1. Information We Collect
Account information — name, email, phone, role, employer/bank name.
KYC information (Field Executives) — Aadhaar and PAN numbers, home address, working pincode.
Property inspection data — geo-tagged photos, plot dimensions, boundary details, bylaw notes, valuation amounts.
Device & usage data — IP address, device type, browser, session cookies, page-view analytics.
2. How We Use Your Data
To operate the property valuation workflow, route leads by pincode to the appropriate manager and field executive, generate reports for banks, compute executive payouts, and provide customer support.
To send transactional emails (password reset, lead assignment, report status updates) via our email service partner.
To detect fraud, enforce our Terms and comply with legal or regulatory requests.
3. Data Sharing
We share property inspection data only with the requesting bank and its authorised staff. We share Field Executive KYC only with the executive's approving Manager and with the bank on need-to-know basis for high-value reports.
We do not sell your data to advertisers or third parties.
We may share data with law-enforcement or regulatory authorities upon a valid legal request.
4. Data Retention
Account and report data is retained for the duration of the bank/executive relationship plus 7 years thereafter (RBI record-keeping norm). KYC data is retained per applicable KYC/AML law. On written request, we will delete non-mandatory data within 30 days.
5. Security
We hash passwords with bcrypt, encrypt data in transit (TLS 1.2+), and use scoped role-based access control (RBAC) with tenant isolation. Photo and document storage uses signed URLs with short expiry.
Login endpoints are protected by rate-limiting (5 failed attempts triggers a 15-minute lockout). Password reset links are one-time-use and expire in 30 minutes.
6. Your Rights
You have the right to access, correct or delete your personal data, and to object to specific processing activities. To exercise these rights, email privacy@ranaassociate.com.
7. Cookies
We use only functional cookies (authentication session, language preference). We do not use third-party advertising cookies.
8. Children's Privacy
The Platform is intended for adult professionals only and is not directed to children under 18.
9. Changes to this Policy
Material changes will be communicated at least 15 days in advance via email and a banner on the Platform. Continued use after the effective date constitutes acceptance.
10. Grievance Officer
In accordance with Section 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:
Name: Grievance Officer, Rana Associates
Email: grievance@ranaassociate.com
Jurisdiction: Jaipur, Rajasthan, India