Privacy policy
How we collect, use, share and protect your personal data — and the rights you have over it.
Effective Date: 01 July 2026 Last Updated: 01 July 2026
1. Introduction
1.1 This Privacy Policy explains how Cornersite Private Limited ("CornerSite", "we", "us", "our"), which owns and operates the website https://cornersite.in and its related applications and services (the "Platform"), collects, uses, shares, stores and protects personal data.
1.2 This Policy should be read together with our Terms and Conditions, of which it forms part. Capitalised terms not defined here have the meaning given in the Terms.
1.3 This Policy is published in accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") read with the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), as and when the relevant provisions become applicable to us.
1.4 It constitutes an electronic record and does not require any physical or digital signature.
1.5 By using the Platform or submitting information through it, you acknowledge that you have read and understood this Policy. Where your consent is required by law, we will ask for it separately and specifically.
2. Who We Are in Relation to Your Data
2.1 For personal data collected through the Platform, CornerSite is the Data Fiduciary — the person who determines the purpose and means of processing. You are the Data Principal.
2.2 Where you submit an enquiry that we pass on to an owner, agent, builder or other advertiser ("Advertiser"), that Advertiser becomes an independent Data Fiduciary in respect of the data they receive, and their own handling of your data is not within our control. See clause 8.2.
2.3 Contact details for our data protection queries are in clause 14.
3. Personal Data We Collect From You
3.1 Information you give us directly
| Category | Examples | When collected |
|---|---|---|
| Identity and contact | Name, mobile number, email address, city | Registration, enquiry forms, callback requests |
| Enquiry data | Property of interest, budget, preferred locality, configuration, purchase or rent timeline, message text | When you contact an Advertiser or request assistance |
| Listing data (Advertisers) | Property address, photographs, floor plans, price, ownership or agency status, RERA registration number, contact details for display | When a listing is submitted to us or through the Platform |
| Account data | Username, password (stored in hashed form), saved searches, shortlists, preferences | Account creation and use |
| Transaction data | Plan purchased, invoice details, GSTIN, billing address, payment reference | Purchase of any paid service |
| Correspondence | Emails, WhatsApp messages, call records or notes where a call with our team is recorded | Support and sales interactions |
3.2 Information collected automatically
- Device and connection data: IP address, browser type and version, operating system, device identifiers, language settings.
- Usage data: pages and listings viewed, searches run, filters applied, links clicked, time spent, referring URL.
- Approximate location derived from IP address, and precise location only if you expressly grant your browser or device permission.
- Cookies and similar technologies — see clause 6.
3.3 We do not knowingly collect payment card numbers, bank credentials, government identifiers (Aadhaar, PAN, passport) or biometric data through the Platform, except where a specific verification or invoicing feature expressly requires it and tells you so at the point of collection. Card and banking details are handled directly by our payment gateway, not by us.
4. Personal Data Relating to Listings Sourced by Us
This clause describes a practice specific to how CornerSite currently operates, and we want to be transparent about it.
4.1 A significant portion of the listings presently on the Platform is compiled by our own team rather than posted by the owner or agent through the Platform. Sources include: publicly accessible social media posts and property groups; details shared with us by owners, agents and builders directly or through messaging applications; and images or screenshots of advertisements, from which we may extract text automatically.
4.2 Where such material contains personal data — typically the name, mobile number and locality of the owner or agent advertising the property — we may store it and, where the person has evidently published it for the purpose of soliciting enquiries, display the contact route on the listing.
4.3 We do so on the basis that the information was made publicly available by the person concerned for the express purpose of being contacted about that property. We do not treat such data as available for any other purpose, and specifically we do not use it for unrelated marketing, do not sell it, and do not build profiles from it.
4.4 We apply the following limits to sourced listings:
- a.contact details obtained from private or forwarded communications, rather than from a public advertisement, are used only to verify or publish the listing with the person's agreement;
- b.we do not publish residential addresses at a precision greater than is necessary to identify the property being advertised;
- c.we do not publish images that appear to show identifiable individuals, personal documents or interiors evidently not intended for advertising.
4.5 If your details appear on the Platform and you did not intend that, write to us at legal@cornersite.in or to the Grievance Officer (clause 14) identifying the listing. We will remove or anonymise it, ordinarily within 72 hours of verifying the request, and no explanation from you is required.
4.6 As self-serve posting is rolled out, listings will increasingly be submitted directly by owners and agents under the Terms, and this clause will apply to a shrinking share of the Platform.
5. Why We Process Personal Data
| Purpose | What this involves |
|---|---|
| Providing the Platform | Displaying listings, running searches, saving shortlists, maintaining your account |
| Connecting you with Advertisers | Passing your enquiry, name and contact number to the relevant Advertiser so they can respond |
| Communication | Responding to enquiries, sending service messages, alerts on saved searches, and transactional notifications |
| Paid services | Processing payments, issuing invoices, GST compliance, managing renewals |
| Verification and integrity | Checking the genuineness of listings, detecting duplicate, fraudulent or misleading content, preventing abuse |
| Security | Protecting the Platform against attack, unauthorised access and misuse; maintaining access and audit logs |
| Improvement and analytics | Understanding how the Platform is used, in aggregated or de-identified form wherever practical |
| Marketing | Sending offers and updates about CornerSite, where you have consented and subject to clause 10 |
| Legal | Complying with applicable law, responding to lawful requests, establishing or defending legal claims |
5.2 Basis of processing. We process personal data with your consent, or where permitted as a legitimate use under the DPDP Act — including where you have voluntarily provided data for a specified purpose and have not indicated that you object to its use for that purpose, and where processing is necessary to comply with law or a court order.
5.3 We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.
6. Cookies and Similar Technologies
6.1 We use cookies and similar technologies to keep you signed in, remember preferences and filters, measure usage, and secure the Platform.
6.2 Categories used: strictly necessary (session, authentication, security), functional (preferences, recently viewed), analytics (Google Analytics / self-hosted analytics), and advertising.
6.3 You can control cookies through your browser settings and, where a consent banner is displayed, through the preferences available in it. Blocking strictly necessary cookies may prevent parts of the Platform from working.
7. How Long We Keep Data
7.1 We keep personal data only for as long as it is needed for the purpose for which it was collected, or for as long as required under applicable law.
| Data | Indicative retention |
|---|---|
| Account data | While the account is active, and 180 days after closure |
| Enquiry and lead data | 24 months from the enquiry, to handle disputes and follow-ups |
| Listing data | While published, and 12 months after removal |
| Invoices and tax records | 8 years, as required under tax and companies legislation |
| Server, access and security logs | 180 days |
| Records relating to removed unlawful content | 180 days, as required of intermediaries under the IT Rules |
7.2 Where a purpose is no longer served — for example, because you withdraw consent or close your account — we will erase the data or irreversibly de-identify it, except where retention is required by law.
8. Who We Share Data With
8.1 We do not sell personal data.
8.2 Advertisers. When you submit an enquiry, we share your name, contact number, email and enquiry details with the relevant Advertiser so they can respond. That Advertiser then processes your data under its own responsibility. We require Advertisers to use such data only to respond to your enquiry, but we cannot guarantee their conduct, and their handling of your data is outside our control.
8.3 Service providers (Data Processors). We engage third parties who process data on our behalf under contract and only on our instructions — including bigrock pvt ltd, payment gateways, email and SMS/WhatsApp delivery providers, analytics providers, and customer support tooling.
8.4 Professional advisers and authorities. We may disclose data to our auditors, insurers and legal advisers, and to courts, regulators, law enforcement or other authorities where required by law or in response to a valid legal request.
8.5 Business transfers. In the event of a merger, acquisition, restructuring or sale of assets, data may be transferred to the acquiring entity, subject to this Policy continuing to apply.
9. Storage, Transfers and Security
9.1 Personal data is stored on servers located in India and operated by bigrock. Where data is transferred outside India, we do so in accordance with the DPDP Act and any restrictions notified by the Central Government from time to time.
9.2 We maintain reasonable security safeguards appropriate to the risk, including: encryption of data in transit (HTTPS/TLS); hashing of passwords; access control and least-privilege access for our personnel; network and database access restrictions; encrypted and tested backups; and logging and monitoring of access.
9.3 No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.
9.4 Breach notification. In the event of a personal data breach, we will notify the Data Protection Board of India and affected persons in the manner and within the timelines prescribed under the DPDP Rules, describing in plain language the nature of the breach, its likely consequences, the measures taken, and what you can do to protect yourself.
10. Communications and Marketing
10.1 By submitting an enquiry or sharing your contact details, you authorise CornerSite and the relevant Advertiser to contact you by call, SMS, email, WhatsApp or other electronic means in relation to that enquiry. This consent operates notwithstanding any registration under the National Do Not Call / DND registry.
10.2 Marketing communications about CornerSite's own offers are sent only where you have opted in. Every marketing email carries an unsubscribe link, and you can opt out at any time by writing to legal@cornersite.in.
10.3 Withdrawing marketing consent does not stop transactional and service messages relating to your account, listings or purchases.
11. Your Rights
11.1 Subject to applicable law, you have the right to:
- Access — obtain a summary of the personal data we hold about you, the processing carried out, and the identities of the Data Fiduciaries and Processors with whom it has been shared;
- Correction and completion — have inaccurate or incomplete data corrected, completed or updated;
- Erasure — request deletion of your personal data where the purpose is no longer served and retention is not required by law;
- Withdraw consent — withdraw consent at any time, as easily as it was given; withdrawal does not affect processing carried out before it;
- Nominate — nominate another individual to exercise your rights in the event of your death or incapacity;
- Grievance redressal — complain to us first (clause 14), and escalate to the Data Protection Board of India if you are not satisfied with our response.
11.2 To exercise any right, write to legal@cornersite.in from the email address registered with us, or use the controls in your account. We may ask for information reasonably necessary to verify your identity before acting.
11.3 We will respond within 30 days of receiving a verifiable request. Where we cannot fully comply — for example because we must retain records under tax or IT Rules obligations — we will tell you why.
11.4 Your duties. Under the DPDP Act you are required to provide authentic information, not to impersonate another person when providing data, not to suppress material information where legally required, and not to raise false or frivolous grievances.
12. Children's Data
12.1 The Platform is intended for persons aged 18 and above. We do not knowingly collect personal data of children.
12.2 Where processing of a child's personal data is required, we will obtain verifiable consent of a parent or lawful guardian as prescribed, and will not undertake tracking, behavioural monitoring or targeted advertising directed at children.
12.3 If you believe a child has provided us with personal data, write to legal@cornersite.in and we will delete it.
13. Third-Party Sites and Services
The Platform may link to third-party websites, home-loan providers, maps, payment gateways and other services. This Policy does not apply to them. Please read their privacy policies before sharing data with them.
14. Grievance Officer and Contact
14.1 For questions about this Policy or to exercise your rights:
Grievance Officer: Legal HeadCornersite Private LimitedMangalore,IndiaEmail: contact@cornersite.inData protection queries: legal@cornersite.inPhone: [Phone] (9.00 AM to 5.00 PM, Monday to Friday)
14.2 We will acknowledge your complaint within twenty-four (24) hours and respond substantively within fifteen (15) days, in accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Complaints specifically concerning personal data will be resolved within [30 days].
14.3 If you are not satisfied with our response, you may escalate to the Data Protection Board of India in the manner prescribed under the DPDP Act and DPDP Rules.
15. Changes to this Policy
15.1 We may update this Policy from time to time. The revised version will be posted here with a new "Last Updated" date.
15.2 Where changes are material — for example a new purpose of processing or a new category of recipient — we will notify you by a prominent notice on the Platform or by email, and where the law requires it, we will seek fresh consent.
Last updated: 04 Aug 2026.