Privacy Policy

1. Data we collect

• Account data: your mobile number (verified by WhatsApp OTP), your name, and, if you give them, your LinkedIn profile and whether you are looking to buy or rent.
• Search and preference data: projects you view, shortlist, like, compare, or ask about; filters, budgets, localities, configurations, and answers you give in onboarding or to Manas.
• Conversation data: your messages to Manas and its replies, stored so the conversation continues across sessions and so we can improve the assistant.
• Visit and interest data: the projects and units you ask to visit or get pricing for, visit dates, feedback after a visit, and any price sheet shared with you.
• Referral data: your referral code and link, who joined through it, the name and mobile number of people you refer to us, and payout details (UPI ID) you provide to receive rewards.
• Rent board data: flats you save or dismiss, listers you contact, and (for listers) the public post the listing was gathered from.
• Device and usage data: IP address, approximate location derived from it, browser and device type, pages and screens viewed, clicks, session recordings of your use of the Platform, referral link clicks, a first-party visitor identifier, and a probabilistic device fingerprint used only to attribute referral clicks and to enforce guest limits.
• Support data: what you tell us when you contact care@mansio.ai or a video-call advisor.
• We do not knowingly collect data from children under 18, and we do not ask for financial account numbers, passwords, biometrics, or health data.

2. Why we use it (purposes and lawful basis)

• To create and secure your account and log you in (performance of our contract with you).
• To run the Platform: show you projects, remember your shortlist and comparisons, continue your Manas conversation, and personalise what you see (contract, and our legitimate interest in running the service you asked for).
• To arrange site visits and pricing with developers you choose (your consent, given when you ask for the visit).
• To run the referral programme, attribute signups to the right person, prevent fraud, and pay rewards (contract with participants; legitimate interest in preventing abuse).
• To send you service messages on WhatsApp such as OTPs, visit confirmations, price sheets, and referral updates (contract), and, with your consent, marketing messages about projects, offers, and Mansio features (consent; withdraw at any time, see section 8).
• To understand how the Platform is used and improve it, including analytics, session replay, and training and evaluating Manas on de-identified conversations (legitimate interest; you may opt out of analytics cookies).
• To measure our advertising and show our ads to people who have visited Mansio (legitimate interest; you may opt out of advertising cookies, see section 7).
• To comply with law, RERA obligations, tax rules, and lawful requests from authorities (legal obligation).

3. Who we share it with

• Developers and their authorised sales partners: your name, mobile number, and the project or unit you asked about, only when you request a visit, pricing, or express interest in that project.
• Mansio advisors and visit partners who accompany or arrange your site visit.
• Service providers who process data for us under contract: cloud hosting (Google Cloud), WhatsApp Business messaging providers (Meta and our messaging partner), analytics and session replay (PostHog), device fingerprinting (FingerprintJS), AI model providers used to power Manas (which process your messages to generate replies and are contractually barred from using them to train their own models), map and geocoding providers, and payment rails for referral payouts.
• Advertising and measurement partners (social networks, search engines and other platforms where we run ads), through the tags described in section 7. They receive page visits, actions on the Platform and device details, not your name or mobile number.
• The person who referred you, who can see that someone joined through their link and the stage your journey has reached (signed up, visit done, unit booked), but not your name or number unless you gave it to them yourself.
• Authorities, regulators, or courts where the law requires, and a successor if Mansio is merged or acquired (you will be notified).
• We do not sell your personal data.

4. Where it is stored and for how long

Data is stored on servers in India and on cloud regions operated by our providers, which may include locations outside India permitted under the DPDP Act. We keep account data for as long as you have an account and for up to three years after it closes, unless a longer period is required by law (for example, tax records for referral payouts). Conversation and usage data may be kept in de-identified form for analytics and model improvement. OTPs are deleted once used or expired.

5. Your rights

• Access: ask for a copy of the personal data we hold about you.
• Correction and erasure: ask us to correct inaccurate data or delete your account and data, subject to what we must keep by law.
• Withdraw consent: stop marketing messages or analytics at any time; this does not affect processing done before withdrawal.
• Grievance: complain to our Grievance Officer (below) and, if unresolved, to the Data Protection Board of India.
• Nominate: name a person to exercise these rights for you in the event of death or incapacity.
• Write to care@mansio.ai from the number or email on your account. We respond within 30 days.

6. Security

We use encryption in transit, access controls, token-based sessions, hashed OTPs and IP addresses, and regular reviews to protect your data. No system is perfectly secure; if we learn of a breach affecting you we will notify you and the Data Protection Board as the law requires.

7. Cookies and similar technologies

Strictly necessary. Required for the Platform to work and cannot be switched off: session and refresh tokens that keep you logged in; your Buy/Rent side, last-visited Explore route, saved chat-box placement and whether you have seen the welcome banner; a device identifier that counts free guest actions before login; and referral attribution, which sets a first-party visitor cookie (mansio_vid, 400 days), a short-lived click cookie (mansio_click, 10 minutes) and the referral code cookie (mansio_ref, 1 hour) when you open an invite link, so the person who invited you is credited if you sign up within the hour. The code is cleared on your first successful login.

Analytics and performance. With your consent, PostHog sets identifiers and records page views, clicks and session replays so we can see what works and fix what does not. Replays mask text you type into fields. We also use a device fingerprint (FingerprintJS) to attribute referral clicks and detect abuse; it is probabilistic and never used for advertising.

Advertising and measurement. On mansio.ai, tags from our advertising and measurement partners (social networks, search engines and other platforms where we run ads) set cookies that record your visit and actions such as signing up or requesting a site visit. We use them to measure our ads and to show our ads to people who have visited Mansio. The partners process this data under their own privacy policies. We do not give them your name or mobile number.

Third-party content. Maps (Google Maps, MapLibre tiles), embedded video and WhatsApp click-to-chat links may set their own cookies under their own policies when you use those features.

Your choices. You can block or delete cookies in your browser settings; strictly necessary ones are re-created when you next use the Platform, and blocking them may stop login or referral attribution from working. To opt out of analytics or advertising cookies, write to care@mansio.ai or use the opt-out where offered on the Platform. Do Not Track signals are honoured for analytics.

8. WhatsApp communication

Mansio runs on WhatsApp: it is how you log in and how we reach you. By entering your mobile number and continuing, you confirm the number is yours or you are authorised to use it, and you consent to Mansio and its messaging partners sending you the two kinds of message below on WhatsApp (and, if WhatsApp delivery fails, by SMS). This consent is recorded with the date, time and the number you gave.

• Utility (service) messages, sent because you asked for something or have an account, for as long as you have an account: one-time passwords to log in; site-visit confirmations, reminders, advisor details and post-visit follow-ups; price sheets, availability and documents you requested; referral programme updates (someone joined through your link, a reward was unlocked, a payout was made); rent board contacts you initiated and replies from listers; account, security and policy notices.
• Marketing messages, sent only with your consent, which you give by continuing to log in unless you opt out: new launches, price changes and offers on projects matching your search; curated shortlists, market insights and locality reports from Manas; invitations to events, site-visit drives and referral campaigns; product updates and new Mansio features. We keep marketing to a reasonable frequency, send during daytime hours in India, and never send marketing to a number that has opted out.
• Opting out. Reply STOP to any Mansio marketing message, or write to care@mansio.ai from your registered number, and marketing stops within 48 hours. Utility messages continue because the service needs them; to stop those, close your account. You can opt back in at any time by replying START or logging in and confirming.
• How it works. Messages are sent through the WhatsApp Business Platform (Meta) via our messaging partner. Meta and the partner process your number and message content to deliver them, under their own terms and privacy policies. We do not share your number with other businesses for their own marketing. Standard data charges from your carrier may apply.

9. Changes and contact

We may update this Policy; the date at the top shows the current version and material changes are notified on the Platform. Grievance Officer: [Grievance Officer name], care@mansio.ai, [registered address], Bengaluru.