Draft — not yet legally binding
This policy is being drafted by legal counsel. Information below describes our data architecture.
What we collect
Agrekoo collects the following categories of personal data:
- Mobile phone number (used as your account identifier)
- Booking data — dates, guest count, listing, payment status
- Search and browse logs — search terms, filters, listing views
- Device and session information (IP address, browser type, OS) — used for fraud prevention
We do not collect your name, email address, or any government ID unless you voluntarily provide it during a support interaction.
How we use your data
- Processing and confirming your bookings
- Sending booking confirmations and OTP messages via SMS
- Fraud prevention and platform security
- Improving search relevance and platform features
- Complying with legal obligations under Indian law
Data retention
| Data type | Retention | Legal basis |
|---|---|---|
| Booking PII | 7 years post-booking | IT Act 2000 |
| OTP logs | 30 days | Fraud prevention |
| Search logs | 90 days | Platform analytics |
| Account data | Until deletion request | DPDP Act 2023 |
Your rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023, you have the following rights as a Data Principal:
- Right to access — request a summary of personal data held about you
- Right to correction — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of data not required for legal obligations
- Right to grievance redressal — file a complaint with our Grievance Officer
To exercise any of these rights, contact our Grievance Officer at the address below.
Grievance Officer
Mandatory under DPDP Act 2023
Grievance Officer: Agrekoo Legal Team
Email: grievance@agrekoo.com
Response time: within 30 days as required by law
Third-party processors
We share data only with the processors necessary to operate the platform:
- Cashfree Payments — payment processing (PCI-DSS compliant)
- MSG91 — OTP delivery (data used only for authentication)
- Neon / Postgres — database, hosted in AWS Mumbai (ap-south-1, India)
Your data is never sold to third parties.
Contact
For general privacy questions or support, write to us at support@agrekoo.com.