Privacy Policy

Pindrop connects renters directly with property owners by paying local “scouts” (Partners) to photograph “To-Let” boards they find on the street and submit them through the Pindrop Partner app. Our team reviews each submission, verifies the property, and lists it for renters to browse for free — without broker fees.

IPPO RE Technologies LLP is the entity responsible for the Services and acts as the data controller/fiduciary for the personal data described in this Policy, unless stated otherwise.

The data we collect depends on how you use Pindrop.

If you use the Pindrop website or renter app

• Mobile number (used to sign in via a one-time password, or “OTP”)
• Name and email, if you choose to provide them on your profile
• Saved/favorited listings and search activity within the app
• Push notification device token, if you enable notifications

If you are a Partner (scout) using the Pindrop Partner app

• Mobile number, and an optional name and profile photo
• Photographs of To-Let boards and properties that you submit, and the precise GPS coordinates captured at the moment each photo is taken
• Text automatically extracted from your photos (see “Sensitive data” below), which may include the property owner’s name and phone number if visible on the board
• Identity verification (KYC) documents you submit to receive payouts — see Section 3
• UPI ID and wallet/earnings/withdrawal history
• Push notification device token

If you contact our support team or an admin/representative

• The content of your communications with us
• For property owners we or our representatives contact to verify a listing: name, phone number, and notes from that outreach (call/SMS/email)

Automatically, from everyone who uses the Services

• IP address and user-agent (browser/device/app version)
• Login and account-activity logs (e.g. sign-ins, submissions, approvals, withdrawals) kept for security and audit purposes

To pay Partners for approved submissions, we are required to verify their identity. Partners may be asked to upload photographs of:

• Aadhaar card (front and back)
• PAN card (front and back)
• Driver’s license (front and back)
• A selfie holding their Aadhaar card, to confirm it belongs to them

These are stored securely and are only visible to authorized Pindrop admins reviewing Partner verification. We do not use these documents for any purpose other than identity verification, fraud prevention, and complying with our legal obligations.

Separately, when a Partner submits a photo of a To-Let board, we run an automated text-recognition (OCR) process on the image to speed up data entry. This can extract a phone number, an owner’s name, and a property/flat number if those are visible on the board itself. This extracted text is reviewed by our team before a listing is published.

The Pindrop Partner app requests camera access so scouts can photograph To-Let boards, and location access so we can record where each photo was taken and confirm the scout was physically present at that location when submitting it (submissions are blocked if the scout moves more than roughly 50 meters from the spot before submitting). Location is only accessed in the foreground, while the app is open and in use — Pindrop does not track Partners’ location in the background.

The renter-facing website and customer app do not request access to your device camera or your live location. They display property locations that Partners have already submitted, on a map.

• To create and secure your account, and to sign you in via OTP
• To review, verify, and publish property submissions, including checking for duplicate submissions
• To calculate, process, and pay out Partner rewards and withdrawals
• To verify Partner identity and prevent fraud or abuse of the rewards program
• To contact property owners to confirm listing details
• To send you transactional notifications (e.g. submission status, withdrawal status, OTPs) by push notification or SMS
• To maintain the security, integrity, and audit trail of the Services
• To comply with legal obligations and respond to lawful requests

We do not use your data for third-party advertising, and we do not sell personal data.

Where India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) applies, we process your personal data on the basis of your consent (for example, when you provide your mobile number to sign in, or submit KYC documents), and for certain limited purposes permitted by law without consent, such as verifying identity to prevent fraud, complying with legal obligations, or performing functions necessary to provide the Services you have requested (such as paying out an approved reward).

We share personal data only as needed to operate the Services:

• With property owners/renters: a listing’s location, photos, and property details are shown to renters browsing the platform. We do not display a Partner’s personal contact details to renters.
• With our service providers who process data on our behalf, listed in Section 8 below.
• For legal reasons, if required to comply with a legal obligation, protect the rights or safety of Pindrop, our users, or the public, or investigate fraud.
• Business transfers, if Pindrop is involved in a merger, acquisition, or sale of assets, in which case personal data may be transferred as part of that transaction.

We rely on the following providers to deliver the Services. Each only receives the data necessary to perform its function on our behalf.

These providers are contractually restricted from using your data for any purpose other than providing services to Pindrop.

Partners are paid rewards for approved submissions via UPI. We store the UPI ID you provide and your wallet balance, pending earnings, and withdrawal history in order to process payouts and maintain accurate financial records. We do not store your UPI PIN or bank credentials — Pindrop never has access to these.

We retain personal data for as long as your account is active and as needed to provide the Services, resolve disputes, enforce our agreements, and meet legal, tax, and accounting obligations.

• KYC documents (Aadhaar, PAN, driver’s license, selfie): retained for as long as your Partner account remains active, and may be retained afterward for fraud prevention, audit, and legal/compliance purposes.
• Submissions, listings, and transaction/withdrawal history: retained indefinitely as part of our financial and operational records, even after a submission is processed.
• Security and audit logs (including IP address and device/browser information): retained to protect the security and integrity of the Services and investigate misuse.
• OTP codes: automatically deleted a few minutes after issuance, whether or not they are used.

If you would like your account and associated personal data deleted, contact us using the details in Section 17 and we will action your request, subject to any data we are required or permitted to keep for legal, fraud-prevention, or accounting reasons.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) between our apps and servers, access controls that limit which staff can view sensitive data such as KYC documents, and hashed storage of account passwords. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to continuously improve our safeguards.

Subject to applicable law, you may:

• Request a copy of the personal data we hold about you
• Ask us to correct inaccurate or outdated personal data
• Ask us to delete your account and associated personal data
• Withdraw consent for optional data uses (e.g. push notifications) at any time by adjusting your device/app settings
• Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, in accordance with the DPDP Act

To exercise any of these rights, contact us using the details in Section 17. We may need to verify your identity before actioning certain requests.

In accordance with India’s Digital Personal Data Protection Act, 2023, if you have a complaint or grievance regarding how we handle your personal data, you may contact our Grievance Officer at support@thepindrop.site. We aim to acknowledge and address grievances within the timelines prescribed by applicable law.

The Services are intended for use by individuals who are at least 18 years old. Becoming a Partner requires submitting government identity documents for verification, which are not issued to minors. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Pindrop primarily operates in India, and our infrastructure and service providers (such as AWS and Google Cloud) may process and store data on servers located outside your home country. Where this occurs, we take steps to ensure your data continues to receive an appropriate level of protection consistent with this Policy and applicable law.

We may update this Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will update the “Effective date” above when we do, and where changes are material, we will provide additional notice (such as an in-app notification).

If you have questions about this Policy or how we handle your personal data, contact us at:

IPPO RE Technologies LLP
Email: support@thepindrop.site