How we collect, use, and protect your personal information.
Last Updated: August 27, 2026
This Privacy Policy explains how HeavenLease ("we", "us", or "our") collects, uses, stores, shares and protects the personal information of visitors, tenants, owners and all other users of our website, mobile experience and related services (together, the "Platform").
By creating an account, browsing listings, or otherwise using the Platform, you agree to the practices described in this policy. Where we seek your explicit consent for a specific use of your data, that consent will be separate, clear and always revocable.
This policy applies to personal information collected online through the Platform. It does not apply to information we receive through third parties who have their own privacy notices, unless that information is shared with us.
We collect information you share with us when you create an account, list a property, apply for verification, request a tour, initiate a chat, or contact support. This typically includes your full name, email address, phone number, residential address and profile photograph.
Owners may additionally provide ownership documents, property tax receipts, registered lease or sale agreements, and property details such as address, furnishing and amenities. Tenants may provide identity documents and consent to screening checks.
We may also collect payment-related information (such as bank account or UPI identifiers) needed to process rent, deposits and escrow transactions. We do not store full card numbers; payment card details are processed by our secure payment partners.
When you use the Platform, we automatically collect certain technical information, including your IP address, browser type and version, device type and identifiers, operating system, referring URLs, pages viewed, time spent, and search terms.
We use this information to keep the Platform secure, to understand how the Platform is used, to improve performance and to personalise content. This data is generally collected in aggregate or pseudonymised form.
Like most modern services, we use cookies and similar technologies for authentication, preferences, analytics and, where enabled, advertising measurement. Our Cookie Policy explains these in detail.
We use your personal information for the following core purposes: to operate and manage your account; to let you list, search, save and view properties; to connect tenants with owners; and to manage tours, leases, deposits and rent payments.
We also use the data to verify identities and ownership, to prevent fraud and abuse, to enforce our terms, to respond to support requests, to send service-critical notifications, and to comply with legal or regulatory obligations.
Where we use your data for analytics, product improvements or marketing, we do so on a legitimate-interest basis or with your consent, and you can object or withdraw consent at any time as described in the sections below.
Under Indian law and applicable privacy frameworks, we rely on several legal bases for processing: your consent, the performance of a contract with you, compliance with a legal obligation, legitimate interests, and protection of vital interests.
Where processing is based on consent — for example, marketing communications or certain screening checks — you can withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
Where processing is based on contract, we use the data needed to deliver the services you requested, such as matching tenants with owners or completing a lease.
Verification is central to trust on HeavenLease. For owners, we verify identity and property ownership using documents and public records. For tenants, we may verify identity, employment, credit history and rental history, always with explicit consent and only for the purpose of assessing rental risk.
Screening reports are shared with the relevant counterparty in summarised form. Raw documents, credit files and detailed findings are never displayed publicly and are retained only for as long as needed to complete the relevant transaction.
We never use verification data for advertising, profiling unrelated to rental risk, or any purpose not disclosed to the data subject at the time of collection.
We send transactional messages that are essential to your use of the Platform — account activation, verification results, tour confirmations, lease events, payment receipts and security alerts. These are sent regardless of marketing preferences.
Marketing and promotional messages (offers, newsletters, product updates) are sent only where we have consent or a legitimate interest, and every such message includes an easy way to opt out.
You can manage your notification and marketing preferences from your account settings. Opting out of marketing does not stop required service messages.
We do not sell your personal information. We share data only where it is necessary to provide the services you use: between tenants and owners to facilitate a rental relationship; with authorised service providers; and with authorities where required by law.
Our service providers include payment gateways, SMS and email providers, cloud-hosting providers, analytics tools and, with your consent, verification agencies. Each provider is bound by contract to protect your data and use it only for the purposes we specify.
If HeavenLease is involved in a merger, acquisition or asset sale, your information may be transferred as part of that transaction. We will notify you and give you an opportunity to review the new privacy arrangements before such a transfer affects your data.
We take the security of your information seriously and use technical and organisational measures appropriate to the level of risk. This includes encryption of data in transit (TLS) and at rest, access controls, and monitoring for unusual activity.
Access to personal data is restricted to authorised personnel on a need-to-know basis, and we require the same standard from our service providers. We conduct regular security reviews of our systems.
No method of transmission or storage is guaranteed to be 100% secure. We encourage you to use strong, unique passwords and to report any suspected security issue to us immediately at security@heavenlease.in.
We keep your personal information only for as long as necessary to provide the services and to meet legal, tax and audit obligations. Account data is generally retained while your account is active and for a reasonable period afterwards.
Where you delete your account, we delete or anonymise your personal data unless we are required by law to retain certain records (for example, tax or transaction records). We also retain dispute and security records where needed to protect rights.
You may request the deletion of specific data at any time. We aim to fulfil verified deletion and erasure requests promptly, subject to any overriding legal retention obligations.
Depending on your jurisdiction, you have a range of rights over your personal information: the right to access, to rectification, to erasure, to restrict or object to processing, to data portability, and to withdraw consent.
You may exercise these rights by writing to us at the contact details below. We will verify your identity before acting on a request and aim to respond within the time period required by law.
If you are not satisfied with how we have handled your request, you may raise a complaint with us, and we will escalate to the appropriate supervisory or grievance authority where applicable.
You control much of your data through your account settings: you can update your profile, change notification preferences, manage marketing choices and request a copy of the data we hold about you.
You can disable non-essential cookies through your browser or our consent banner, and you can opt out of marketing communications at any time using the link in any marketing email.
Where you withdraw consent, we will stop the relevant processing. Withdrawal does not stop uses that are necessary for us to provide the services you have requested or to comply with the law.
We use cookies and similar technologies (such as local storage and web beacons) to keep you signed in, remember your preferences, measure how the Platform is used, and support security and fraud prevention.
Some cookies are strictly necessary and cannot be disabled, while others (analytics, personalisation, advertising) are optional and require your consent. You can manage these through our consent banner or your browser settings.
For a detailed explanation of each cookie, its purpose and how long it lasts, please read our Cookie Policy.
The Platform is intended for individuals who are at least 18 years old and capable of entering into a legally binding contract. We do not knowingly collect information from children.
If you believe a child has provided us with personal information without parental consent, please contact us and we will delete the relevant data promptly.
On our verification checks, we only process identity documents of adults entering into rental agreements, and we never request or store information in a way intended to target minors.
HeavenLease operates in India, and your data may be processed, stored and transferred within and beyond the borders of India, including to service providers located in other countries.
Where data is transferred across borders, we take steps to ensure appropriate safeguards are in place, including contractual clauses and security reviews that meet the requirements of applicable law.
By using the Platform, you acknowledge and consent to the processing of your information in jurisdictions whose data-protection laws may differ from the laws of your own country.
You are responsible for keeping the personal information in your account accurate and up to date. Outdated information can affect your ability to complete a rental transaction or receive important notifications.
We may rely on the accuracy of the information you provide in connection with identity and ownership verification. Where we detect discrepancies, we will reasonably contact you and may require a fresh verification.
Please review your profile and contact details regularly and notify us of any change. Where we are given updated details, we will update our records reasonably promptly.
In accordance with applicable law, we have appointed a Grievance Officer who is responsible for responding to data-protection enquiries and resolving complaints about your private information.
You can reach the Grievance Officer by writing to privacy@heavenlease.in with the subject line "Privacy Grievance". We will acknowledge your complaint promptly and respond within the period required by law.
Please provide as much detail as possible so we can investigate and resolve your concern efficiently. We treat all complaints confidentially and without prejudice.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last Updated" date at the top of this page.
For meaningful changes that affect your rights or the way we use your data, we will notify you through the Platform or by email before they take effect, and where required, we will obtain fresh consent.
We encourage you to review this policy periodically. Your continued use of the Platform after changes take effect constitutes your acceptance of the revised policy.
The Platform may contain links to external sites and services, such as payment gateways, messaging browsers, or partner services. Those sites have their own privacy policies and are not within our control.
When you follow a link to a third party, any information you provide to that party is governed by its own practices. We encourage you to read those policies before sharing your data with them.
We are not responsible for the privacy practices or content of third-party sites, even where we mention them in our guides or on our pages.
By using the Platform and providing your personal information, you consent to the collection, use, storage and sharing described in this policy, subject to the choices and rights described. You may withdraw consent at any time.
This policy and the underlying processing of personal data are governed by the laws of India and the jurisdiction of the courts where HeavenLease is based, unless a different provision has been agreed.
If any provision of this policy is found to be unenforceable, valid, or contrary to a mandatory law, the other provisions remain in effect. For questions about this policy, please contact us using the details above.