Privacy
Policy

Welcome to Vaasio ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at vaasio.in. Please read this carefully.

If you disagree with the terms of this policy, please discontinue use of the platform.

Personal Information: Name, phone number, email address, and profile details you provide during registration.

Listing Data: Property photos, addresses, rent details, and location coordinates submitted by property owners.

Usage Data: Pages visited, search queries, time spent on pages, and interaction data — collected automatically to improve our service.

Payment Data: We do not store payment card details. All transactions are processed securely through Cashfree, which is PCI-DSS compliant.

Device & Location: Browser type, IP address, and approximate location may be collected to personalise search results.

Device Permissions: To enable specific features, the platform may request permission to access your device hardware:

• Camera: Required for property owners to capture 360° room tours directly in the web app.
• Location: Used to show properties near you and display distance to nearby colleges and facilities.
• Notifications: Used to send real-time alerts for chats, bookings, and roommate connections.

We use the information we collect to:

• Create and manage your account
• Enable communication between tenants and property owners
• Process payments for premium listing plans
• Send platform updates, OTPs, and support replies
• Detect and prevent fraud or misuse
• Improve and personalise your experience on Vaasio
• Comply with legal obligations

We do not sell or rent your personal data to third parties. We may share data only in the following limited circumstances:

• Service Providers: Cashfree (payments), Supabase (authentication/database), Firebase (phone OTP), Vercel (hosting), and OpenAI (natural language search query assistance) — governed by their respective privacy policies and security safeguards.
• Legal Requirements: If required by law, court order, or government authority.
• Business Transfers: In the event of a merger or acquisition, data may be transferred.

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by emailing vaasio.in@gmail.com. Certain data may be retained for legal or tax compliance purposes.

We use essential cookies for session management and search preferences. We do not use advertising or third-party tracking cookies. You may disable cookies in your browser settings, though some features may not function correctly.

We use industry-standard measures including SSL/TLS encryption, role-based access control, and regular security audits to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Vaasio is intended solely for individuals who are at least 18 years of age (or have reached the legal age of majority in India). In accordance with the Digital Personal Data Protection Act, 2023, we do not knowingly process personal data of individuals under 18 years of age without verifiable parental consent.

If you believe an individual under 18 has provided us personal data, please contact us immediately at vaasio.in@gmail.com and we will take prompt steps to verify and delete such information.

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal:

• Right to Access: Know what personal data we hold about you and how it is being processed.
• Right to Correction & Erasure: Request us to correct inaccurate or outdated data, or erase your personal data when the specified purpose is no longer served.
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details below) if you believe your data rights have been violated.
• Right to Nominate: Nominate another individual to exercise your rights on your behalf in the event of death or incapacity.
• Right to Withdraw Consent: Withdraw consent for non-essential data processing at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, email us at vaasio.in@gmail.com with the subject line “DPDP Rights Request”. We will acknowledge your request within 24 hours and respond in accordance with applicable statutory timelines.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the platform after changes constitutes your acceptance.

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, details of our designated Grievance Officer are published below:

If your grievance is not resolved satisfactorily, you may escalate to the Data Protection Board of India (upon operational notification under the DPDP Act 2023) or appeal to the Grievance Appellate Committee (GAC) via www.gac.gov.in.