Privacy Policy

1. Overview & Commitment to Privacy

This Privacy Policy explains how MySFT.ai (“MySFT”, “we”, “us”, or “our”) collects, processes, stores, and safeguards data when you visit our website, use our SaaS applications, communicate with our sales or support representatives, or operate your real estate business workflows on our platform.

We distinguish between two principal categories of data:

• Customer Enterprise Data: Proprietary operational data processed on behalf of real estate developers, property managers, and builders (where MySFT acts as a Data Processor).
• Direct Account & Website Data: Business contact details, website engagement data, and product inquiry information collected directly (where MySFT acts as a Data Controller).

2. Information We Collect

Depending on your engagement with MySFT, we collect the following categories of information:

3. How We Use Real Estate Data

We process information exclusively for lawful business purposes, including:

• Providing, operating, maintaining, and supporting the MySFT real estate operating modules.
• Synchronizing end-to-end real estate lifecycles—from initial lead capture and unit inventory release to customer booking, payment processing, and resident handover.
• Generating real-time financial reporting, collection aging analytics, and inventory velocity dashboards.
• Delivering administrative notifications, security alerts, and system status updates.
• Fulfilling legal, statutory, tax, and regulatory compliance obligations.

We do not sell, rent, monetize, or broker personal information or enterprise customer data to advertisers or third-party data brokers under any circumstances.

4. AI & Machine Learning Governance

5. Data Sharing & Verified Sub-Processors

We engage trusted infrastructure and cloud partners to deliver reliable, high-availability services:

6. Security & Storage Safeguards

MySFT implements multi-layered defensive security controls designed to prevent unauthorized access, disclosure, or alteration:

• Cryptographic Protection: TLS 1.3 encryption for data in transit; AES-256 bit encryption for data at rest across relational databases, document storage, and backups.
• Access Governance: Granular Role-Based Access Controls (RBAC), multi-factor authentication (MFA), and automated session expirations.
• Immutable Audit Logging: Comprehensive logging of administrative actions, data exports, and security-sensitive permission modifications.
• Disaster Recovery: Continuous automated snapshots with geographically distributed off-site replicas.

Visit our dedicated Security & Governance Center for detailed technical specifications.

7. Regional Compliance & Cross-Border Transfers

MySFT complies with global and regional data protection regulations applicable to our operations:

• India Digital Personal Data Protection (DPDP) Act, 2023: Adherence to principles of consent, purpose limitation, data minimization, and notice transparency.
• General Data Protection Regulation (GDPR): Standard Contractual Clauses (SCCs) and Data Processing Addendums (DPAs) for EU-based stakeholders.
• California Consumer Privacy Act (CCPA): Transparent disclosure and straightforward mechanisms for exercising privacy rights.

8. Data Retention & Secure Deletion

We retain Customer Data for the duration of the active subscription agreement. Following termination, Customer is provided with a thirty (30) day export period to download all company data.

Following the export window, active database records are wiped using secure cryptographic erasure techniques. Encrypted disaster recovery backups rotate and permanently expire within forty-five (45) days.

9. Your Data Rights & Choices

Under applicable data protection legislation, you possess specific rights regarding your personal information:

10. Cookies & Session Storage

We use strictly necessary cookies to authenticate users, protect session integrity, and save user interface preferences. We do not use intrusive third-party cross-site ad-tracking pixels. You may manage cookie preferences directly in your browser settings.

11. Modifications to this Policy

We may update this Privacy Policy periodically to reflect technological advances, service expansion, or regulatory amendments. Significant changes will be announced via administrative email notification or an in-app banner at least thirty (30) days prior to taking effect.