

• Your account data. When you or your team use BrokerBase, we decide how your account data is used. We are the data fiduciary for it.
• Your clients' data. Leads, contacts, property owners, buyers and tenants are entered by the brokerage. The brokerage decides why and how it is used and is the data fiduciary; we process it only to run BrokerBase for the brokerage, under our Data Processing Agreement. Clients who want to use their rights should contact the brokerage; if they write to us, we pass the request on.

What we collect about users

• Name, email address and mobile number, to create your account, sign you in and send you codes, invitations and notifications you asked for.
• Your password, stored only as a one-way hash that nobody can read.
• Sign-in details (IP address, browser, time) and a log of important actions, for security. The log is kept for 2 years.
• Your brokerage's details (name, city, RERA number, GSTIN) and plan payments.

We don't use tracking or advertising cookies. BrokerBase uses one cookie to keep you signed in.

Where data is stored

Data is stored in India: our servers and files are on Amazon Web Services in Mumbai and our database on Supabase in Mumbai. Two exceptions process some data outside India: the emails we send (sign-in codes, invitations and account notices) go through Resend, which keeps the recipient's address, the subject and a log of each email in the United States; and WhatsApp and Facebook Lead Ads, if a brokerage connects them, are provided by Meta, which may process data outside India. The current list is on our sub-processors page.

Who we share it with

Only the service providers listed on our sub-processors page, and only what they need to provide their service. We don't sell personal data or use it for advertising.

How long we keep it

As long as the account is active. When an account is closed or its plan runs out, it stays read-only for 90 days so the brokerage can download its data, and is then deleted. The audit log is kept for 2 years and backups for 30 days.

Security

Data is encrypted in transit and at rest, access inside a brokerage follows each person's role, one brokerage can never see another's data, and sensitive actions (exports, deletions, opening ID documents) are logged.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask for a summary of your data, correct or erase it, withdraw consent, nominate someone to act for you, and complain to us and then to the Data Protection Board of India. You can change your profile in the app and write to us for anything else.

Children

BrokerBase is for businesses and is not meant for anyone under 18.

Grievance officer

Ajay Kumar, Navior Tech, Room No. 7, RSB Tower, Mauli Baidban, Sector 80, Mohali, Punjab 140308. Email: hello@navior.tech. We reply within 7 days.

Changes

If we change this policy we'll show the new version in the app and ask brokerage Owners to accept it.