Privacy Policy

Placestore (placestore.in) is operated under the name Placestore Solutions, Thrissur, Kerala, India. For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), Placestore Solutions is the Data Fiduciary — the one who decides why and how your personal data is processed — and you are the Data Principal.

The person who answers questions about your personal data is our Grievance Officer, Jijo, reachable at support@placestore.in. That address is also where every right in Section 8 can be exercised.

The Platform is operated by an individual registered as a micro enterprise under India's MSME (Udyam) scheme. It is not a company, and it is not a licensed real estate agent, broker or developer.

Placestore is a free notice board where people in India post and discover property listings and contact each other directly. We do not take part in any deal. We charge no fee and earn no commission.

Because we neither initiate, select nor modify what users post, Placestore is an intermediary under Section 79 of the Information Technology Act, 2000, and follows the due-diligence duties in the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

We do not verify, inspect or endorse any listing, property, identity or contact detail. Verify everything yourself before you share personal information, visit a property or pay anyone. The limits on our liability are set out in the Terms of Use, which apply together with this policy; in short, the Platform is provided as is, we are not a party to any arrangement between users, and our liability to any user is capped at the amount that user has paid us, which is nil.

Everything below is processed on the basis of the consent you give when you create an account, together with the content you choose to publish, which the DPDP Act treats as a permitted use because you provided it voluntarily for that purpose (s. 7(a)). Nothing is processed for advertising or profiling.

• We never ask for, and you should never post, government identity numbers, bank details, passwords for other services, or anyone else's personal data.
• We do not build profiles, run behavioural advertising, or track you across other websites.
• We do not use automated decision-making that has a legal or similar effect on you. Listings are reviewed by a person before they go live.

By default a listing appears on public maps at the point the owner pinned. Owners who prefer more privacy can switch on "Hide exact location": the public map then shows only an approximate area of roughly 75 metres, and the exact location is not shown to anyone until the owner's contact is revealed.

Your full address and phone number are shared with another user only when they explicitly reveal your contact. That action creates a record both of you can see in your dashboards, and the other person's name and number are shown to you in return.

People posting requirements share an area, not a street address. Their zone on the map is drawn blurred around the point they chose.

We read your device's location only when you tap the locate button, and it leaves your device only if you save it as a pin on a listing or requirement.

Other users see the name on your posts and in chats; your number and exact address reach another user only through the contact-reveal flow above. We also share data with the service providers below, each of which processes data only to provide its service to us (Data Processors under s. 8(2) of the DPDP Act). We do not share data with brokers, advertisers or data aggregators.

Transfers outside India. Several of these providers store data outside India. The DPDP Act permits this unless the Central Government restricts a particular country (s. 16); none of the countries above is restricted at the time of publication. Each paid provider is bound by its contract with us to keep the data confidential and to use it only for the service it provides. Free public services (Nominatim, weserv) receive no personal data, and video hosts receive data directly from your browser when you view a video.

Legal requests. We disclose personal data when Indian law, a court, or a lawfully empowered government agency requires it, and only to the extent required. We will tell you if the law allows us to.

If the Platform changes hands. If Placestore is ever transferred or wound down, you will be told in advance and given a reasonable opportunity to retrieve or erase your data before anything moves.

Placestore uses only the cookies it needs to work, plus one first-party counter. There are no advertising cookies, no tracking pixels and nothing that follows you to other websites, so there is nothing to accept or reject. The full list:

Page-view analytics come from our host, Vercel, and use no cookies: they record the page address, the referring site, your browser, device and city-level location, not who you are.

You can clear cookies and browser storage at any time from your browser settings. Clearing the sign-in cookie signs you out.

• Account details: while your account exists, then 180 days after closure. Indian intermediaries are required by law to keep registration information for that period (IT Rules 2021, r. 3(1)(h)). After that it is erased.
• Listings and requirement posts: A listing is active for 180 days (180 for a builder project) and a requirement post for 60. Each can be extended once, free, to a total of 210, 240 and 91 days. Once it expires it leaves public view immediately. We keep it, hidden, for 90 days so you can renew it free from your dashboard; if you don't, it is permanently deleted about 90 days after it expired. You can delete it yourself at any time. You can also delete one yourself at any time.
• Contact-reveal records, chats, favourites, reports and feedback: while your account exists; erased with it.
• Sign-in records (code sends and magic-link sends) and contact-tap records: deleted automatically after 30 days by a daily job.
• Backups: an encrypted copy of the database is taken daily and each copy is deleted after 30 days. Data you have erased can therefore persist in a backup for up to 30 further days, after which it is gone everywhere.
• Technical logs: for a short period under each provider's standard retention, then discarded.

Closing your account starts erasure automatically; you do not have to ask. Your listings, photos, requests, messages and activity records are erased 30 days after closing — a window that lets you change your mind — and your registration record after 180 days, subject only to anything a court or a law requires us to keep (DPDP Act s. 8(7)). Conversations you had with other people are erased with your account. Two kinds of copy are outside the reach of that job: a listing already posted to our Facebook page, which we remove when you ask, and copies of a photo held for a time by browsers and content-delivery caches, which expire on their own.

Chapter III of the DPDP Act gives you the rights below. Each can be exercised from your dashboard where the feature exists, or by emailing us from your registered address so that we can confirm it is you. We answer within the times stated in Section 13.

We do not charge for any of this, and we will not treat you differently for exercising a right.

Not a Placestore user? If your name, phone number, photos or property appear on the site — for example in a listing posted on an owner's behalf — email support@placestore.in with the link, and we will correct or remove it within the times stated in Section 13. You do not need an account to ask.

• All traffic is encrypted in transit (TLS) and data is encrypted at rest by our database and storage providers.
• Row-level security in the database limits what each account can read. Exact addresses and phone numbers are shown only after a reveal.
• Sign-in codes are stored only as salted one-way hashes and expire in minutes. Sends and attempts are rate-limited.
• Administrative credentials live only on the server and are never shipped to a browser. Access to the database and to production systems is limited to the operator.
• An encrypted backup is taken every day and old copies are pruned automatically, so that data can be restored after a fault without lingering.
• Automated bot protection guards phone and email sign-in.

These are the reasonable security safeguards required by s. 8(5) of the DPDP Act. No system is perfect; if you spot a weakness, tell us at the address in Section 1 and we will act on it.

If a personal data breach affects you, we will tell you without delay — what happened, which data was involved, what we have done about it, and what you can do to protect yourself — and we will report it to the Data Protection Board of India in the manner and time the DPDP Act and its Rules require (s. 8(6)).

The Platform is for adults. You must be 18 or older to create an account. We do not knowingly process the personal data of a child, we do not track children, and we show no targeted advertising to anyone. If you believe a child has created an account, tell us and we will erase it promptly (DPDP Act s. 9).

The DPDP Act also places duties on you (s. 15). When you use Placestore you agree to give accurate information, not to impersonate anyone, not to suppress anything material when providing your details, and not to file a false or frivolous grievance.

You are responsible for the content you post and for verifying the people you deal with. We strongly recommend independent legal advice before any property transaction; Placestore provides none.

Any complaint about your personal data, or about content on the Platform, goes to the Grievance Officer, Jijo, Placestore Solutions, at support@placestore.in. We acknowledge within 24 hours and resolve within 15 days. Certain complaints about impersonation or intimate imagery are acted on within 24 hours, as the IT Rules require.

If you are not satisfied with our response, or we miss the time above, you may complain to the Data Protection Board of India established under the DPDP Act (s. 13(3), s. 27). The Act asks you to use our grievance route first.

This is version 2026-10-23. The effective date and the date of the last update are shown at the top of this page, and every account records which version it consented to.

If we make a material change — to what we collect, why, how long we keep it, or who we share it with — we will tell you by email or inside the Platform at least 15 days before it takes effect, so that you can decide whether to continue. Corrections and clarifications take effect on publication.

If you do not agree with a change, close your account before it takes effect and we will treat your consent as withdrawn.