Broghar CRM Privacy Policy

Last updated: August 19, 2026

This Privacy Policy explains how [Broghar legal entity name] ("Broghar", "we", "us", or "our") collects, uses, stores, discloses, and protects personal information when authorized users use the Broghar CRM mobile application and related services (the "App").

This App is intended for authorized Broghar team members, sales users, administrators, and other approved business users. It is not intended for public consumer self-registration.

Replace the bracketed placeholders in this document before publishing it.

1. Information We Collect

We collect information that is needed to provide and operate the App, including:

Account and Profile Information

• Name
• Mobile number
• User role, type, designation, and account status
• Profile image, if configured by the organization
• Login/session token and account identifiers

Authentication and OTP Information

• Mobile number used for login
• One-time-password request and verification information
• Login verification result

OTP delivery and verification are provided through MSG91 or its related OTP service.

Device and App Information

• Device operating system, such as Android or iOS
• Device name
• App version name
• Firebase Cloud Messaging token used to send push notifications
• Basic technical logs generated while using the App

CRM, Lead, Visit, Inventory, and Activity Data

The App may collect, display, or process CRM information, including:

• Lead names
• Lead phone numbers
• Lead city, location, source, interested property, plot, and status
• Assigned user and team activity information
• Follow-up notes, dates, and times
• Site visit details, including client name, phone number, plot, location, notes, status, reschedule date, and time
• Inventory details such as project name, plot number, address, area, project type, facing, plot status, and notes
• Dashboard metrics, notification counts, and performance summaries

Call Log Information

On Android, the App requests call log permission from non-admin users so call activity can be synced to the CRM. If permission is granted, the App may read and upload call log records related to call activity, including:

• Phone number
• Call type, such as incoming, outgoing, missed, or rejected
• Call date and time
• Call duration
• Call log identifier and timestamp

The App stores a local checkpoint to avoid repeatedly syncing the same call log records. Based on the current implementation, first sync starts from the beginning of the current day, and later syncs upload new call records after the last synced checkpoint.

Local Storage

The App stores limited information on the device using local storage, including:

• Login token
• User profile data
• Theme preference
• Call log sync checkpoint

2. Permissions We Request

Depending on device platform and operating system version, the App may request:

• Internet access to connect to Broghar servers.
• Notification permission to send lead, visit, activity, and CRM updates.
• Android call log permission to sync call activity with CRM records.
• Android phone state or phone number permissions if required by platform APIs, installed libraries, or call-log related functionality.

You can deny or revoke permissions through your device settings. Some App features may not work correctly if required permissions are unavailable.

3. How We Use Information

We use personal information for the following purposes:

• Authenticate users and maintain secure login sessions.
• Verify mobile numbers using OTP.
• Provide CRM features for leads, visits, follow-ups, inventory, call logs, dashboards, notifications, team performance, and user profiles.
• Sync permitted call activity to support sales activity tracking, follow-ups, reporting, and accountability.
• Send push notifications about leads, visits, follow-ups, activity updates, and other CRM events.
• Maintain security, prevent unauthorized access, troubleshoot errors, and improve reliability.
• Comply with legal, regulatory, contractual, and internal governance requirements.

4. Legal Basis and Consent

Where applicable law requires a legal basis, we process personal information based on one or more of the following:

• Your consent, including permission-based access to call logs and notifications.
• Performance of a contract or employment/business arrangement.
• Legitimate business purposes related to CRM operations, sales tracking, team management, security, and service delivery.
• Compliance with legal obligations.

If the Digital Personal Data Protection Act, 2023 or other Indian privacy laws apply, Broghar acts as the Data Fiduciary for personal data processed through the App unless another entity is identified in a written agreement.

5. How We Share Information

We may share information with:

• Authorized administrators, managers, team members, and internal business users based on role and access level.
• Service providers that help us operate the App, including hosting, backend infrastructure, OTP delivery, push notification, analytics, security, and technical support providers.
• MSG91 or related OTP providers for OTP delivery and verification.
• Firebase/Google services for push notification token management and messaging.
• Legal, regulatory, government, or law enforcement authorities where required by law or valid request.
• Professional advisers, auditors, or business partners where necessary for lawful business purposes.

We do not sell personal information. We do not use personal information for third-party advertising in the current App implementation.

6. Data Retention

We retain personal information for as long as needed to provide the App, operate CRM records, comply with legal or contractual requirements, resolve disputes, enforce agreements, maintain audit records, and support business operations.

Call logs, leads, visits, follow-ups, notifications, and CRM activity records may be retained as business records unless deleted under an applicable retention policy or approved deletion request.

Local data on the device may remain until the user logs out, clears App data, uninstalls the App, or the App removes it during normal operation.

7. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

The App uses authenticated access, role-based CRM permissions, OTP-based login, device-level permissions, and secure server communication where configured in production. Some limited data, such as login session information, user profile data, preferences, and sync checkpoints, may be stored locally on the user's device.

Users are responsible for keeping their mobile device, OTP, and account access secure. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International Transfers

Service providers and infrastructure used to operate the App may process information in India or other countries. Where required, we use appropriate safeguards for cross-border processing.

9. Your Choices and Rights

Depending on applicable law, you may have rights to:

• Access personal information held about you.
• Correct inaccurate or incomplete information.
• Request deletion of personal information, subject to business, legal, contractual, and retention requirements.
• Withdraw consent where processing is based on consent.
• Opt out of optional notifications through device settings.
• Revoke call log permission through Android settings.
• Raise a grievance or complaint with Broghar's designated contact.

To exercise rights, contact us using the details below. We may need to verify your identity and account authorization before acting on a request.

10. Children's Privacy

The App is intended for authorized business users and is not directed to children. We do not knowingly collect personal information from children through the App.

11. Third-Party Services

The App uses or may use third-party services and SDKs, including:

• MSG91 OTP services
• Firebase Cloud Messaging
• React Native and related mobile libraries
• Backend hosting and infrastructure providers selected by Broghar

These providers may process information according to their own terms and privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be posted in the App, on our website, or through another appropriate notice. The "Last updated" date shows when this policy was last revised.

13. Contact Us

Data Fiduciary / Company: BroGhar Realty

Address: B1-406, Palladium, Bh. Divya Bhaskar Press, Corporate Road, Prahladnagar, Ahmedabad - 380051, Gujarat, India

Email: info@broghar.in

Grievance Officer / Privacy Contact: +91 87340 97969