Privacy Policy
Last updated 24 July 2026
This Privacy Policy explains how Listhop (operated by LISTHOP PRIVATE LIMITED, CIN: U62090KA2026PTC224737) (“Listhop”, “we”, “us”) collects, uses, shares, and protects your personal data when you use our websites, agent microsites, and services. We process personal data in accordance with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
By using Listhop you acknowledge this Policy. Where the law requires consent, we ask for it separately and you may withdraw it at any time.
1. Who we are
Listhop provides branded property microsites for real-estate agents and agencies, and a verified way for property seekers to reach them. The data fiduciary responsible for your personal data is LISTHOP PRIVATE LIMITED (CIN: U62090KA2026PTC224737), #627, 22nd B Main, 18th Cross, Sector 2, HSR Layout, Bangalore South, Bengaluru – 560102, Karnataka, India.
2. The personal data we collect
We collect only what we need to run the service:
- From agents/agencies: name, mobile number (verified by OTP), email, RERA registration number, company/agency name, agency membership and role, service area/city, profile and cover photos, and the listing content you publish (including listing media and the property details you declare, such as khata, approvals, or tenancy information).
- From property seekers (leads): your name, mobile number (verified by OTP), optional email, the property you enquired about or the agent you asked to contact you, any offer you chose to make, and your consent choices.
- Contact-sales enquiries: if you submit the contact-sales form we collect your name, company, work email, phone, team size, and message.
- Automatically: a randomly-generated session identifier, pages and listings viewed, and basic device/log information, used for first-party analytics, security, and abuse prevention.
- Consent records: each consent you give or withdraw, with its purpose, version, and timestamp, kept for audit.
Public by design: an agent’s or agency’s microsite content — name, company, photos, listings, and, once verified, the RERA registration number — is publicly visible. That is the product. A property seeker’s details are never public.
3. How we use your data, and why
- To create and operate agent microsites and publish listings.
- To verify identity and reduce fraud by sending a one-time password (OTP) to your mobile number.
- To connect a property seeker with the relevant agent when you complete an enquiry — the agent receives your contact details so they can respond. This is the core purpose of submitting an enquiry.
- To notify agents of new leads (for example by email), according to their notification settings.
- If you separately opt in, to send you matching properties and updates from across Listhop (“Listhop marketing”). This is optional and off by default.
- To measure and improve the service through first-party analytics.
- To keep the service secure, prevent abuse, and meet legal obligations.
Our legal basis is your consent and, where applicable, legitimate uses permitted under the DPDP Act (such as the purpose for which you voluntarily provided the data).
4. The two consents at the enquiry gate
When you contact an agent or agency through Listhop we record two separate things:
- Agent contact (required): that the named agent or agency may contact you about that and similar properties. Without this we cannot pass your enquiry on. This consent is recorded per agent — contacting a second agent records a separate consent for them.
- Listhop marketing (optional): that Listhop may send you matching properties from other listings. This is unticked by default; only if you tick it do you join our matching audience. You can withdraw it anytime.
5. When we share data
- With agents: when you complete an enquiry, your contact details are shared with that agent by design, so they can reach you.
- With the agency team: if your enquiry relates to an agency’s listing, or you asked to be contacted by an agency’s agent, the agency’s owner and admins can also view the lead — for follow-up and supervision within that agency.
- With service providers (data processors): hosting and database (Supabase, Mumbai (ap-south-1) region), web hosting/CDN (Vercel), transactional email such as lead alerts and sales-enquiry notifications (Zoho ZeptoMail), SMS/OTP delivery (MSG91), payment processing for subscriptions (Zoho Payments / Zoho Billing), and error monitoring (reports are scrubbed of personal data before they are sent). They process data only on our instructions.
- Location search (agents): when an agent searches an address while creating a listing, the search text is sent to Google Maps to return suggestions, under Google’s terms. Public microsite maps use a non-tracking tile service and show only approximate areas unless the agent chose to publish an exact location.
- WhatsApp: some buttons open a chat in WhatsApp. If you choose to continue there, that conversation happens on WhatsApp under Meta’s terms — Listhop does not see it.
- When required by law, court order, or to protect rights and safety.
We do not sell your personal data.
6. How long we keep it (retention)
- Agent/agency accounts: for as long as your account is active, and up to 12 months after closure (or longer where law requires, e.g. tax/GST records).
- Lead/enquiry contact details: retained for the agent’s legitimate follow-up. An unconverted lead’s personal data is kept for up to 18 months from the last interaction, after which it is deleted or anonymised, unless you have opted into Listhop marketing (in which case we keep it until you withdraw).
- Consent records: retained for the duration required to evidence compliance, even after the underlying data is deleted.
7. Your rights as a Data Principal
Under the DPDP Act you may:
- Access a summary of the personal data we process about you.
- Request correction or completion of inaccurate or incomplete data.
- Request erasure of your data where it is no longer needed.
- Withdraw any consent you have given (this won't affect processing already done).
- Nominate another individual to exercise your rights in case of death or incapacity.
- Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.
You can exercise most of these yourself, immediately, at listhop.in/account — download a copy of your data, switch Listhop marketing off, request deletion of your account, and sign out. Agents can also manage data and consent from their account settings. For anything else, contact our Grievance Officer (below).
8. Grievance Officer / Data Protection contact
Rahul Raman Ravindra
Email: support@listhop.in
LISTHOP PRIVATE LIMITED, #627, 22nd B Main, 18th Cross, Sector 2, HSR Layout, Bangalore South, Bengaluru – 560102, Karnataka, India
We aim to acknowledge requests within 7 working days.
9. Security
We use access controls, row-level security, OTP verification, encryption in transit, and least-privilege access so that, for example, an agent’s phone number is never publicly exposed and one agent cannot read another’s leads outside their own agency. No system is perfectly secure, but we work to protect your data and to notify you and the Board of significant breaches as required.
10. Children
Listhop is not intended for anyone under 18. We do not knowingly process the data of children without verifiable parental consent.
11. Changes to this Policy
We may update this Policy. Material changes are reflected by a new “last updated” date and, where appropriate, a fresh consent request. Continued use after an update means you accept the revised Policy.
12. Contact
Questions? Email support@listhop.in. See also our Cookie Policy and Terms of Service.