Privacy Notice
Before you give consent
Notice under section 5 of the Digital Personal Data Protection Act, 2023 · Version 2026-10-23 · Last updated 23 October 2026
You are about to let Placestore Solutions use some of your personal data. This page says exactly what, why, for how long, who else handles it, and how to change your mind. It is the notice the law asks us to give you, written to be read in two minutes.
Who is asking
Placestore (placestore.in), operated as Placestore Solutions, Thrissur, Kerala, India. Under the Act we are the Data Fiduciary and you are the Data Principal.
The person who answers questions about your data is our Grievance Officer, Jijo: support@placestore.in.
What we will collect, and why
Only what is listed here, only for the purpose beside it. Nothing for advertising, nothing for profiling, nothing sold. The purpose is what you are consenting to.
- Your name, email address and phone number — and, if you sign in with Google, your Google profile photo
To create and secure your account, to show your name to people you contact, and to give your number to another person only when you reveal theirs — the exchange is always mutual. On a listing we post on behalf of an owner who has no account, your name and number come to Placestore instead. Also to send you essential account messages such as sign-in codes and listing-expiry reminders (by email, SMS or WhatsApp).
Kept: While your account exists. After you close it, the registration record is kept for 180 days because Indian law requires it of intermediaries, then erased.
- Sign-in codes
To check it is really you. Codes are delivered over WhatsApp (MSG91) or SMS (Twilio); you can also sign in with an email link or with Google. A code is stored only as a one-way hash, never in plain text.
Kept: A code expires after 10 minutes. Send and attempt records, with your phone or email and IP address, are kept for 30 days to stop abuse of the sign-in system, then deleted automatically.
- Listing content — photos, description, price, the map pin and the address
To publish your listing to visitors and on the map; to post it to Placestore's own Facebook page and to search engines so that more people see it. The post never includes your name, number or email. Photos are stored with Cloudflare.
Kept: Until you delete it or it expires. Once it expires it leaves public view immediately. We keep it, hidden, for 90 days so you can renew it free from your dashboard; if you don't, it is permanently deleted about 90 days after it expired. You can delete it yourself at any time. Its post on our Facebook page stays until you ask us to remove it.
- Requirement posts — budget, what you are looking for, preferred area
To show your requirement on the map as an approximate zone — never an exact point — so that owners can find you.
Kept: Until you delete it or it expires. Once it expires it leaves public view immediately. We keep it, hidden, for 90 days so you can renew it free from your dashboard; if you don't, it is permanently deleted about 90 days after it expired. You can delete it yourself at any time.
- Contact-reveal records — who revealed whose number, and when
So that both sides hold the same information, and so that a dispute or a report of misuse can be checked.
Kept: While your account exists; erased with it.
- Chats and messages
To deliver direct messages between you and another user, or between you and Placestore support.
Kept: While your account exists; erased with it.
- Favourites, feedback, reports, blocks and testimonials
To run the features you choose to use, and to act on reports about a listing or a user.
Kept: While your account exists; erased with it.
- Builder profile — company name, RERA number, office address, website, logo, and GST and trade-licence numbers if you give them
To publish a builder page once our team approves the account.
Kept: While your builder account exists; erased with it.
- Visit and view counts
A random device id in a first-party cookie (ps_vid), the date, and the kind of site that sent you (for example Google or Facebook) with its domain — so that we can count daily visits, how often each listing is viewed, and contact taps by people who are not signed in. No IP address, no browser fingerprint. If you are signed in, the count is made against your account instead of a random id.
Kept: The cookie expires after one year. Visit and view counts are kept; contact-tap records are deleted after 30 days; rows tied to your account are erased with it.
- Your reason for closing an account, and any note you add
To understand why people leave and to improve the service.
Kept: Erased with the rest of your content, 30 days after you close the account.
- An email address left on the Advertise page
Only to tell you when an advertising slot opens. Nothing else is sent to it.
Kept: Until you ask us to remove it — email support@placestore.in at any time.
- Technical logs — IP address, browser type, timestamps, error details
To keep the service running securely and to diagnose faults. These are generated by our hosting and database providers as a normal part of serving the site.
Kept: For a short period under each provider's standard retention, then discarded.
Who else handles it
These companies process data only to provide a service to us, under contract. We share nothing with brokers, advertisers or data aggregators. Some of them store data outside India, which the Act permits.
- Supabase, Inc.Database, sign-in and account storage · United States (infrastructure on Amazon Web Services)
- Vercel Inc.Hosting, page delivery, image optimisation, server logs, and cookieless page-view analytics · United States
- Cloudflare, Inc.Photo storage, encrypted database backups, bot protection · United States, global network
- Mapbox, Inc.Map tiles, address search, and map performance data · United States
- Google LLCLocation search and Google Sign-In · United States
- OpenStreetMap Foundation (Nominatim)Turning a map pin into a place name · United Kingdom
- MSG91 (Walkover Web Solutions)WhatsApp delivery of sign-in codes · India
- Twilio Inc.SMS delivery of sign-in codes (fallback) · United States
- Resend, Inc.Transactional email · United States
- Meta Platforms, Inc.Placestore's public Facebook page, where new listings are posted · United States
- weserv (images.weserv.nl)Resizing a listing photo when a share image is made · Netherlands
- YouTube (Google), Vimeo and MatterportVideos and 3D tours a builder adds to a project page · United States
- Microsoft Bing and Google SearchTelling search engines that a public page exists · United States
Your rights, and how to use them
All of them are free. Where a right can be exercised from your dashboard, that is the quickest way; otherwise email us from your registered address so we can confirm it is you.
Access
DPDP Act s. 11
A summary of the personal data we hold about you, what we do with it, and who we have shared it with.
Your dashboard shows your listings, requests, reveals and messages. For a full written summary, email support@placestore.in from your registered address.
Correction and updating
DPDP Act s. 12
Have inaccurate or incomplete personal data corrected, completed or updated.
Edit your profile, listings and requests from your dashboard at any time, or email support@placestore.in.
Erasure
DPDP Act s. 12(3)
Have your personal data erased once it is no longer needed for the purpose you gave it, unless a law requires us to keep it.
Close your account from your profile. Erasure then happens on its own: your listings, photos, requests, messages and activity records 30 days after closing, and your registration record after 180 days, which is how long the law requires us to keep it. Or email support@placestore.in.
Withdraw consent
DPDP Act s. 6(4)–(6)
Withdraw your consent at any time. Withdrawing is as easy as giving it. We then stop the processing it covered; what was lawfully done before is unaffected.
Close your account, or email support@placestore.in. If consent is withdrawn we cannot keep your account open, because the account is the thing your consent covers.
Grievance redressal
DPDP Act s. 13
A readily available way to complain about how your personal data is handled, answered within a published time.
Write to the Grievance Officer, Jijo, at support@placestore.in. We acknowledge within 24 hours and resolve within 15 days.
Nominate
DPDP Act s. 14
Name a person who may exercise these rights for you if you die or become unable to.
Email support@placestore.in with your nominee's name and contact details; we record the nomination against your account and confirm it to you.
Complain to the Board
DPDP Act s. 13(3), s. 27
If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
The Act asks you to use our grievance route first. If we do not resolve your complaint within the time above, you may approach the Board directly.
Withdrawing consent
You may withdraw at any time, and it is as easy as giving consent: close your account from your profile, or email support@placestore.in. We then stop, and your personal data is erased 30 days after closing. One record — your registration details — is kept for 180 days because Indian law requires it of intermediaries, then erased. Anything lawfully done before you withdrew is unaffected.
Because the account is what your consent covers, withdrawing it means the account closes. Your listings and posts leave public view at once.
If you want to complain
Write to the Grievance Officer, Jijo, at support@placestore.in. We acknowledge within 24 hours and resolve within 15 days.
If you are not satisfied, or we miss that time, you may complain to the Data Protection Board of India, the authority set up by the Act. The Act asks you to try our route first.
The full policy
This notice is the short form. Everything here is set out in more detail — including how we keep data secure, what happens if something goes wrong, and how we handle changes — in the Privacy Policy. Your use of the Platform is also governed by the Terms of Use.
Continuing to sign up after reading this notice is your consent — free, specific, informed and unambiguous, as the Act requires — to the collection and use described above. If we ever want to use your data for a new purpose, we will ask again.