Privacy Policy & Data Governance

1 Platform Nature & Business Scope

AuctionDekho (accessible via http://auctiondekho.co.in) is operated by AuctionDekho Internet Services Private Limited ("Company", "We", "Us", "Our"). The platform functions exclusively as:

• An information search engine and data aggregator indexing officially published SARFAESI and DRT bank auction gazettes, newspaper notices, and nodal e-auction listings.
• A consulting and due diligence facilitator offering paid legal title verification, physical vs. symbolic possession checks, and site inspection reports via independent empanelled advocates and chartered engineers.

AuctionDekho is not a bank, asset reconstruction company (ARC), non-banking financial company (NBFC), or auctioneer. We do not conduct auctions or handle earnest money deposits (EMD).

2 Information We Collect

We collect personal information under principles of data minimization and lawfulness under Section 43A of the Information Technology Act, 2000 and the DPDP Act, 2023:

3 Purpose of Data Processing

We process your data for legitimate business operations and contractual fulfillment:

• Digital Subscription Delivery: Granting instant access to consolidated SARFAESI listings, reserve prices, official bank notice PDFs, and Authorised Officer contact intelligence.
• Due Diligence Execution: Sharing property and contact details with verified panel advocates and chartered valuation engineers to execute requested legal title audits or on-site inspections.
• Transaction Processing: Enabling seamless checkout via Razorpay / Cashfree, processing tax invoices, and preventing duplicate charge errors.
• Service Notifications: Dispatching requested price-drop alerts, auction countdown notices, and watchlist updates via email or WhatsApp.
• Platform Integrity & Bot Mitigation: Identifying and blocking automated scrapers, malicious bots, and denial-of-service attempts.

4 Non-Sale of Data & Anti-Spam Commitment

5 Data Sharing with Authorized Third Parties

We disclose personal information only to trusted service partners operating under strict confidentiality and security agreements:

• Payment Aggregators (Razorpay / Cashfree): Fully compliant with PCI-DSS standards and RBI Payment Aggregator frameworks for tokenized transaction execution.
• Empanelled Legal & Valuation Professionals: Qualified advocates, surveyors, and chartered engineers assigned to execute user-commissioned title searches or physical site inspections.
• Statutory & Regulatory Authorities: Only when legally compelled by a court of competent jurisdiction, formal law enforcement subpoena, or statutory tax authority in India.

6 Security Standards & Retention

We implement physical, administrative, and technological controls to safeguard your data against unauthorized access, loss, or alteration:

• 256-Bit SSL/TLS Encryption: All communications between your client device and our servers are encrypted using modern Transport Layer Security (TLS 1.3).
• Database Security: Data is hosted within certified Indian cloud data centers complying with data localization guidelines.
• Retention Period: Active account data is retained for the duration of your membership. Financial transaction logs are preserved for 7 years to satisfy statutory obligations under the Indian Goods and Services Tax (GST) Act and Income Tax Act, 1961.

7 Your Rights under the DPDP Act, 2023

As a data principal under Indian law, you possess explicit rights regarding your personal data:

• Right to Access: Request a digital summary of your personal information and transaction history held on our servers.
• Right to Correction: Update inaccurate or outdated profile details directly via your account dashboard.
• Right to Erasure: Request the irreversible deletion of your registered account and non-statutory data by emailing [email protected].
• Right to Grievance Redressal: File a formal grievance regarding data handling directly with our designated Grievance Officer.