Privacy Policy
1. Who we are
This Privacy Policy is issued by the operator of Big Black Book (“BBB”, “we”, “us”, “our”), a private B2B workspace for Gurgaon real-estate brokers and builders. We are the data fiduciary / controller for personal data processed through:
- the Android app Big Black Book (
com.bigblackbook.app); - the web app at https://bigblackbook.online/app/;
- related APIs and sites under bigblackbook.online.
Privacy and data-principal requests: privacy@bigblackbook.online
2. Scope
This policy applies to personal data and business data processed when you create an account, use BBB features, or contact us. It does not cover third-party websites or apps we do not control (for example WhatsApp, YouTube, Instagram, or LinkedIn if you open those services).
BBB is a professional product. Inventory, owner contacts, and handshake terms you enter are business records you choose to store or share with other professionals on the platform according to visibility settings.
3. Information we collect
We collect only what is needed to provide BBB. Categories include:
3.1 Account and identity
- Mobile number (used to sign in with SMS OTP).
- Name, firm name, organisation type (broker / builder / buyer / seller).
- Operating zones / localities.
- KYC details you submit, such as GSTIN and HRERA or association IDs.
- Watermark text derived from firm name and mobile (applied to listing media).
3.2 Inventory, requirements, and pipeline
- Listings and requirements (title, property type, price, area, locality, description, visibility: Private / Network / Portal).
- Sensitive inventory fields you enter (unit number, floor, tower/block, owner name, owner phone, exact address). These stay locked from other users until a digital handshake is completed, except as you otherwise publish.
- Clients, follow-ups, site-visit notes, and handshake / match records.
3.3 Location
- Locality and map coordinates you set for listings, projects, or land requests.
- Approximate or precise device location only if you grant location permission and use “detect location” or a map picker. We do not continuously track your device in the background.
3.4 Media and files
- Photos, videos, and documents you upload (projects, social posts, layouts/PDFs).
- Camera, microphone (for video), and gallery access only after you grant OS permission.
- Content you share into BBB from other apps (share intent: text, images, video, or links such as YouTube).
3.5 Social and communications
- Posts, comments, likes, mentions, direct messages, and attached listings.
- Embedded or linked third-party media URLs you paste (for example YouTube, Instagram, LinkedIn).
3.6 Contacts (on-device)
If you grant contacts permission, BBB may search your address book on the device to help you tag an associate. We do not upload your full address book. A contact is stored with a listing only if you select it.
3.7 WhatsApp / pasted inventory
If you paste or capture a WhatsApp-style inventory message, we parse that text to draft a listing. The message content becomes listing data you save. Do not paste data you are not authorised to process.
3.8 Usage, device, and diagnostics
- App version, basic device/OS information, and request logs needed to run and secure the service.
- Crash or error signals.
- IP address and standard server logs when you use the website or API.
3.9 Information we do not collect as a product
- We do not run third-party advertising SDKs in BBB.
- We do not sell personal information.
- We do not require payment card data in-app (the Android app is free).
4. How we use information
| Purpose | Examples |
|---|---|
| Provide the service | OTP login, profile, listings, matching, handshake unlock, social, projects, RERA tracker, Bobbie meeting copilot (on device) |
| Show maps | Google Maps / location pickers when you use them |
| Security | Prevent abuse, keep sessions, protect owner-contact unlocks |
| Support and operations | Respond to requests, fix bugs, maintain backups |
| Legal | Comply with applicable law and enforce platform rules |
We do not use your data to build advertising profiles or to sell leads to third parties.
4a. Bobbie (on-device intelligence)
Bobbie is a meeting-preparation assistant inside the app. A broker picks a client or a listing and Bobbie shows that file’s history plus pointers to advance the sale — from BBB records, not by recording the conversation.
- Bobbie does not listen to or record calls, meetings, or microphone audio.
- History and pointers are generated on the device from listings, client notes, site visits, matches, handshake status, follow-up tasks, and RERA tracker entries already stored in BBB.
- Prep notes stay on this device. They are not uploaded to BBB servers or a third-party AI.
- Bobbie does not send your meeting, client file, or inventory to a third-party AI provider to generate suggestions.
- Owner phone, unit number, and exact address are not included in suggestions until handshake rules already allow you to see them in the app.
5. Legal bases and consent
Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and similar laws, we process personal data:
- With your consent — creating an account, granting device permissions, submitting KYC, posting or sharing inventory;
- To perform the service you request — matching, handshake, storing listings you save;
- For legitimate security and legal obligations — fraud prevention, lawful requests.
You may withdraw consent by closing your account or turning off a permission in system settings. Some features will stop working if the related data is required.
6. Device permissions
| Permission | When we ask | If you refuse |
|---|---|---|
| Phone / SMS (OTP) | Sign-in | You cannot create or use an account |
| Location | Detect city / drop a map pin | You can still type locality manually |
| Camera / photos / microphone | Capture or attach media | You can skip media or pick files another way where offered |
| Contacts | Tag an associate from your phone book | You can type the associate’s details yourself |
7. Sharing
7.1 Other BBB users
Content you mark Network or Portal may be visible to other professionals on BBB. Private listings stay in your diary unless you publish them. After a handshake, counterparties may see unlocked unit / owner details you stored for that listing. Social posts, likes, and DMs are visible to the people in that thread or feed according to product rules.
7.2 Service providers (processors)
- Firebase (Google) — phone OTP authentication and related account security;
- Google Maps / Places — maps and location search when you use those features;
- Hosting / infrastructure — to serve the website, API, and media;
- Google Play — distribution, crash/device reports if you install from Play.
These providers process data on our instructions or as independent controllers for their own auth/maps products, under their policies.
7.3 Legal
We may disclose information if required by law, regulation, court order, or to protect users, property, or the integrity of BBB.
We do not sell personal information. We do not share data with data brokers or ad networks.
8. Retention
- Account and KYC: while the account is active and for a reasonable period after closure for security, disputes, or law.
- Listings, matches, handshakes, social content: while stored in your workspace or as needed for the other party to a completed handshake.
- Server logs: typically a short operational period unless needed for security investigation.
- Device-local caches (for example on-device listing store): until you clear app data or uninstall.
To request deletion of your account and associated personal data, use https://bigblackbook.online/delete-account.html or email privacy@bigblackbook.online from the mobile number on the account. We may retain limited records where the law requires or where another user still has a legitimate copy of shared handshake / unlocked data.
9. Security
- HTTPS / TLS in transit.
- OTP-based sign-in; session tokens stored with platform protections (for example secure storage on device where used).
- Sensitive listing fields (unit / owner phone) are masked from other users until handshake rules allow unlock.
- Access controls on our API and hosting.
No method of transmission or storage is 100% secure. You must keep your phone and OTP confidential and only share owner contacts as you are authorised to do.
10. Your rights
Subject to applicable law (including the DPDP Act), you may:
- Access personal data we hold about you;
- Correct inaccurate data (you can also edit profile fields in the app);
- Erase data that is no longer needed, or close your account via the account deletion request page;
- Withdraw consent for optional permissions;
- Grievance — complain to us using the contact below if you believe we have not handled your data lawfully.
We will respond within a reasonable period (and as required by law). We may need to verify that the request comes from the account holder.
10a. Delete your account
You can request that we delete your BBB account and associated personal data:
- In the app: Profile → Request account deletion
- On the web: https://bigblackbook.online/delete-account.html
- By email: privacy@bigblackbook.online
After we verify the request, we delete the account within 14 days. Some handshake records already shared with a counterparty, and records we must keep by law, may be retained as described in Retention above.
11. Children
BBB is intended only for adults in the real-estate trade (18+). It is not directed at children. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.
12. International transfers
Servers and vendors (including Google Firebase and Maps) may process data in India and in other countries where those providers operate. Where we transfer personal data outside India, we do so to provide the service and in line with applicable law.
13. Cookies and local storage
The web app uses local storage / similar technologies to keep you signed in and to store workspace data on your device. The Android app uses on-device storage for the same purposes. These are essential to run BBB; we do not use advertising cookies.
14. Changes
We may update this policy when the product or the law changes. The “Last updated” date at the top will change. Material changes will be indicated on this page. Continued use after an update means you accept the revised policy.
15. Contact and grievances
Privacy / data principal requests / grievance officer contact
Email: privacy@bigblackbook.online
Account deletion: https://bigblackbook.online/delete-account.html
Website: https://bigblackbook.online/
App: Big Black Book · package com.bigblackbook.app
If you are not satisfied with our response, you may escalate to the Data Protection Board of India or other authority that has jurisdiction over your complaint.