Privacy Policy
This explains what we collect when you use a Fossyl property viewer, why we collect it, who we give it to, and how to have it erased. We keep it short and plain, because a policy you cannot read is not a policy you have agreed to.
1. Who we are
This property viewer is operated by Fossyl. We provide an interactive 3D property viewer on behalf of the property developer or builder listing the property (the Builder).
Under the Digital Personal Data Protection Act, 2023 (the DPDP Act) we are a Data Fiduciary for the data described below. The Builder is a Data Fiduciary in its own right for the sales follow-up it carries out using your details.
2. What we collect and why
| Data | Why we need it |
|---|---|
| Your mobile number, with country code | To verify you are a real person (by OTP) and to let the Builder contact you about this property |
| The OTP you enter | To confirm the number is yours |
| Your name (optional, you may leave it blank) | To let the Builder address you by name |
| Which property you viewed | To tell the Builder which property you enquired about |
| How long you actively viewed it, and whether you opened the floor plan, the agent card, or WhatsApp | To help the Builder judge your interest and prioritise their response |
| Your browser's user-agent string | To display the viewer correctly and to prevent abuse of the OTP system |
We store a session identifier and, after you submit your details, a lead identifier in your browser, so we do not ask you for the same details twice.
We do not collect your email address, your location, financial information, or any government identifier such as Aadhaar or PAN.
3. Consent
We process your personal data only with your consent.
You give it by ticking the consent box in the enquiry form. The box is never pre-ticked. Until you tick it and verify your number, we do not create a lead record.
When you consent, we record the time of consent, the version of this policy you were shown, and the purposes listed above. If we later want to use your data for a purpose not listed in section 2, we will ask you again. Your earlier consent does not carry over.
4. Who we share it with
| Recipient | What they get |
|---|---|
| The Builder whose property you viewed | Your number, your name if given, the property, and your engagement with the listing, so they can respond to your enquiry |
| Twilio, our SMS provider | Your number and the OTP, to deliver the verification message |
| Supabase, our database provider | The data listed in section 2 |
| WhatsApp (Meta), if the Builder messages you there | Your number. That conversation is then governed by WhatsApp's own policy |
Twilio and Supabase act only on our instructions. They may process data on servers outside India. We do not transfer data to any country restricted by the Central Government under section 16 of the DPDP Act.
We disclose data to law enforcement or regulators only where Indian law compels us to.
5. How long we keep it, and how to be erased
We erase your data when you ask us to. Email [email protected]. Once we have verified your identity through the phone number that is to be deleted, we will delete your record and instruct our providers to do the same, unless a law requires us to keep it. Withdrawing your consent has the same effect.
OTP codes are held for the few minutes needed to verify your number, then discarded.
6. Children
This viewer is not for anyone under 18. We do not knowingly collect data about children, and we do not track, profile, or advertise to them. If you believe a child has given us data, email us and we will erase it.
7. Security
We protect your data with reasonable safeguards: encrypted connections (HTTPS), access-controlled database storage, and OTP verification so a number cannot be submitted by someone other than its owner.