Verisure Privacy Policy
Last Updated: August 2026 • Effective for all Verisure B2B Platforms & API Services
1. Scope & B2B Context
Verisure Technologies Private Limited (“Verisure”, “we”, “us”) provides business-to-business (B2B) CRM software, inventory management, telephony bridges, and site visit verification terminals exclusively to real estate developers, builders, channel partner organizations, and registered real estate brokerage firms (“Customers”).
This Privacy Policy describes how we process personal data in our capacity as a Data Processor when handling information on behalf of our enterprise Customers, and as a Data Fiduciary regarding our Customers' administrative user accounts.
2. Categories of Information We Collect & Process
A. Customer Account & Staff Data: Name, official work email address, phone number, organization designation, role permissions, and access credentials of staff members using the portal.
B. Channel Partner Network Data: RERA registration numbers, agency names, designated representative contact details, commission agreement slabs, and assigned sourcing campaign tokens.
C. Prospective Buyer & Inquirer Data: Buyer names, phone numbers, email addresses, unit preferences (budget, BHK configuration), lead source tags, geofenced sales gallery check-in logs, and call recordings conducted via our cloud telephony bridge.
D. Operational & Inventory Data: Tower availability states, unit pricing, floor rise schedules, token payment statuses, and broker commission ledger calculations.
3. Purpose of Data Processing
- Enforcing strict, cryptographic lead attribution between developers and sourcing channel partners to prevent lead piracy.
- Executing automated 45-second round-robin SLA routing to field sales executives via cloud telephony and WhatsApp API bridges.
- Verifying physical site visit walk-ins at sales galleries using geofenced QR kiosk terminals.
- Generating branded payment cost sheets, calculating PLC and taxes, and generating unit allocation invoices.
- Maintaining immutable audit logs for regulatory compliance under Indian RERA frameworks.
4. Data Storage, Sovereignty & Security
All production databases, backup snapshots, and call audio recordings are stored exclusively in ISO/IEC 27001 certified cloud infrastructure situated in Mumbai, India (AWS ap-south-1). We enforce:
- AES-256 encryption for all data at rest, including database volumes and object storage.
- TLS 1.3 encryption for all data in transit across public networks.
- Strict multi-tenant cryptographic isolation ensuring no cross-contamination between different developers or CP agencies.
- Role-based access control (RBAC) with audit logging on every lead export or sensitive data query.
5. Third-Party Integrations & Sub-Processors
Verisure does not sell, rent, or trade buyer or partner data to advertising brokers or data aggregators. Data is shared exclusively with verified technical infrastructure sub-processors essential to operating the platform:
- Telephony & VoIP Gateways: Cloud communication providers for virtual number call masking, audio recording, and auto-dialing.
- Meta WhatsApp Cloud API: Official business API for automated notification dispatch and broker conversation syncing.
- Cloud Hosting Providers: AWS Mumbai (Amazon Web Services) for scalable, secure compute and database clusters.
6. Data Retention & Customer Rights
Customers retain complete ownership over their data. Upon termination of service or upon written request, Customers may export their full database in standard formats (CSV/JSON/SQL). Verisure permanently purges tenant data from active clusters within 30 days of verified contract closure.
Under the Indian Digital Personal Data Protection (DPDP) Act 2023, data principals have the right to access, correct, and request erasure of their personal data processed through our systems, subject to statutory RERA record retention obligations.
7. Data Protection Officer (DPO) Contact
For data access inquiries, compliance audits, or data deletion requests, please contact our Data Protection Office: