Privacy policy
Last updated 5 October 2026
Who we are
Garahpravesh is a property portal for the Tricity region, operated by Espy Technologies. In this policy “we” means Espy Technologies and “you” means anyone using the site.
For the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the data described below, except where we say otherwise.
What we collect
When you send an enquiry
Your name, phone number and, if you give one, your email address and your message. We record which listing it was about and when you sent it. We may verify the phone number by one-time password, and we record whether it was verified.
You do not need an account to send an enquiry. A phone number is required because it is how the seller replies; everything else is optional.
When you create an account
Sign-in is handled by Google Firebase Authentication, by phone OTP or Google sign-in. From it we receive and store your name, and your phone number or email address depending on how you signed in, a profile photo URL if your Google account has one, and an identifier linking the two. We record when you last signed in.
We also store what you do with the account: listings you save, searches you save, and the enquiries you have sent while signed in. A saved search stores the filters, not the web address you were on.
If you list a property
An owner, consultant or developer account additionally holds the contact details you give us for that account and the content of your listings, including photographs you upload. Listing content is published and is meant to be seen.
Automatically
We use your IP address to rate-limit enquiry submissions so the site cannot be used to send bulk messages. It is held in the server’s memory for that purpose and is not written to our database or used to profile you.
Cookies
We use cookies for two things, and only these two:
- Signing you in. Once you sign in we set a session cookie. Without it the site cannot tell it is still you between one page and the next, so refusing this one means you cannot stay signed in.
- Remembering small choices on a page — a filter you left open, a tab you were on. These are stored in your own browser, never sent to us, and clearing your browser data removes them.
Your browser can block or delete cookies, usually under Settings → Privacy. Blocking them does not stop you browsing listings or sending an enquiry; it stops you staying signed in.
We run no advertising on this site, and no advertising or analytics trackers. If that ever changes, advertising networks set cookies of their own which we would not have access to, and we will say so here before any appear — the date at the top is how you can tell this page is current.
We do count how many times each listing is opened, so the person who listed it can see whether anyone is looking. That count is kept as a daily total against the listing and nothing else: no identifier, no address, no cookie, and nothing that could say which of those views was yours. It is counted on our own server while the page is being built, so no script in your browser is doing it.
We do not sell or rent personal data to anybody.
Who we share it with
| Who | What | Why |
|---|---|---|
| The listing’s owner, or their appointed sales team — a developer, consultant or individual owner | Your name, phone number, email and message, and the listing you asked about | So they can answer you. This is the purpose of an enquiry, and it happens as soon as you send one |
| Google (Firebase Authentication) | Your phone number or email, for sign-in | We do not run our own password system |
| Google (Maps and Places) | Map tiles and nearby-place lookups are requested from your browser | To show where a project is and what is near it |
| YouTube, on the pages that have a video | Nothing until you press play — the player is not loaded until you click it | To show a project’s walkthrough |
| Our hosting provider | Everything, as the service it stores | The site has to run somewhere |
We also disclose data where the law requires it, and we may share it with professional advisers or a buyer of the business, under confidentiality.
Once an enquiry reaches a seller, they decide what they do with it. They are a separate business and their own handling of your details is not something we control. If you want a seller to stop contacting you, tell them, and tell us at the address below and we will pass it on.
How long we keep it
- Enquiries — three years from your last contact, so a seller can follow up and so we can resolve disputes.
- Account data — while your account is open, and 90 days after you close it.
- Listings — a removed listing is marked deleted and retained for 90 days before being purged, so it can be restored if removed by mistake.
- Records we must keep for tax or statutory reasons are kept for as long as that law requires.
Your rights
Under the DPDP Act you may ask us to:
- tell you what personal data of yours we hold and who we have shared it with;
- correct anything inaccurate, or complete anything incomplete;
- erase it, where we have no continuing lawful reason to keep it;
- withdraw consent you have given — which may mean we can no longer provide a service;
- nominate someone to exercise these rights if you die or become incapacitated.
If you have an account you can see and change much of this yourself under your account, and remove saved listings and searches there.
Stopping messages, and closing your account
You can ask us to stop sending you anything, or to delete your account altogether, by emailing hello@grahpravesh.in from the address or about the number you registered with. We will confirm when it is done.
Closing an account does not reach a seller who already has your enquiry — they received it when you sent it. Tell us and we will pass your request on, but they are a separate business and the obligation to act is theirs.
Messages about something you asked for — a reply to an enquiry, or a change to these terms — are not marketing and will still reach you while your account is open.
Children
The site is not for anyone under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
Keeping it safe
Access to personal data is restricted to staff who need it, actions taken in our admin panel are logged, and traffic to the site is encrypted in transit. No system is perfectly secure; if a breach affects you we will notify you and the Data Protection Board as the DPDP Act requires.
Grievance officer
If you want to exercise a right or are unhappy with how we have handled your data, contact our Grievance Officer. We will acknowledge your request within 7 days and respond within the period the law allows.
Espy Technologies
hello@grahpravesh.in
If you are not satisfied with our response you may complain to the Data Protection Board of India.
Changes
We will update this page when what we do changes, and the date at the top will say when. Where a change materially affects you we will tell account holders directly.