Privacy Policy
Last updated: 14 October 2026 · Khandelwal Infraheights Private Limited
This policy explains how OneGaj collects, uses and protects your personal information.
1. Information We Collect
We collect the information you provide when you create and use an account, which, depending on your role (Buyer, Builder, Owner, Broker, Team Leader or Associate), may include: your name, mobile phone number, email address, city/location, RERA registration number, company name, and a profile photo. If you are a Builder, we also collect details about the projects ('Schemes') you list, including location, pricing, specifications, amenities, unit inventory, and uploaded media (photos and documents). We also automatically collect limited technical information when you use the Platform, such as your IP address, browser type, device information, and standard server access logs, for security and diagnostic purposes.
2. How We Use Your Information
We use your information to: create and secure your account (including sending OTP codes to verify your phone number and, where provided, your email address); operate core features such as property search, Scheme listings, and your Profile; route Associates to the correct Team Leader; review and approve Builder registrations; respond to your enquiries and support requests; maintain the security and integrity of the Platform (for example, detecting fraudulent listings or abuse); and comply with applicable legal and regulatory requirements, including those under the Real Estate (Regulation and Development) Act, 2016, where relevant to listed projects.
3. Sharing & Disclosure
We do not sell your personal information. We share it only: with other users to the extent necessary for the Platform to function — for example, a Builder's company name, RERA number, and listed Scheme details are shown publicly to prospective Buyers, and a Team Leader can see the accounts of Associates assigned to them; with service providers who process data on our behalf under contract (for example, our cloud hosting and storage providers, currently Amazon Web Services, used to store account data and uploaded photos/documents securely in India); when required by law, regulation, court order, or a valid request from a government or regulatory authority; or with your consent. If OneGaj is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
4. Data Retention
We retain your account information for as long as your account remains active, and as needed to provide the Platform, resolve disputes, and comply with our legal obligations (for example, recordkeeping requirements under applicable law). You can permanently delete your account at any time from Profile → Delete Account, after a confirmation step and a one-time code you must retype to confirm. Deleting your account permanently removes your account record and personal data from our systems and immediately ends all active sessions, so you are logged out everywhere and cannot sign back in with the same account. A Team Leader with Associates still assigned to them must have those Associates reassigned to another Team Leader (by contacting OneGaj Admin) before their own account can be deleted, so that their Associates' access is never silently broken. Some information may be retained for a limited period after deletion where we are legally required to do so.
5. Your Rights & Choices
Depending on applicable law, you may have the right to access, correct, or delete your personal information, and to object to or restrict certain processing. You can view and update most of your profile details (name, phone, email, location, RERA number, company name, and photo) directly from your Profile page at any time — changing your phone number or email requires verifying the new one first. You can delete your account entirely as described in the Data Retention section above. For any other request relating to your personal information, contact us using the details in the Contact Us section below.
6. Cookies & Tracking
OneGaj does not use advertising or third-party tracking cookies. We keep you signed in using your browser's local storage, not cookies, for Buyer/Builder/Owner/Broker/Team Leader/Associate accounts. The Admin Panel sets one small, functional cookie, scoped only to admin pages, to remember that an admin session exists; it does not itself contain your session token and is not used for tracking. If we introduce analytics or marketing cookies in the future, we will update this section and provide any consent controls required by law.
7. Data Security
We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS) between your device and our servers, access-controlled cloud infrastructure, and storage of uploaded photos and documents on secure cloud storage (Amazon Web Services, hosted in the Mumbai, India region). Sensitive actions in our Admin Panel are restricted to authorized staff only. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any security concern raised to us.
8. Children's Privacy
The Platform is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us using the details in the Contact Us section below and we will take steps to delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Last updated" date below when we do, and for material changes we will take reasonable steps to notify registered users before the changes take effect.
10. Contact Us
If you have questions about this Privacy Policy, or wish to exercise any of the rights described in the Your Rights & Choices section above, please contact our Grievance Officer at support@onegaj.co.in.