Privacy Policy

This is a plain-English privacy policy for the ZiffyHomes beta. It is deliberately short because the product is young and the data we handle is not yet complex. We will update and re-version this document as the product grows, and we will notify you of material changes.

Who we are

ZiffyHomes is operated by ZiffyHomes Inc., an Indian software company. In this policy, “ZiffyHomes”, “we”, “us”, and “our” refer to ZiffyHomes Inc. and its affiliates. When we mention “you”, we mean anyone who uses the ZiffyHomes product or website, whether you are a property owner, a broker, or a tenant invited to the platform.

ZiffyHomes Inc. acts as the data controller for personal data collected directly from owners, brokers, and tenants through our website and product. When brokers or owners add tenant details to the platform on behalf of their tenants, they act as data controllers for that data, and ZiffyHomes acts as a data processor on their behalf.

What we collect

Information you give us directly

• Early access form data: your name, phone number, optional email, your role (owner or broker), property count, and the pain point you select.
• Account data: name, email, phone number, password (stored hashed), role, and city when you create a ZiffyHomes account.
• Property data: address, photographs, rent amount, deposit, lease terms, and any descriptive information you add about your property.
• Tenant data (when added by owners/brokers): tenant name, phone, email, lease dates, rent amount, and any identity documents uploaded (for example Aadhaar or PAN) needed to generate a rent agreement.
• Communication records: WhatsApp click-to-chat templates you use, reminders you schedule, and messages exchanged through the platform.
• Payment tracking data: when you mark a rent payment as received, we record the date and amount. We do not process payments ourselves in the current beta.

Information we collect automatically

• Basic usage data: page views, click events, and timestamps, collected through privacy-respecting analytics.
• Technical data: IP address, browser type, device type, and referrer, logged to diagnose errors and prevent abuse.

Information we do not collect

• We do not buy personal data from third parties.
• We do not use third-party advertising pixels on the marketing site.
• We do not build advertising profiles on you.

How we use it

• To operate the ZiffyHomes product: dashboards, rent tracking, agreements, maintenance workflows, tenant invites.
• To communicate with you about your account, beta status, product updates, and support.
• To improve the product, fix bugs, and measure whether new features are useful.
• To generate AI-assisted outputs (draft agreements, draft reminder messages, maintenance triage). These use GPT and Claude models operated by OpenAI and Anthropic respectively; your data is sent over authenticated APIs and is not used to train their models.
• To comply with applicable laws, respond to lawful requests, and protect ZiffyHomes, our users, and the public.

Who we share it with

We share data only with service providers who help us run the product, and only to the minimum extent needed:

• Supabase. Our database, authentication, and file storage provider.
• Vercel. Our web hosting provider.
• OpenAI and Anthropic. For AI-generated content. Data sent through APIs under Zero Data Retention contracts where available.
• Resend. For transactional email delivery.
• Google (Places API). For address autocomplete. Queries are sent to Google only while you are typing an address.

We do not sell your personal data. We do not share it with advertisers. We will only disclose personal data in response to a valid legal process, and we will notify you whenever legally possible.

Security

We take security seriously, especially for sensitive documents like Aadhaar and PAN cards. Here is how we handle them in the current beta:

• Sensitive documents (Aadhaar, PAN, rental agreements): stored in a dedicated authenticated bucket with short-lived signed URLs. Only users with explicit property access can read them. Every access is logged for audit.
• Property photographs: stored in a separate public bucket only when the property is set to “publicly listed”. Photos from unlisted properties remain private.
• Maintenance photos: always private, accessible only to users with property access.
• Passwords: stored using industry-standard hashing (bcrypt).
• Transport: all data is transmitted over HTTPS.
• Access control: role-based access controls are enforced at the database level using Supabase Row-Level Security policies.

If you discover a security issue, please contact us before disclosing it publicly. We commit to responding within 72 hours.

Cookies

ZiffyHomes uses a small number of essential cookies and similar technologies. In the current beta:

• Authentication cookies: used to keep you signed in to your account after you log in. These are strictly necessary.
• Local storage: used by the early-access wizard on the landing page to remember your answers if you refresh. Nothing is sent to our servers until you complete the wizard.
• Analytics: we use first-party, privacy-respecting analytics to understand how the site is used. No tracking pixels. No cross-site advertising cookies.

You can clear cookies and local storage at any time from your browser settings.

Your rights

You have the right to:

• Ask us for a copy of the personal data we hold about you.
• Ask us to correct data that is wrong.
• Ask us to delete your data, subject to legal retention obligations.
• Withdraw your consent at any time, which takes effect from that point onward.
• Object to certain uses and complain to a data protection authority.

To exercise any of these rights, contact us via the form on the landing page. We aim to respond within seven working days.

Children

ZiffyHomes is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has shared personal data with us, please contact us and we will delete it.

Contact us

Privacy questions, data requests, or anything else related to this policy: please reach out through the early-access form on the landing page. A real human will respond, usually within 24 hours.

ZiffyHomes Inc. · Bangalore, India · © 2026. This privacy policy may be updated as the product evolves. We will always publish the current version at this URL and note the “last updated” date at the top.