Privacy Policy

AVnester is operated by AVNESTER PRIVATE LIMITED, a private limited company incorporated in India, with its registered office at 16/160 Giri Nagar, 1st Street, Kavundampalayam, Coimbatore - 641030, Tamil Nadu, India. This policy explains how we handle personal data on the AVnester website, mobile apps, the public MCP server at mcp.avnester.com, and the ChatGPT Actions integration (together, the "Platform").

For the Digital Personal Data Protection Act, 2023 ("DPDPA") and, where it applies, the EU General Data Protection Regulation ("GDPR"), AVnester is the Data Fiduciary / Controller of the personal data described below.

Account: name, email, phone, role (buyer / seller / agent / builder / developer), city, property preferences. Collected on registration; retained while the account is active and 30 days after a deletion request.

Listings and inquiries: property attributes, photos, RERA numbers where applicable, inquiry messages, and the inquirer's contact details. Listings: active plus 90 days after expiry. Inquiries: 3 years (limitation period under the Indian Contract Act, 1872).

Usage telemetry: pages viewed, searches, device, browser, IP, referrer. 90 days for product analytics; aggregated thereafter.

Analytics and advertising measurement (Google): on our website, and in the pages our apps display, Google Analytics and the Google Ads tag collect cookie identifiers, your IP address (Google uses it to estimate an approximate location; Google Analytics does not store it), device and browser details, the pages you view and the page that sent you, the Google ad you clicked if you arrived from one, and a few actions such as signing up, starting or submitting a listing (with details such as its listing ID, city, locality and property type), or asking to contact a seller. When you are signed in we also send a pseudonymous account ID, a random identifier that is never your name, phone number or email address. When a listing you create follows a click on one of our Google ads, our server also tells Google Ads that the click led to a listing: the ad click's ID, the listing's ID and the time, and nothing else. Google Analytics keeps this data for up to 14 months; our Google Ads remarketing lists keep a visitor for up to 180 days after their last visit.

Android app measurement (Google and Meta): our Android app also includes Google Analytics for Firebase and the Meta (Facebook) SDK. They collect app installs and app opens, device and app details, and your device's advertising ID, so we can measure how the app is used and which of our ads on Google or Meta led to an install.

Session diagnostics: a small percentage of sessions are recorded (clicks, scrolls, masked inputs) by Sentry and PostHog for crash diagnosis and UX research. Form fields, passwords, OTPs, and free-text PII are masked at capture. 30 days.

Voice input (Ava voice assistant): if you choose to speak to the assistant, we capture microphone audio — only after you grant the browser or device microphone permission — and send it for speech-to-text. The resulting transcript is handled like any other assistant message. We log voice-session diagnostics (detected language, provider, confidence, latency, and a short masked transcript snippet) as usage telemetry.

Voice call recording: when you place a voice call with Ava, we record the call — your spoken audio together with Ava's spoken replies — and retain it for up to 90 days, after which it is automatically deleted. We keep it to review conversation quality, investigate problems, and improve the assistant. Stored recordings are encrypted at rest, accessible only to authorised AVnester staff through secure, audit-logged playback (no public links, no downloads), and are never used to train AI models without your separate consent. You can turn voice-call recording off at any time under Settings → Privacy; doing so stops future recording and deletes the call audio already stored for you, usually within 24 hours. Turning it off does not stop you from using Ava by voice or text.

Location: approximate city-level location, only with your explicit consent.

Push tokens: APNs / FCM device tokens, only after you opt in. Deleted when you sign out or revoke notification permission.

Payments: name, billing address, GSTIN if you provide one, and a payment token. Card and UPI numbers are handled by Razorpay and never reach our servers. Invoices: 8 years (GST Act).

Audit logs: access logs, security events, admin actions. 7 years.

Removed or flagged content: 180 days after removal (IT (Intermediary Guidelines) Rules, 2021).

To operate the Platform: account management, listing publication, inquiry routing, search, recommendations, customer support.

To keep the Platform safe: fraud prevention, abuse detection, security investigation, enforcement of our terms.

To meet legal obligations: GST invoicing, RERA-related disclosures, court or regulator orders, IT Act intermediary duties.

To improve the Platform: product analytics, error monitoring, A/B tests on UX changes.

To advertise AVnester: to measure which of our ads lead to sign-ups, listings and enquiries, and to show our ads to people who have visited AVnester before (remarketing), using Google Ads; for our Android app we also measure installs that come from our ads on Meta. See "Advertising (Google and Meta)" below.

With your separate consent: marketing emails or SMS, location-based suggestions.

Analytics and advertising cookies on our website are on by default, and you can turn them off at any time. See "Cookies" and "How to opt out of analytics and advertising" below.

We do not sell your personal data. We do not use your personal data to train AI models. Tool calls made by AI clients (Claude, ChatGPT, others) via our public connector are processed to answer the request and are not added to any model-training dataset.

Under the DPDPA we rely on (a) your consent under §6 — for marketing, location and push, which you explicitly agree to, and for analytics and advertising cookies, which are on by default on our website and which you can withdraw at any time from Cookie Preferences; and (b) "certain legitimate uses" under §7, specifically: to provide the service you signed up for, to comply with law and court or regulator orders, and to respond to a medical or public-safety emergency.

Where the GDPR applies (EU / EEA / UK users): contract performance (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), legitimate interests in security and product improvement (Art. 6(1)(f)), and consent for marketing and non-essential cookies (Art. 6(1)(a)).

You may withdraw consent at any time at privacy@avnester.com or in your account settings. Withdrawal does not affect processing already carried out.

AI assistant (Ava): when you chat or speak with our in-app AI assistant, the messages you type or speak — and, when you are signed in, your saved property preferences — are sent to our third-party AI provider, Anthropic (Claude models), running on Amazon Bedrock (AWS), so it can generate a response. If you use voice, your audio is also sent to our speech providers (Sarvam AI, and Amazon Transcribe / Amazon Polly as fallback) for speech-to-text and text-to-speech. We ask for your explicit in-app consent before sharing this data, and it is never used to train AI models. See the "Sub-processors" section below for regions and safeguards.

Equal protection: every third party and sub-processor we share your personal data with — including our AI providers (Anthropic and Amazon Web Services / Amazon Bedrock), our voice providers (Sarvam AI, Amazon Transcribe, Amazon Polly), and Google and Meta for analytics and advertising — is bound by written terms that require them to safeguard your data to the same or an equally protective standard as set out in this policy. Our sub-processors may use it only for the purposes we specify and may not use it to train their own models. For the advertising described below, Google and Meta decide how they use the data they receive, as independent controllers under their own privacy policies and data-protection terms.

Advertising (Google and Meta): we advertise AVnester on Google (Search, YouTube and sites and apps in Google's network), and measure installs of our Android app that come from our ads on Meta (Facebook and Instagram). On our website we use Google Analytics with its advertising features (remarketing, Google Signals, demographics and interests reporting, and the link to Google Ads) and the Google Ads tag. Third-party vendors, including Google, show our ads on sites across the internet, and use first-party cookies (such as the Google Analytics and Google Ads cookies) and third-party cookies (such as Google advertising cookies) together, along with device identifiers, to show ads based on your past visits to our website or use of our app, and to measure which ads led to a sign-up, listing or enquiry. If you are signed in to a Google account and have allowed personalised ads, Google may link this activity to that account. For how Google uses this data, see "How Google uses information from sites or apps that use our services" at policies.google.com/technologies/partner-sites. How to opt out is explained under "How to opt out of analytics and advertising" below.

Listing owners and agents: when you send an inquiry, your name, contact details, and message are shared with the listing owner so they can respond.

App Store refund disputes (Apple): if you buy an AVnester plan through Apple’s App Store and later dispute that charge with Apple, you can choose — only with your explicit, opt-in consent in Settings → Privacy — to let us share a few limited signals with Apple to help resolve the dispute fairly: whether your account is in good standing, whether the plan was delivered and active, how long you have had your account, and a purchase reference token. We never share your purchase amounts, lifetime spend, or your card, UPI, or bank details. This sharing is off by default, applies only to an Apple refund request, and you can withdraw it at any time.

Sub-processors: see the next section. Each is bound by a written data-processing contract limiting use to the purposes we specify.

Law-enforcement and regulators: only on valid legal request (court order, written notice under the IT Act, or DPDPA / sectoral regulator demand).

Successors: in a sale, merger, or restructuring, your data may transfer to the acquirer subject to this policy.

We do not sell your personal data or share it with data brokers. Apart from the Google and Meta advertising and measurement described above, we do not share your personal data with advertisers, and we never give Google or Meta your name, phone number, email address or the messages you send.

Hosting and databases: Amazon Web Services (AWS), Asia Pacific (Mumbai), ap-south-1.

Authentication: Amazon Cognito (ap-south-1).

Email delivery: Resend (US-based; transactional emails only — recipient address and message body).

SMS and OTP: MSG91 (India-based).

Push notifications: Amazon SNS routed to Apple Push Notification service and Firebase Cloud Messaging.

Payments: Razorpay (India-based, RBI-licensed payment aggregator).

Voice (Ava): Sarvam AI (India-based) for speech-to-text and text-to-speech, with Amazon Transcribe and Amazon Polly (AWS, Mumbai ap-south-1) as fallback. On our iOS and Android apps, on-device speech recognition may be provided by Apple or Google under their respective privacy terms.

Error monitoring and session diagnostics: Sentry (US region) and PostHog (US region), with PII masking enabled.

Website and app analytics: Google Analytics and Google Analytics for Firebase (Google LLC, United States), processing data in the United States and other countries. Google's own use of data for advertising is described under "Advertising (Google and Meta)" above.

AI inference: Amazon Bedrock for Anthropic Claude text models (us-east-1), Bedrock for embeddings (ap-south-1), Bedrock for image models (ap-northeast-1). The direct Anthropic API and OpenAI API process tool-calling traffic initiated by users of those platforms. None of these providers use AVnester data to train their models under their commercial API terms.

Operational data — accounts, listings, inquiries, payments, audit logs — is stored in AWS Mumbai (ap-south-1).

Some processing necessarily happens outside India: text AI inference (Amazon Bedrock, us-east-1), image AI inference (Amazon Bedrock, ap-northeast-1), error monitoring and session diagnostics (Sentry and PostHog, US), analytics and advertising (Google and Meta, US and other countries), transactional email (Resend, US), and tool-calling traffic initiated by users of the Anthropic or OpenAI APIs (US). Such transfers are made under contractual safeguards (Standard Contractual Clauses or equivalent) and are limited to the data needed to deliver that service.

If the Central Government later restricts cross-border transfers under DPDPA §16, we will comply with the notified list.

Under the DPDPA you may: (a) ask for a summary of the personal data we hold about you and how it has been processed; (b) ask us to correct or update inaccurate data; (c) ask us to erase data we no longer need, subject to retention required by law (e.g., GST invoices for 8 years); (d) nominate a person to exercise these rights on your behalf if you die or become incapacitated; (e) withdraw consent; and (f) file a grievance.

Where the GDPR applies, you also have data portability and the right to object to processing based on legitimate interests.

To delete your account and personal data: if you are signed in, use Settings → Delete account for instant removal; otherwise request deletion without signing in at /delete-account. We erase your data within 30 days of verifying the request, subject to legal retention (e.g., GST invoices for 8 years).

To exercise any other right, email privacy@avnester.com. We respond within 30 days. You may complain to the Data Protection Board of India (DPDPA §27) or, where the GDPR applies, your local supervisory authority.

Essential cookies and browser storage keep you signed in, remember a device you chose to trust, protect sign-in against cross-site request forgery, and remember your cookie choices. They are always on.

Analytics and advertising cookies: first-party cookies set on avnester.com by PostHog (ph_…), Google Analytics (_ga, _ga_…) and Google Ads (_gcl_…), and third-party advertising cookies that Google sets on its own domains (such as doubleclick.net and google.com) when our pages load Google's tags. They tell us how the Platform is used and which of our ads work, and let Google show our ads to people who have visited AVnester.

On our website these analytics and advertising cookies are on by default from your first visit (we leave them off for automated browsers). In our iPhone app, Google Analytics and Google Ads load only if you allow tracking when iOS asks, and PostHog measures how the app is used without linking it to your account unless you allow tracking.

You can clear or block cookies in your browser. Blocking essential cookies will break sign-in.

Cookie Preferences: use the "Cookie Preferences" link at the bottom of any page, turn off Analytics and save. On that browser this stops PostHog collecting data, stops Google Analytics and Google Ads setting or reading their cookies, tells Google not to use your visits for advertising, stops sending the pseudonymous account ID, and deletes the Google Analytics cookies. Google's tag still loads and tells Google a page was viewed, without cookies and without your account ID, which Google uses to estimate total visits and ad results. Your choice is saved in that browser for 12 months, or until you clear this site's data; after that the default (on) applies again until you turn it off again. Repeat it on each browser or device you use. The same link works inside our apps.

Google: turn off personalised ads from Google at adssettings.google.com (My Ad Center), and block Google Analytics on every website with the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout. You can also opt out of many advertising companies' use of cookies at thenai.org/how-to-opt-out.

Android app: the Cookie Preferences link does not control Google Analytics for Firebase or the Meta SDK in our Android app. To stop your advertising ID being used, open your phone's Settings → Google → Ads (on some phones, Settings → Privacy → Ads) and delete or reset your advertising ID (on older Android versions, turn on "Opt out of Ads Personalization"). To control how Meta uses activity from apps, use "Your activity off Meta technologies" in your Facebook or Instagram Accounts Center.

iPhone app: Google Analytics and Google Ads load only if you allowed tracking when iOS asked. To turn them off, use Cookie Preferences in the app as described above, or turn off tracking for AVnester in iOS Settings → Privacy & Security → Tracking, which takes effect the next time the app opens.

Opting out does not stop you seeing AVnester ads. Visits after you opt out are not used to choose them, but a remarketing list you joined earlier lasts until it expires (up to 180 days).

The Platform is not directed to children under 18 and we do not knowingly collect personal data from them. Under DPDPA §9 processing of children's data requires verifiable parental consent and is otherwise restricted. If you believe a minor has registered, please email privacy@avnester.com and we will delete the account.

TLS 1.2+ in transit, AWS-managed encryption at rest (KMS), least-privilege IAM, AWS Secrets Manager for credentials, and continuous dependency scanning. See /legal/security for detail.

No system is perfectly secure. If you suspect a vulnerability, write to security@avnester.com — good-faith disclosure is welcomed and will not be pursued legally.

If a breach affects your personal data, we will notify you and the Data Protection Board of India (and any other regulator we are required to inform) without undue delay, in line with DPDPA §8(6) and CERT-In Directions of 28 April 2022.

When you use AVnester through an AI client via mcp.avnester.com or our ChatGPT Actions, the AI client sends only the structured arguments needed to answer your request — typically city, locality, property type, budget, bedrooms, or listing IDs. AVnester does not receive your chat history, transcripts, or the surrounding conversation.

Tool responses returned to AI clients contain only public listing fields. Internal trace IDs, log identifiers, authentication tokens, and seller private contacts (phone, email) are never sent to AI clients.

Every public tool call records metadata only — tool name, outcome, latency, and for OAuth applications the application's client id — used for reliability, rate-limit and billing purposes and kept for 13 months and then deleted. Each record also keeps the first word the calling software gives itself in its User-Agent header (for example "python" or "node"; a word shaped like an email, a web or IP address, a sign-in token or an AVnester key is dropped), for usage analytics only — never the full User-Agent header. Tool inputs are stored only for a ~1% random sample and for requests our abuse filters flag, with PII patterns (phone numbers, email addresses, OTPs, government IDs) stripped before storage and the same one word kept in place of the User-Agent header; those records are deleted after 90 days. Responses never contain trace, log or request-correlation identifiers.

When an app opens AVnester's sign-in screen, we count, per app and per day, how far each sign-in got — sign-in shown, failed and why (for example, credentials not accepted), signed in, consent shown, given or refused, and token issued. The counts hold no email address, account, IP address, browser detail or time of day, and are kept for 13 months and then deleted.

AVnester does not receive your identity from Anthropic or OpenAI. When you connect an app, it gets a token that identifies your AVnester account to us — not your phone number, email or name. We keep a record that you allowed it (the app and when), which you can see in Settings → Security → Connected apps, until you disconnect it, it expires after 30 days, or you delete your account.

You can opt out of AI-client access by emailing privacy@avnester.com. See /legal/ai-use for the full acceptable-use policy.

In compliance with IT (Intermediary Guidelines) Rules 2021 §3(2) and the DPDPA, our Grievance Officer is:

Vignesh Soundarapandian, Grievance Officer AVNESTER PRIVATE LIMITED, 16/160 Giri Nagar, 1st Street, Kavundampalayam, Coimbatore - 641030, Tamil Nadu, India Email: grievance@avnester.com

We acknowledge complaints within 24 hours and aim to resolve them within 15 days. Unresolved data-protection grievances may be escalated to the Data Protection Board of India (DPDPA §27). Consumer complaints may be filed with the appropriate Consumer Forum under the Consumer Protection Act, 2019. Online complaints under the IT Rules may also be filed at /grievance.

We will update this policy when our practices, providers, or applicable law change. The "Last updated" date above will move and material changes will be flagged on the Platform.

Privacy questions or rights requests: privacy@avnester.com.

Vulnerability disclosure: security@avnester.com.

Connector / MCP / ChatGPT integration: connector-support@avnester.com.