Privacy Policy

Last updated: 13 August 2026

This Privacy Policy describes how Anashwar Reality LLP ("Anashwar", "we", "us") collects, uses, discloses, and protects your personal data when you use the Anashwar Docs platform ("Service") at web.anashwar.com. This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

In brief: We collect only what is needed to procure your documents — your phone number, name, and the property details you provide. The documents we retrieve are official government records containing public land-ownership information. We do not sell your data. You can request access, correction, or deletion of your data at any time.

1. Who We Are

Data Fiduciary: Anashwar Reality LLP
Address: 3rd Floor, Darbar Square, Opp. Balaji Temple, Ram Mandir Rd, Vijayapura, Karnataka 586101
Contact: support@anashwar.com | +91-70191-90196
Grievance Officer: grievance@anashwar.com

2. Personal Data We Collect

2.1 Data you provide directly

Data	Purpose	Legal basis
Phone number (for OTP login via WhatsApp)	Account creation & authentication	Consent + contract performance
Name	Account identification; invoicing	Consent + contract performance
Email (optional, for email login)	Authentication; receipts	Consent
Property details (7-Point Key: district, taluk, hobli, village, survey no, surnoc, hissa)	To locate and retrieve the requested document from the government portal	Consent + contract performance
Payment information (processed by Razorpay; we do not store card/bank details)	To process payments for premium services	Contract performance

2.2 Data collected automatically

Data	Purpose
Usage data — IP address, browser type, pages visited, timestamps	Service operation, security, fraud prevention, analytics
Device identifiers — for session management	Authentication, security
Interaction data — pages and screens opened, which document you selected, taps and scrolls, whether an order was completed or abandoned	To find where the ordering flow fails and fix it. Collected through Google Analytics 4 and Microsoft Clarity. Form fields carrying your phone number, OTP, password and name are masked at source and are not transmitted, and the document viewer is masked so the contents of records delivered to you are not captured.

2.3 Retrieved government documents

Documents we procure on your behalf (RTC, EC, Mutation Register, etc.) are official government records containing public land-ownership information. Under the DPDP Act, personal data that is publicly available — including land records published on government portals accessible to any member of the public — is subject to reduced obligations. We process these records solely for the purpose of delivering them to you, the requester.

3. How We Use Your Data

To provide the Service: authenticate your account, locate the property you specified, retrieve the document from the official government portal, and deliver it to you;
To process payments: verify and record transactions for premium services, issue GST invoices;
To communicate with you: send order updates, OTPs, receipts, and support responses via WhatsApp, email, or SMS;
To comply with legal obligations: maintain financial records as required under GST law, respond to lawful requests from government authorities;
To improve the Service: analyse usage patterns, monitor for errors and abuse;
With your consent: for any other purpose we ask about specifically.

4. Legal Bases for Processing

Under the DPDP Act, we process your personal data on the following lawful bases:

Consent: you have given clear, specific, and informed consent (e.g., phone number for OTP, property details for retrieval). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Contract performance: processing is necessary to deliver the document procurement service you requested.
Legal obligation: processing is required to comply with Indian law (e.g., GST record retention).

5. Data Sharing and Disclosure

We share your personal data only in these circumstances:

Government portals: to retrieve your requested document, we submit the property identifiers you provide to the relevant official portal (Bhoomi, Kaveri Online, E-Aasthi) using our own registered accounts. The portal may log the query.
Payment processor: Razorpay processes payments. We share order details necessary for payment; Razorpay handles card/bank data under its own PCI-DSS compliance — we never see or store it.
Cloud infrastructure: our hosting provider stores data on our behalf under a data processing agreement.
WhatsApp / SMS gateway: to deliver OTPs and order notifications.
Legal compliance: if required by law, court order, or legitimate request from a government authority with jurisdiction.

We do not sell your personal data to any third party.

6. Data Retention

Data type	Retention period
Account data (phone, name)	Duration of your account; deleted within 30 days of account closure request
Retrieved documents	Stored in your account vault until you delete them; deleted automatically after 12 months of inactivity
Transaction & invoice records	6 years (as required under GST law, Section 44 of the CGST Act)
Usage logs	90 days for security and debugging

7. Data Security

We implement industry-standard security measures:

Encryption at rest: sensitive configuration (API keys, payment credentials) is encrypted in the database using AES;
Encryption in transit: all data is transmitted over HTTPS/TLS;
Access control: database and server access restricted to authorised personnel;
Payment security: payment processing delegated to a PCI-DSS compliant gateway (Razorpay);
Regular updates: dependencies and server software kept current.

Despite these measures, no system can guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you and the Data Protection Board of India as required under the DPDP Act.

8. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights regarding your personal data:

Right to access: request a summary of the personal data we hold about you;
Right to correction: request correction of inaccurate or incomplete data;
Right to erasure: request deletion of your personal data (subject to legal retention obligations such as GST records);
Right to grievance redressal: file a grievance with our Grievance Officer;
Right to nominate: nominate another individual to exercise your data rights in the event of death or incapacity.

To exercise any of these rights, email grievance@anashwar.com. We will respond within 30 days.

9. Children's Data

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.

10. Cross-Border Data Transfer

Your account, your orders and every document we retrieve or you upload are stored and processed on servers located in India. Two exceptions, both limited to the interaction data described in section 2.2: our analytics providers (Google Analytics 4 and Microsoft Clarity) process that data on servers outside India, including in the United States. Section 16 of the DPDP Act permits transfer to any country the Central Government has not restricted by notification; no such restriction applies to these transfers. No document, no uploaded file and no land record is ever sent outside India.

11. Cookies and Tracking

We use essential cookies for authentication and session management. We use no advertising cookies and no ad-retargeting pixels, and we run no third-party code on the pages where your documents are displayed beyond what is listed here.

Two analytics services set cookies to recognise a returning visit and measure whether an order was completed:

Google Analytics 4 (_ga) — visit counts, referral source, and the steps of the ordering flow you reached. Google acts as our processor for this data.
Microsoft Clarity (_clck, _clsk) — heatmaps and interaction quality, so we can see which controls are being tapped and missed. Microsoft acts as an independent controller for the data it collects and may use it for its own purposes under the Microsoft Privacy Statement. We therefore run it in masked mode: form fields carrying your phone number, OTP, password or name, and the viewer that displays your documents, are masked before anything is transmitted.

You can block both with any standard tracker-blocking extension or by blocking third-party cookies; the Service works normally either way. Neither is used to make any decision about you, your account or your pricing.

12. Grievance Redressal

Grievance Officer: Shubham Tiwadi
Email: grievance@anashwar.com
Phone: +91-70191-90196
Address: 3rd Floor, Darbar Square, Opp. Balaji Temple, Ram Mandir Rd, Vijayapura, Karnataka 586101

Acknowledgement within 48 hours; resolution within 15 days, per IT Rules 2021 and Consumer Protection (E-Commerce) Rules 2020. If unsatisfied, you may escalate to the Data Protection Board of India.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email and/or a prominent notice on the Service. The "Last updated" date above reflects the most recent revision.