Legal

Privacy Policy

Last updated: February 2026. 500Bigha is operated by 500Bigha Realty Pvt. Ltd., Raipur, Chhattisgarh.

1. Information We Collect

Account data: name, email address, mobile number, and password (stored as a salted bcrypt hash).
KYC data: full name, last 4 digits of Aadhaar, document photo, and optional selfie. The full Aadhaar number is never stored.
Property data: listing photos, addresses, prices and descriptions you upload.
Communication data: enquiries you send, chat messages, and reviews you post.
Device data: browser type, IP address, approximate location (city level only), pages visited — used for analytics.

To create and manage your 500Bigha account.
To match buyers with property owners and facilitate enquiries.
To verify owner identity via manual KYC review and award the Verified Owner badge.
To send transactional notifications (enquiry alerts via WhatsApp/email, KYC decisions).
To detect fraud, enforce our Terms of Use, and comply with Indian law.

Owner contact details (phone, name) are shown to buyers viewing a listing — this is the core function of the platform.
Aadhaar documents are NEVER shown publicly. Only our internal verification team can view them.
We do NOT sell your data to advertisers.
We may share data with law-enforcement agencies on a valid legal request under Indian law.

Account data is retained as long as your account is active. You can request deletion any time at contact@500bigha.com.
KYC documents are retained for 3 years after verification, then permanently deleted.
Enquiry and message history is retained for 2 years for support and dispute resolution.

Access: request a copy of all data we hold about you.
Correction: update any inaccurate information directly from your dashboard.
Deletion: request permanent deletion of your account and associated data.
Withdrawal of consent: opt out of WhatsApp / email alerts from your dashboard at any time.

We use essential cookies for login sessions (JWT token stored in localStorage).
We use localStorage for language preference, PWA install dismissal, and saved wishlist.
We do not use 3rd-party advertising cookies.

Passwords are hashed with bcrypt — they are NEVER stored or visible in plain text.
All traffic is encrypted in transit via HTTPS / TLS 1.3.
KYC images are stored on access-restricted servers.
We recommend you use a strong, unique password.

500Bigha is not intended for users under 18 years of age. We do not knowingly collect data from minors.

We may update this policy occasionally. Material changes will be notified via email or an in-app banner. Continued use of the platform after changes constitutes acceptance.

By using 500Bigha, you acknowledge that you have read and understood this Privacy Policy.