Privacy Policy

1. Who we are

JebuK Properties is a real estate advisory business in Nashik, Maharashtra, India. It is a proprietorship. The proprietor is Hamid Kasam Khan, and he decides why and how personal information reaching this business is handled. That is the role the Digital Personal Data Protection Act, 2023 calls the Data Fiduciary.

We are registered with MahaRERA under registration number A031222602911.

Website: jebuk.com
Email: hello@jebuk.com
Telephone: +91 75078 23112
Nashik, Maharashtra, India

JebuK International is a separate business under the same brand. It handles enquiries about property outside India, keeps its own records, and publishes its own policy at international.jebuk.com. An enquiry you send here does not go there, and an enquiry sent there does not come here.

2. Scope

This policy covers:

• the website at jebuk.com and the forms on it;
• property enquiries and listing submissions made through those forms;
• lead forms we run on Facebook or Instagram, where the information reaches us;
• the calls, WhatsApp messages and emails that follow an enquiry.

It does not cover other companies' websites we link to, or JebuK International.

3. Information we collect

We have listed this by where it actually comes from, because "we may collect the following" tells you nothing about whether we did.

If you send a buyer enquiry on this site — your name, your mobile number, your email address if you choose to give one (it is optional), your buying timeframe, and whatever you write in the message box. People commonly use that box for budget, locality preference, configuration or a request to visit, so treat it as free text that we read.

If you list a property for sale on this site — your name and mobile number, the property's locality, asking price, area, configuration and status, its RERA position, whether you are the owner or acting as an agent, your description of the property, and the photographs you upload. Photographs you add to a listing are published. You may also upload documents for optional premium verification; those are held privately and are not published with the listing.

Phone verification — we send a one-time code by SMS to confirm the number is yours. We record that the number was verified, when, and which service delivered the code. We do not store the code itself after it has been used.

Technical information — the IP address a submission came from, used to rate-limit and to stop abusive or automated submissions, and the timestamp. Google reCAPTCHA runs on the pages that carry forms and assesses whether a submission is automated.

Analytics — Google Analytics records visits, which pages were read, roughly which region a visit came from and which page a visitor arrived on. It is not connected to your enquiry record.

Payment information, if you buy a listing upgrade — handled by Razorpay on their own systems. Card and bank details are entered with Razorpay and do not reach us. We see whether a payment succeeded and what it was for.

Through a Facebook or Instagram lead form — the fields that form asks for, which is normally name, mobile number, email address and a small number of questions about the requirement. Section 8 explains what happens next.

Afterwards — what you tell an advisor on a call, over WhatsApp or by email: budget, financing position, preferred localities, site visits, and the history of that follow-up. This is the part people most often forget is recorded, so it is written down here plainly.

We do not ask for Aadhaar, PAN or bank statements to answer a property enquiry. If someone claiming to be from JebuK asks you for those by message or email, treat it as suspicious and call the number above.

4. How we collect it

• Directly from you, through a form on this site.
• Directly from you, when you call, message or email us.
• From Meta, when you submit one of our lead forms on Facebook or Instagram.
• Automatically, in the limited technical sense described above: IP address, timestamps, analytics and anti-abuse checks.

We do not buy lead lists and we do not scrape contact details.

5. Why we use it

• To reply to the enquiry you sent, by phone, WhatsApp or email.
• To understand what you are actually looking for — budget, locality, configuration, timeframe — so the properties we show you are relevant.
• To pass your enquiry to an advisor and let them follow it up.
• To arrange calls, site visits and consultations.
• To keep following up while your requirement is live, because property decisions take months rather than days.
• To run the property listing service: reviewing a listing, verifying a number, publishing it, and connecting a buyer to it.
• To measure which adverts and pages produce genuine enquiries.
• To detect fraud and abuse, to keep the site working, and to investigate faults.
• To meet legal, tax and accounting obligations, and to handle a dispute if one arises.

We do not sell personal information. We do not use enquiry details for unrelated marketing.

6. Property enquiries and advisor follow-up

An enquiry is assigned to an advisor who calls you back. That advisor sees your name, number, and what you asked for, and adds notes as the conversation develops. If your requirement changes, the record changes with it.

Following up on a live property requirement is the service you asked for, not marketing. If you would rather we stopped, say so and we stop — section 18 explains how.

7. Facebook and Instagram lead forms

We run lead forms on Facebook and Instagram. If you fill one in:

• Meta collects what you typed into that form first, on its own systems and under its own terms and privacy policy. We are advertisers using Meta's product; we are not part of Meta and Meta is not part of us.
• We then receive the fields that form was set up to ask for.
• We may load that information into JebuK Revenue OS, the internal system we use to manage enquiries, so that it is assigned to an advisor and followed up like any other enquiry rather than sitting in a spreadsheet.
• We use it to reply, to understand the requirement, to assign and follow up, and to measure which campaigns and forms produce real enquiries.
• Where it is needed to answer what you asked for, relevant details may be shared with a developer, property owner or licensed partner — on the same terms as section 12.

What Meta does with the information in its own right is governed by Meta's privacy policy, not this one.

8. One-time codes and phone verification

Before a buyer enquiry or a property listing is accepted, we verify the mobile number by sending a one-time code to it. This is how we keep fake numbers and automated submissions out of the system, which protects buyers and sellers alike.

The code is delivered either through MSG91, an Indian SMS service, or through Firebase Authentication, depending on how the site is configured at the time. We keep the fact of verification, the time, and which service was used. We do not keep the code.

9. Analytics, cookies and similar technologies

This site uses Google Analytics 4 to count visits and see which pages are read. That involves cookies set by Google. It tells us things like which page you landed on and roughly which region you are in. It does not tell us who you are, and we do not join it to your enquiry record.

Google reCAPTCHA runs on the pages with forms and sets its own cookies to judge whether a submission is automated.

The site also stores a small amount of information in your own browser to keep a form usable between steps. That stays on your device.

Blocking cookies in your browser stops the analytics and will not stop you sending an enquiry.

10. Payments

If you pay for a listing upgrade, the payment is taken by Razorpay. You enter card or bank details with Razorpay, on Razorpay's systems, under Razorpay's terms. Those details are not sent to us and we do not store them. We see the outcome of the payment and what it related to, which we keep for accounting.

11. When we share information

We share personal information in four situations, and no others:

• with developers, property owners and licensed sales or channel partners, as described in section 12;
• with the service providers listed in section 13, who process it on our instructions so the site and the enquiry process work;
• where the law requires it, or to establish, exercise or defend a legal claim;
• where you ask us to.

We do not sell personal information and we do not share it for someone else's advertising.

12. Developers, owners and sales partners

Answering a property enquiry usually means someone other than us gets involved: the developer of a project you want to see, the owner of a resale flat, or a licensed partner handling that transaction.

So where it is needed to act on what you asked for, we share the details relevant to that enquiry — normally your name, contact number and stated requirement — with the specific developer, owner, partner or professional adviser concerned.

This is not a blanket handover. An enquiry is not broadcast to every developer on our list. Information goes to the parties relevant to the property or requirement in question, and only what they need to act on it. Once a developer or partner holds your details, they are responsible for their own handling of them.

If you would rather we did not pass your details to anyone, tell the advisor or email us. We will say plainly what we can still do for you without it, which in some cases is less.

13. Service providers

These are the services that actually touch this site's data, and what each one does. Nothing is listed here because it merely exists in the codebase.

• Google Firebase and Google Cloud — hosting the website, running the server-side code, and storing enquiries, listings and uploaded files.
• Firebase Authentication — verifying mobile numbers, where that route is used.
• MSG91 — delivering one-time codes by SMS in India, where that route is used.
• Google Analytics 4 — website measurement.
• Google reCAPTCHA — telling people apart from bots on the form pages.
• Razorpay — taking payments for listing upgrades.
• MahaRERA — we look up RERA registration details against the public MahaRERA service to check what a listing claims. That is a lookup of project or registration data, not a transfer of your personal information.

One clarification, because it is easy to misread: JebuK Revenue OS, mentioned in section 7, is our own internal system rather than a third party.

14. Where your information is processed

The services above run on Google Cloud infrastructure; the server-side components for this site are configured in Google's Mumbai region. Google, Razorpay, MSG91 and Meta are organisations that may process or store information on infrastructure outside India under their own terms.

JebuK Properties does not transfer your personal information to an overseas partner for a domestic property enquiry. That happens on the JebuK International side, for international property, under that separate policy and with separate consent.

15. How long we keep it

We have not set fixed calendar periods, and we would rather say so than publish a number we do not actually enforce. What governs it:

• We keep an enquiry while it is live and while there is a realistic prospect of helping you. Property decisions are slow and people who enquire one year often call back the next.
• We keep records of a completed transaction for as long as tax, accounting and legal obligations require.
• We keep what we need to handle a dispute, for as long as that dispute could reasonably arise.
• We keep limited security and anti-abuse records to stop the same abuse recurring.
• When you withdraw consent or ask for deletion, we act on it as described in sections 17 to 19, keeping only what we are required to keep and telling you what that is.

Setting published retention periods, and the automation to enforce them, is planned. Until it exists, the principles above are the honest description.

16. Security

The site is served over an encrypted connection. Enquiries and listings are stored in Google Cloud Firestore, and uploaded files in Google Cloud Storage, both configured so that they cannot be read or written directly from a browser — every read and write goes through our server-side code. Mobile numbers are verified before a submission is accepted, and the forms are rate-limited and protected by reCAPTCHA.

No system is perfect. If we discover a breach affecting your personal information, we will tell you, and we will notify the Data Protection Board of India where we are required to do so.

17. Your choices and privacy requests

You can ask us to:

• tell you what personal information of yours we hold and who we have shared it with;
• correct anything wrong or incomplete;
• delete information that is no longer needed for the purpose you gave it for;
• stop optional follow-up or promotional contact;
• withdraw a consent you gave.

These are things JebuK currently accepts requests to do, and we will also honour the rights the law gives you as they come into force. Email hello@jebuk.com from the address you used, or quote the mobile number you gave, so we can find your record. We will review privacy requests and grievances and respond within a reasonable period, taking into account the nature of the request and applicable law. If we cannot do what you asked, we will say why.

18. Withdrawing consent

Where we rely on your consent, you can take it back at any time. Email hello@jebuk.com with "Withdraw consent" in the subject line, or call +91 75078 23112 if you would rather speak to someone.

Withdrawal works from the moment you tell us. It does not undo something already done lawfully beforehand, and it cannot pull back details a developer or partner has already received — though if you want them to delete their copy too, say so and we will pass that request on.

Withdrawing consent for follow-up may mean we can no longer help with that requirement. That is a consequence, not a penalty, and we will tell you plainly what it affects.

19. Correction and deletion

Email hello@jebuk.com saying what is wrong or what you want removed, and give us the mobile number you used so we can find the right record.

For a correction, we will fix it and, where we have already passed the detail to a developer or partner for your enquiry, tell them too.

For a deletion, we will delete what we are not required to keep. Where something must be retained — a completed transaction record, for instance — we will tell you what and why rather than quietly keeping it.

20. Children

This site and our services are meant for adults buying, selling or investigating property. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, email hello@jebuk.com and we will delete it.

21. Links to other sites

We link to other websites, including MahaRERA and RERAExam. Once you leave jebuk.com, this policy no longer applies and the other site's own policy does.

22. Changes to this policy

If how we handle information changes, we will update this page and change the date at the top. Where a change affects something you previously agreed to, we will ask again rather than assume.

23. Privacy and grievance contact

For any question about this policy, a privacy request, or a complaint about how we have handled your information:

Contact for privacy questions and grievances
JebuK Properties
Email: hello@jebuk.com
Telephone: +91 75078 23112
Nashik, Maharashtra, India

Put "Grievance" in the subject line if you are complaining, so it is not mistaken for a property enquiry. We will review it and respond within a reasonable period, taking into account the nature of the request and applicable law.

If our answer does not satisfy you, the Digital Personal Data Protection Act provides for complaints to the Data Protection Board of India once the relevant provisions are in force.

24. Effective date

This policy takes effect on 15 September 2026 and replaces any earlier privacy statement for jebuk.com. Our separate Property Policy explains how the listing service itself works.