Indori Zameen

Indori Zameen

Privacy Policy

Last updated: 10 October 2026

This policy explains what information the Indori Zameen platform handles, why, and what your choices are. It should be read together with the Terms & Conditions and the Disclaimer on that page.

1. Information about you

  • Browsing without an account. You can read the home page, the colony pages and the blog without signing in; the map needs a free account. We do not run advertising trackers. Our hosting provider (Cloudflare) processes standard technical logs — IP address, request, user agent — to serve and protect the site.
  • Signing in. You sign in with Google or with an Indian mobile number (Firebase Authentication). With Google we receive your name, email address and profile photo from your Google account. There is no password stored with us. Anyone may create a free member account; the administrator decides who gets more than that.
  • Your mobile number. Every account verifies an Indian mobile number with a one-time code sent by SMS. The code is sent and checked by our SMS provider, MSG91; we never see or store the code itself. We keep the verified number on your account, and a record of each code request — the number, the time, and a scrambled (hashed) form of your connection’s IP address — to stop abuse. Your verified number is visible to the administrator and never shown publicly or to other users.
  • If you sign up with a mobile number. You give us your first name, last name and an email address, and tell us whether you are joining as a user, a real estate consultant or a developer. We use the email to contact you; we do not verify it and it is not used to sign you in. A request to join as an agent or developer is reviewed by the administrator, who sees your name, email and verified number to decide.
  • Documents you open. Each account may open a limited number of documents an hour and a day. To apply that limit we record which documents your account opens and when. Only the administrator can see this record.
  • Profile details. Members and the administrator can add profile details — display name, photo, company, address, phone numbers, social links. You can see and edit your own profile in the profile section. The administrator may also keep a short internal note about an account (for example, who invited whom and why); that note is visible only to the administrator, never to other users and never publicly.
  • Enquiries and activity. If you enquire about a colony or interact with a listed partner, the enquiry and basic activity records (such as profile views) are stored so the right people can respond and the administrator can supervise the platform.
  • On your device. The site keeps a few small things in your own browser, and none of them is sent to anyone else:
    • your theme choice (light, dark or automatic);
    • that you have accepted the terms notice on the map, and when;
    • while you are signing in with a mobile number: the number and the one code request in progress, kept only in that browser tab and for at most fifteen minutes, so a stray tap does not throw the code away;
    • if your account needs the administrator’s approval to sign in by mobile number (staff accounts such as editors): a one-time pass that lets this browser finish signing in once the administrator approves. It works once, stops working after two days at most, and is removed as soon as the request is approved, refused or expires;
    • when you are signed in: your sign-in, kept by Google’s Firebase Authentication, and a copy of that sign-in in a cookie (iz_asset_session) that the site needs to show you the layout drawings, documents and photographs on the map. It expires within the hour, is renewed while you use the site, is sent only with those requests, and is removed when you sign out.
    Google Analytics may set its own cookies, described below.
  • How the site is used. Google Analytics tells us which pages are opened, roughly where in the world from, and on what kind of device — so we know which colonies people are looking for and which parts of the site are not working. What this platform sends is the address of the page you opened. Your name, your email address and which records you are entitled to see are never sent to it. Drafts of blog posts opened through a private preview link are never reported.
  • Google Signals, and what it adds. We have switched on a Google Analytics feature called Google Signals. For visitors who are signed in to a Google account and who have left Ads Personalisation switched on in their own Google settings, it lets Google tell us that the same person visited from a phone and then from a laptop, and lets us see reports of the estimated age range, gender and broad interest categories of our audience. Those reports reach us only as grouped totals — we are never shown, and never ask for, the age, gender, interests or identity of any individual visitor. Google performs this matching using the account and advertising data it already holds about that person, under its own policy for sites that use its services.
  • Advertising cookies, and what we do not do.Because Google Signals needs them, advertising storage, ad user data and ad personalisation are switched on by default for Google’s analytics cookies, for every visitor. We use this for measurement and audience reporting only. This site carries no advertising, we run no advertising campaigns, we build no remarketing or advertising audiences from it, and we do not sell or share this information with anyone.
  • How to switch it off. Turning off “Ads Personalisation” in your own Google account settings stops Signals using your account for any of the above. Google’s Analytics opt-out add-on, an ad blocker or a privacy extension will stop Analytics altogether, and clearing this site’s data in your browser removes everything listed above. Nothing on this site depends on any of it, and it all keeps working with the lot switched off.

2. Indori Zameen Partners

Indori Zameen Partners (partners.indorizameen.com) is a separate workspace for approved real estate consultants and developers, used under its own partner terms. It carries no Google Analytics and is not indexed by search engines. If you use it, this is what it keeps:

  • Your workspace — the people, deals, notes, follow-ups, properties, message templates and, for a developer, inventory, bookings and receipts that you enter. It is kept on our servers and on your own device (so it works without a signal; the device copy is removed when you sign out). Nobody else reads it, the Indori Zameen team included — unless you switch on “Let the team help” for one hour, one day or three days, when the team may look without changing anything; every look is recorded and shown to you.
  • Your clients’ details. The names, numbers and requirements in your workspace are entered by you, and keeping them lawfully is your responsibility. We keep them only to run your workspace; we never contact those people, and nothing is sent to them by the site.
  • What you share — Forum threads and replies, market posts, Messages (a conversation is read only by its two people) and your Directory card (shown name, company, photo, working areas, colonies held, a developer’s published price list), seen by other partners. A report you make about a post is seen by the team.
  • Client registrations and commission. When a consultant registers a client with a developer, the client’s name, mobile number and colony are shared with that developer; commission records are seen by both of them, and not by the team.
  • Phone alerts, if you switch them on: the delivery address your browser gives us and the keys to encrypt to it. The alert is carried by your browser maker’s push service (Google, Apple or Mozilla), encrypted, in fixed words — never what a message says.
  • Plans and promotions — your plan, the Premium and promotion requests you send and the team’s answers.
  • Your acceptance of the partner terms — which version and when.
  • Moving across while signed in. Opening the partners site from this site while signed in passes your sign-in across with a one-time pass that works for 60 seconds; we keep only a scrambled (hashed) form of it.

Your choices there. “My data” on the partners site downloads everything of yours as one file, and erases your partner data: the workspace is deleted, and what you shared with other partners stays under the name “A former partner” (market posts are closed). The partners site is then closed to the account until the team reopens it, empty. Your account on this site is not affected. Phone alerts and “Let the team help” can be turned off at any time.

3. Information about properties and people in the records

The platform compiles information about colonies, layouts, projects, promoters, brokers and developers from public-domain portals, statutory records and market sources, as described in the Disclaimer. Where a promoter’s or professional’s details appear, they come from such sources. If information about you appears and you want it corrected or removed, write to [email protected] — takedown requests are honoured as described in the Terms.

4. How information is used

  • To operate the platform and show you the records you ask for.
  • To control access — checking whether an account is invited and what role it holds.
  • To route enquiries to the relevant partner and notify the people involved.
  • To protect the service — rate-limiting, abuse prevention, debugging.

We do not sell personal information, and we do not share it except with the service providers below, or where the law requires it.

5. Service providers

  • Google / Firebase Authentication — sign-in.
  • MSG91 — sending the one-time SMS code that verifies your mobile number, and confirming it was entered correctly. MSG91 receives your mobile number for this.
  • Google Analytics — counting page views, and, through Google Signals, cross-device and audience reporting, as described in section 1. We use it for measurement only: no advertising is carried on this site and no advertising audiences are built from it.
  • Cloudflare — hosting, storage and delivery of the site, its data and its documents.
  • Map providers — base-map tiles and place search are fetched by your browser from OpenStreetMap-based services (including CARTO tiles and Nominatim geocoding), which see the usual technical request data under their own policies.

6. Retention and deletion

Account and profile information is kept while the account exists. To have your account or profile information deleted, or to exercise any other request about your personal information, email [email protected] from the address on the account. Technical logs are retained on our providers’ standard short cycles. Partner data on Indori Zameen Partners is downloaded or erased by its owner from “My data” there (section 2); copies in our hosting provider’s backups are overwritten within 30 days.

7. Security

The platform runs on managed infrastructure with authentication verified on the server for every protected request. No system is perfectly secure, but access to member data is limited by role, and administrative data (such as internal notes) is restricted to the administrator.

8. Children

The platform is meant for adults dealing with land and property information and is not directed at children.

9. Changes

Updates to this policy are posted on this page with a new “last updated” date.

10. Contact

Indori Zameen
[email protected]