Skip to the policy
XploreSFT

Bengaluru commercial real estate

Privacy Policy

Effective 13 October 2026

What we collect, why, who else sees it, and how to have it corrected or deleted.

On this page

  1. Who we are
  2. What we collect
  3. How we use it
  4. WhatsApp messages
  5. Who we share it with
  6. Where it is kept, and for how long
  7. Your rights
  8. Cookies
  9. Children
  10. Changes to this policy
  11. Questions and complaints

01Who we are

XploreSFT is a working tool for commercial real estate brokers in Bengaluru: cashflow analysis, pincode analysis, option sheets and the requirements and offers that pass between occupiers and brokers.

This policy covers the website at xploresft.com, the app behind it, and the WhatsApp messages we send on a broker’s behalf. For the personal data described here, XploreSFT is the data fiduciary under India’s Digital Personal Data Protection Act, 2023.

02What we collect

When you create an account

Your name, email address, phone number, company and role, and a password, which is stored only as a one-way hash. If you add a profile photo, we keep that too.

When you use the product

What you enter into it: analyses, option sheets, projects, requirements, offers and the files you attach to them. Spreadsheets you upload to an analysis are read for their figures and then deleted; we do not keep the file.

About building contacts

For a building whose availability a broker can check, we hold its contact person’s name, WhatsApp number and role, the date they agreed to be contacted, the messages we sent them and the replies they gave.

Automatically

The cookies that keep you signed in, and the technical records any web service keeps — IP address, browser, time of request — for security and to fix faults. Page visits are counted without cookies and without identifying you.

03How we use it

  • To run your account and sign you in, including sending sign-in codes.
  • To do the work you ask for: run an analysis, build a sheet, deliver an offer.
  • To send the notifications you would expect, by email or in the app.
  • To keep the service secure, and to find and fix what breaks.

Figures you enter about a building — rents, areas, charges — also improve our building data. They are stored apart from your identity: what we keep says what a building costs, never who said so. Nothing you enter is shown to another user.

We do not sell personal data, and we do not use it for advertising.

04WhatsApp messages

When a broker presses Verify availability on an option, we send one WhatsApp message, from XploreSFT’s business number, to the contact person for that building. It names the building and the space and asks whether it is still available.

  • We message only people who have agreed to be contacted by us, and we record the date they agreed. Without it, nothing is sent.
  • The contact’s number is never shown to the broker. The broker sees the answer and when it came.
  • A reply is read to update that option for the broker who asked. A correction to a building’s details is checked by our team before it changes our building data.
  • To stop receiving these messages, reply to tell us, or write to privacy@xploresft.com. We stop and keep a note that you asked.

Messages travel through WhatsApp, which Meta operates. Meta’s own privacy policy covers what WhatsApp does with them.

05Who we share it with

Only the services that run the product for us, each bound to use the data for that purpose alone:

  • Vercel hosts the website and counts page visits.
  • Supabase holds the database, the sign-in system and stored files.
  • Resend delivers our email.
  • Meta delivers WhatsApp messages.
  • A map service draws the maps in pincode analysis.
  • When Agent Ru is switched on, an AI model provider reads what you ask it.

Within the product, what you share is your choice: a project is seen by the people you add to it, and an offer by the occupier it is addressed to. Beyond that, we disclose personal data only where the law requires it.

06Where it is kept, and for how long

Data is stored and processed on our providers’ servers, which may be outside India. It is encrypted in transit, access to it is restricted by role, and building contacts’ numbers can be read only by our own servers.

We keep your account and your work while your account is open. When you delete your account, they are deleted with it. Building figures already separated from your identity stay, because nothing in them points back to you. A building contact’s details are kept until they ask us to remove them.

07Your rights

You can ask us to:

  • tell you what personal data we hold about you and how it is used;
  • correct or complete it;
  • delete it;
  • stop contacting you, including on WhatsApp;
  • name someone to exercise these rights for you.

You can correct your details and delete your account yourself, in Account Settings. For anything else, write to privacy@xploresft.com. We answer within 30 days.

08Cookies

We use only the cookies that keep you signed in and remember the step you were on. There are no advertising or tracking cookies.

09Children

XploreSFT is a professional tool and is not meant for anyone under 18. We do not knowingly collect a child’s data.

10Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects how we use data you have already given us, we tell you before it takes effect.

11Questions and complaints

Write to our Grievance Officer, at privacy@xploresft.com. We answer within 30 days.

If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

© 2026 XploreSFTBack to XploreSFT