EstateSphere Privacy Policy

Effective date: 12 October 2026

EstateSphere is a customer-relationship app for real estate businesses. It is offered on Android and on the web at estatesphere.in by EstateSphere, a sole proprietorship registered as an MSME in India and owned by Shalinder Pathak (“we”, “us”). This policy explains what information EstateSphere collects, why, who it is shared with, and the choices you have.

1. Information we collect

Account information

• Your name, email address, phone number and password (passwords are stored only in hashed form by our authentication provider).
• Your company name and your role in it. If your company owner adds you as an employee, they provide your name, email, phone number, job role and, optionally, a profile photo.

Business records you enter

EstateSphere stores the information you and your colleagues add while using the app, which can include personal information about other people:

• Leads and contacts — names, phone numbers, email addresses, property interests, sources and notes.
• Property listings — titles, addresses, prices, descriptions, photos, and the property owner’s name and contact number.
• Activity — call outcomes, call notes and durations you record, follow-ups, site visits and status changes.
• Call lists — contacts you add by hand or import from a spreadsheet file (.xlsx) you choose.
• Marketing campaigns and inbox — if you connect WhatsApp, SMS or email: the messages you send, recipients’ contact details, delivery and read status, and replies you receive. The connection credentials you enter (for example API keys or SMTP passwords) are stored encrypted.

Payment information

Subscriptions are paid through Razorpay. You enter card, UPI or bank details on Razorpay’s checkout, not in EstateSphere, and we never receive or store them. We keep the plan, amount, order and payment IDs and the payment status for billing records.

Photos and files

When you add property or profile photos, the app opens your device’s photo picker or camera and uploads only the images you choose. When you import contacts, it reads only the spreadsheet file you pick.

Information stored on your device

The app saves your sign-in session, display preferences (such as light or dark mode), notification settings and a cache of property photos on your device so it works faster. This stays on your device and is removed when you sign out or uninstall the app (the photo cache may remain until the app’s cache is cleared).

Technical information

Like any internet service, our hosting providers receive your IP address and basic request details (such as time and browser or device type) when the app talks to our servers, and keep them in security logs. The app also downloads its fonts from Google Fonts, which means Google receives your IP address when those fonts are loaded.

What we do not collect

EstateSphere does not read your phone’s contacts, call history, SMS messages or location. Tapping “Call” opens your phone’s own dialer with the number filled in; the app does not place or record calls. We do not use advertising IDs, analytics SDKs or cross-app tracking.

2. How we use information

• To create and secure your account, sign you in, and send verification and password-reset codes by email.
• To store and show your company’s leads, properties, call lists, schedules and reports to the right people in your team.
• To send the WhatsApp, SMS or email campaigns and replies that you choose to send.
• To process subscription payments and keep billing records.
• To answer your support requests, prevent abuse and keep the service secure.
• To meet our legal obligations.

We process your information with your consent, which you give by creating an account and using the app, and where otherwise permitted by law, including India’s Digital Personal Data Protection Act, 2023.

3. Information about other people

When you add leads, property owners or other contacts, you decide what is stored about them and why. You are responsible for having a lawful reason to keep and contact these people and for honouring their requests. We process this information only on your company’s instructions, to provide the service. If someone asks us about information a customer stored about them, we will pass the request to that customer.

4. Who we share information with

We do not sell or rent personal information. Within your company, the company owner can see all of the company’s records and employees can see the records they created or that are assigned to them.

We share information only with the service providers that run EstateSphere, and only as needed for their part of it:

We may also disclose information if required by law, court order or a government authority, or to protect the rights, safety and security of our users or the public.

Google user data (Google Ads)

If your company owner chooses Campaigns → Google Ads → Connect Google Ads, EstateSphere asks Google for permission to use your Google Ads account (the https://www.googleapis.com/auth/adwords scope). Connecting is optional.

• What we access: the list of Google Ads accounts you can manage, your campaigns, and their daily results (spend, impressions, clicks, conversions).
• What we do with it: show those results next to your leads and, only when you press the buttons in the app, create a campaign (always created paused), start it after you confirm the budget, or pause it. We never start spending money by ourselves.
• What we store: a Google refresh token, kept encrypted in a secrets vault that the app cannot read, plus the campaign names, ids and daily results shown to you. We never see your Google password.
• What we do not do: we do not sell Google user data, use it for advertising to you, share it with anyone other than the providers in section 4 that run the service, or use it to train AI or machine-learning models. Only people in your company can see it.
• Disconnecting: the company owner can press Disconnect at any time. This revokes our access with Google and deletes the token. You can also remove EstateSphere in your Google Account under Security → Third-party access. Results already shown remain as business records until the account is deleted (section 9).

EstateSphere’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meta user data (WhatsApp, Facebook and Instagram)

If your company owner chooses Channel Setup → Connect WhatsApp or Campaigns → Meta Ads → Connect Meta, EstateSphere asks Meta for permission to use your WhatsApp Business Account, your Facebook Pages and your ad account. Connecting is optional, and you choose which Pages and which ad account EstateSphere may use.

• What we access: for WhatsApp, your WhatsApp Business Account and phone number (name, number, quality rating), your message templates, and the messages you send and receive through EstateSphere with their delivery status. For Facebook and Instagram, the list of your Pages and ad accounts, the lead forms on the Pages you select and the leads people submit on them, and your campaigns and their daily results (spend, impressions, clicks, leads).
• What we do with it: send the WhatsApp messages and templates you choose to send and show replies in your Inbox; create a lead in EstateSphere for each lead-ad enquiry, with the campaign and ad it came from; show ad results next to your leads; and, only when you press the buttons in the app, create an ad campaign (always created paused), start it after you confirm the budget, or pause it. We never start spending money by ourselves, and we do not message anyone on our own.
• What we store: a Meta access token (and, for WhatsApp, the number’s registration PIN), kept encrypted in a secrets vault that the app cannot read; the messages, leads, campaign names, ids and daily results shown to you. We never see your Facebook password.
• What we do not do: we do not sell Meta user data, use it for advertising to you, share it with anyone other than the providers in section 4 that run the service, or use it to train AI or machine-learning models. Only people in your company can see it, and employees see only what the company owner allows.
• Disconnecting and deleting: the company owner can press Disconnect at any time. This stops the data flowing from Meta, removes our access and deletes the token. You can also remove EstateSphere under Business Integrations in your Facebook settings. Messages and leads already received remain as business records until the account is deleted (section 9). To delete your data, follow the steps on our account deletion page.

If you message people through WhatsApp, you are responsible for having their permission and for following WhatsApp’s own terms and policies (see our Terms of Service). People who reply STOP are no longer sent campaign messages.

5. Where information is stored

EstateSphere’s database and files are hosted by Supabase in its Tokyo, Japan region. Your information may therefore be stored and processed outside India. We rely on providers that protect data with industry-standard security measures.

6. How we protect information

• All traffic between the app and our servers is encrypted with HTTPS.
• Database access rules ensure each company can reach only its own records, and employees only what they are allowed to see.
• Messaging credentials are kept in an encrypted secrets vault and are never shown back in the app.

No system is perfectly secure, but we work to protect your information and will notify affected users and authorities of a data breach as the law requires.

7. How long we keep information

We keep account and business data for as long as your account is active. When an account is deleted, we delete its data within 30 days, except billing and payment records, which we keep for as long as tax and accounting laws require. Security logs held by our hosting providers are kept for a limited period and then deleted automatically.

8. Your choices and rights

• Access and correction — you can see and edit your profile and records in the app, or ask us for a copy.
• Deletion — you can ask us to delete your account and data (see below).
• Withdrawing consent — you can stop using the app and ask for deletion at any time.
• Complaints — you can contact our grievance officer (below), and you may also complain to the Data Protection Board of India.

9. Deleting your account

In the app, or on the web at app.estatesphere.in, go to Settings → Delete account and confirm with your password; the deletion happens immediately. See our account deletion page. If you cannot sign in, you can email help@estatesphere.in from the email address on your account and we will do it for you.

• If you are a company owner, deleting your account deletes your company and all of its data — leads, properties, photos, call lists, campaigns and employee accounts.
• If you are an employee, your login and profile are deleted. Records you created belong to your company and stay with it unless the company owner deletes them.

Deletion you do yourself in the app is immediate. Requests sent to us by email are completed within 30 days, and we confirm by email when done.

10. Children

EstateSphere is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will change the effective date above, and for significant changes we will notify you in the app or by email before they take effect.

12. Contact and grievance officer

For questions, requests or complaints about privacy:

EstateSphere, proprietor Shalinder Pathak (developer and grievance officer)
Email: help@estatesphere.in
Website: estatesphere.in

We respond to requests within 30 days.