Privacy Policy

Aapki Jagah operates the property marketplace at aapkijagah.com. For any privacy question, or to exercise any right described below, write to [email protected].

• Account details — your name, e-mail address and phone number. Your password is never stored; we keep only a one-way scrypt hash of it.
• Listing details — everything you enter when posting a property, including its address, locality, price and the photographs you upload.
• Enquiries — when you contact an owner we record your name, phone number, optional e-mail and message, and pass them to that owner.
• Contact unlocks — which listings you have revealed contact details for, so we can apply fair-use limits and not charge you twice for the same listing.
• Payments — if you buy a paid plan, our payment provider processes the transaction. We receive a payment reference and status. We never see or store your card, UPI or bank details.
• Technical data — IP address, browser type and pages visited, used to keep the service running and to detect abuse.

• To create and secure your account and keep you signed in.
• To publish your listing and put buyers in touch with you.
• To apply fair-use limits on contact unlocks.
• To process payments and issue receipts.
• To detect fraudulent, duplicate or abusive listings.
• To send service messages — password resets, enquiry alerts, payment receipts.
• To comply with legal obligations.

We do not sell your personal information. We share it only in these situations:

• With property owners. When you send an enquiry, the owner of that listing receives your name, phone number and message. That is the point of the enquiry.
• With buyers who unlock your listing. If you post a property, users who unlock it see the contact details you provided. Do not publish a number you are unwilling to receive calls on.
• With service providers — our payment gateway, e-mail provider and hosting provider, strictly to deliver the service.
• Where the law requires it — in response to a valid legal demand, or to protect our rights and users’ safety.

When you message a property owner through the site, the conversation is stored on our servers so both of you can come back to it. The other person sees your name and what you wrote.

Our staff can read these conversations. We use that to investigate reports of fraud, abuse or misrepresentation, and to resolve disputes — not to browse. If you would rather keep something private, exchange it another way.

Never send money, identity documents or bank details through chat. No genuine owner needs them before you have visited a property and verified who owns it.

We set one essential cookie to keep you signed in. It is httpOnly, and it carries a random session token — not your identity or password. Without it, sign-in cannot work.

We use Google Analytics 4 to understand how many people visit, which pages they use and which cities they search in. It sets its own cookies and receives your IP address, which Google uses to approximate your location. We use it to improve the site — we do not use it to identify you personally, and we do not upload your name, phone number or e-mail to it.

You can opt out with Google’s browser add-on, or by blocking analytics cookies in your browser. The site works normally either way.

If we run advertising campaigns we may add measurement tools from those platforms. Where they set cookies or share identifiers, we will name them here and, where the law requires it, ask your consent first.

• Account data — until you ask us to delete your account.
• Listings — while published, and for a reasonable period afterwards so enquiry history stays intelligible.
• Enquiries — retained for the owner's records.
• Messages — kept while the account exists, so both sides can refer back to what was agreed.
• Activity records (sign-ins, verification, listing changes) — kept for security and dispute investigation.
• Payment records — as long as tax and accounting law requires.
• Session tokens — until they expire or you sign out. Changing your password revokes every existing session.

Under India’s Digital Personal Data Protection Act and comparable laws, you can ask us to show you the personal data we hold about you, correct anything inaccurate, delete your account and associated data, or withdraw consent where processing relies on it.

Write to [email protected] from your registered e-mail address and we will respond within 30 days. Some data may be retained where law obliges us to keep it.

Passwords are hashed with scrypt and a unique per-user salt. Session and password-reset tokens are stored only as SHA-256 hashes, so the raw token exists solely in your browser cookie or e-mail link. Traffic is served over HTTPS.

No system is perfectly secure. Use a password you do not reuse elsewhere, and tell us promptly if you think your account has been accessed by someone else.

The service is not intended for anyone under 18, and we do not knowingly collect their data.

If we change this policy we will update the date at the top of this page. Material changes will be announced on the site.