Privacy Policy

Last updated: 13 August 2026

This Privacy Policy describes how Anashwar Properties ("Anashwar", "we", "us") collects, uses, discloses, and protects your personal data when you use the Anashwar Docs platform ("Service") at web.anashwar.com. This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

In brief: We collect only what is needed to procure your documents — your phone number, name, and the property details you provide. The documents we retrieve are official government records containing public land-ownership information. We do not sell your data. You can request access, correction, or deletion of your data at any time.

1. Who We Are

Data Fiduciary: Anashwar Properties
Address: 3rd Floor, Darbar Square, Opp. Balaji Temple, Ram Mandir Rd, Vijayapura, Karnataka 586101
Contact: support@anashwar.com | +91-70191-90196
Grievance Officer: grievance@anashwar.com

2. Personal Data We Collect

2.1 Data you provide directly

Data	Purpose	Legal basis
Phone number (for OTP login via WhatsApp)	Account creation & authentication	Consent + contract performance
Name	Account identification; invoicing	Consent + contract performance
Email (optional, for email login)	Authentication; receipts	Consent
Property details (7-Point Key: district, taluk, hobli, village, survey no, surnoc, hissa)	To locate and retrieve the requested document from the government portal	Consent + contract performance
Payment information (processed by Razorpay; we do not store card/bank details)	To process payments for premium services	Contract performance

2.2 Data collected automatically

Data	Purpose
Usage data — IP address, browser type, pages visited, timestamps	Service operation, security, fraud prevention, analytics
Device identifiers — for session management	Authentication, security

2.3 Retrieved government documents

Documents we procure on your behalf (RTC, EC, Mutation Register, etc.) are official government records containing public land-ownership information. Under the DPDP Act, personal data that is publicly available — including land records published on government portals accessible to any member of the public — is subject to reduced obligations. We process these records solely for the purpose of delivering them to you, the requester.

3. How We Use Your Data

To provide the Service: authenticate your account, locate the property you specified, retrieve the document from the official government portal, and deliver it to you;
To process payments: verify and record transactions for premium services, issue GST invoices;
To communicate with you: send order updates, OTPs, receipts, and support responses via WhatsApp, email, or SMS;
To comply with legal obligations: maintain financial records as required under GST law, respond to lawful requests from government authorities;
To improve the Service: analyse usage patterns, monitor for errors and abuse;
With your consent: for any other purpose we ask about specifically.

4. Legal Bases for Processing

Under the DPDP Act, we process your personal data on the following lawful bases:

Consent: you have given clear, specific, and informed consent (e.g., phone number for OTP, property details for retrieval). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Contract performance: processing is necessary to deliver the document procurement service you requested.
Legal obligation: processing is required to comply with Indian law (e.g., GST record retention).

5. Data Sharing and Disclosure

We share your personal data only in these circumstances:

Government portals: to retrieve your requested document, we submit the property identifiers you provide to the relevant official portal (Bhoomi, Kaveri Online, E-Aasthi) using our own registered accounts. The portal may log the query.
Payment processor: Razorpay processes payments. We share order details necessary for payment; Razorpay handles card/bank data under its own PCI-DSS compliance — we never see or store it.
Cloud infrastructure: our hosting provider stores data on our behalf under a data processing agreement.
WhatsApp / SMS gateway: to deliver OTPs and order notifications.
Legal compliance: if required by law, court order, or legitimate request from a government authority with jurisdiction.

We do not sell your personal data to any third party.

6. Data Retention

Data type	Retention period
Account data (phone, name)	Duration of your account; deleted within 30 days of account closure request
Retrieved documents	Stored in your account vault until you delete them; deleted automatically after 12 months of inactivity
Transaction & invoice records	6 years (as required under GST law, Section 44 of the CGST Act)
Usage logs	90 days for security and debugging

7. Data Security

We implement industry-standard security measures:

Encryption at rest: sensitive configuration (API keys, payment credentials) is encrypted in the database using AES;
Encryption in transit: all data is transmitted over HTTPS/TLS;
Access control: database and server access restricted to authorised personnel;
Payment security: payment processing delegated to a PCI-DSS compliant gateway (Razorpay);
Regular updates: dependencies and server software kept current.

Despite these measures, no system can guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you and the Data Protection Board of India as required under the DPDP Act.

8. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights regarding your personal data:

Right to access: request a summary of the personal data we hold about you;
Right to correction: request correction of inaccurate or incomplete data;
Right to erasure: request deletion of your personal data (subject to legal retention obligations such as GST records);
Right to grievance redressal: file a grievance with our Grievance Officer;
Right to nominate: nominate another individual to exercise your data rights in the event of death or incapacity.

To exercise any of these rights, email grievance@anashwar.com. We will respond within 30 days.

9. Children's Data

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.

10. Cross-Border Data Transfer

Your personal data is stored and processed primarily on servers located in India. If any processing occurs outside India, it will be conducted only in jurisdictions approved by the Central Government under the DPDP Act, or with your explicit consent and appropriate safeguards in place.

11. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics, if used, is configured to anonymise IP addresses.

12. Grievance Redressal

Grievance Officer: Shubham Tiwadi
Email: grievance@anashwar.com
Phone: +91-70191-90196
Address: 3rd Floor, Darbar Square, Opp. Balaji Temple, Ram Mandir Rd, Vijayapura, Karnataka 586101

Acknowledgement within 48 hours; resolution within 15 days, per IT Rules 2021 and Consumer Protection (E-Commerce) Rules 2020. If unsatisfied, you may escalate to the Data Protection Board of India.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email and/or a prominent notice on the Service. The "Last updated" date above reflects the most recent revision.