Privacy Policy

Last updated: 27 April 2026

Bhagyanagar.rent ("we", "our", or "us") is operated in Hyderabad, Telangana, India. This Privacy Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP), the Information Technology Act, 2000, and the IT (Reasonable Security Practices) Rules, 2011.

What we collect

Most browsing is anonymous — you can open the map, search, and view listings without giving us anything.

What you give us only when you choose to:

Email — required when you post a rental listing, flatmate post, or seeker pin (so we can send you a one-tap magic-link to manage your post). Also captured when you express interest in a listing, or when you write to us via Contact / Feedback.
Phone number — optional on every form. Stored privately for identity verification and fraud audit. We never share your phone number with other users, advertisers, or any third party. We never call you.
Post content — title, description, rent, BHK, locality, photos, and any details you type. Public the moment you post.
Coordinates — stored at full precision but displayed publicly at reduced precision (~150 m) so the exact unit is not exposed.

What we collect automatically:

IP address — hashed, used only for rate-limiting and abuse prevention. Never displayed publicly. Purged after 90 days.
Map browsing data — pages visited, search queries, approximate viewport bounds. Not linked to any identity unless you've also submitted a form.
Cookies — a single anonymous session cookie for CSRF security. No advertising or tracking cookies.

What we don't collect: passwords (no accounts yet), social handles, ID documents, payment details, or device fingerprints.

Third-party services

CARTO (with OpenStreetMap data) — map tiles. Each map view loads tile images from CARTO's CDN; OSM provides the underlying street and landmark data. Subject to CARTO's Privacy Notice and the OpenStreetMap Foundation Privacy Policy.
Photon (Komoot) and Nominatim (OpenStreetMap) — place-name autocomplete and geocoding. Your search query is sent to fetch matching localities and addresses.
Google Places API — secondary place-search provider, called when the free providers above don't return enough results. Your search query is sent to Google for autocomplete. Subject to Google's Privacy Policy.
Cloudflare Turnstile — bot detection on forms. No personal data stored beyond the challenge result.

Your rights (DPDP Act s. 11–15)

Even though we collect only what's needed, you have full rights over anything we hold:

Access — ask what we have on you (usually just an email + any post you submitted).
Correction — fix any inaccurate detail.
Deletion — ask us to remove your email, phone, and any tied posts. Actioned within 7 working days unless statutory retention applies (e.g. abuse-investigation logs).
Grievance redressal — email grievance@bhagyanagar.rent. Acknowledged within 24 hours, resolved within 7 working days.

Security

All data is transmitted over HTTPS (TLS 1.2+). API rate limiting and coordinate rounding protect against scraping.

Today's features

You can browse the map, drop a rental listing, flatmate post or seeker pin without creating an account. Owners manage their posts via a one-tap magic-link email (no password). When a renter expresses interest in a listing, we forward their email and message directly to the listing owner so they can reply. The renter's phone number, if provided, stays private and is never sent.

Coming next

User accounts, saved searches, in-app messaging, and a per-user dashboard. When those launch, this policy will be updated to cover the additional data they introduce, and existing users will be asked to review and accept the updated policy before continuing.

Changes

Material changes will be notified via a banner on the Platform. Continued use after the effective date constitutes acceptance.

Questions: hello@bhagyanagar.rent · Grievances: grievance@bhagyanagar.rent