Official Privacy PolicyEffective Date: October 15, 2026 • Last Updated: October 15, 2026

Privacy Policy

How GlobalXRA collects, uses, protects, and discloses personal data for property seekers, verified independent agents, developers, and ecosystem participants.

Protected Personal Data

Encrypted storage, role-scoped access control, and strict verification prevent unauthorized exposure of your details.

Controlled Inquiries

Your contact information is only shared with verified agents or developers whose listings or site visits you explicitly request.

Your Privacy Rights

Full rights to access, update, export, or request deletion of personal information subject to statutory RERA compliance.

1Introduction

GlobalXRA (“GlobalXRA”, “we”, “our”, or “us”) respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how GlobalXRA Technologies Private Limited, the operator of https://globalxra.com, collects, uses, discloses, stores, and protects information when you access our website, create an account, use our services, or communicate with us.

GlobalXRA serves participants in the real estate ecosystem, including property seekers, agents, developers, agencies, and relationship managers.

Data controller / responsible entity: GlobalXRA Technologies Private Limited
Registered address: GlobalXRA Tech Park, Outer Ring Road, Bengaluru, Karnataka 560103, India
Privacy contact: privacy@globalxra.com

2Information We Collect

The information we collect depends on the services you use and the choices you make.

2.1 Account and identity information

We may collect:

  • Full name.
  • Mobile number and email address.
  • Account identifier and public profile identifier.
  • Account type, such as property seeker, agent, developer, agency user, or relationship manager.
  • Verification status and account security information.
  • Professional details, business affiliation, and relevant verification documents where required.

We may use one-time passwords (OTPs) or other verification methods to confirm control of a mobile number or email address.

2.2 Profile and professional information

Depending on your account type and selected features, we may collect:

  • Profile photographs, biographies, and professional experience.
  • Business and agency details.
  • Areas of operation and property preferences.
  • Professional credentials or verification records.
  • Public profile information and contact preferences.

Information designated as public may be visible to other users or visitors according to the Platform's functionality and your settings.

2.3 Property and project information

Agents, developers, and other authorised users may submit:

  • Property and project descriptions.
  • Addresses or approximate locations.
  • Prices, specifications, amenities, and availability details.
  • Photographs, videos, floor plans, and documents.
  • Ownership, authorisation, registration, or approval information where relevant.
Do not upload confidential documents or another person's personal information unless you are authorised to do so.

2.4 Enquiries, site visits, and interactions

When you request information or use site visit, review, lead, referral, or customer relationship management features, we may collect:

  • Property requirements and enquiry details.
  • Preferred appointment dates and time slots.
  • Booking status and appointment history.
  • Reviews, ratings, comments, and responses.
  • Communication records and support requests.
  • Lead assignments, referral records, and relevant activity history.

2.5 Location and visit-verification information

Certain site visit or location-based features may request location information, including GPS coordinates, where enabled and permitted.

If a feature requires visit verification, we may also collect photographs or selfies, visit timestamps, and related verification records.

We will explain relevant permissions and purposes when applicable. You can manage device location permissions through your device settings, although disabling a required permission may prevent the corresponding feature from working. We do not intend to collect continuous location data merely because you have an account. Any location collection will depend on the feature and permissions actually implemented.

2.6 Transaction and subscription information

If you purchase a subscription, credits, or another paid service, we may process:

  • Selected plan and transaction amount.
  • Payment status and transaction reference.
  • Subscription duration, renewal, and cancellation records.
  • Credit balances, usage, and reward history.
  • Refund and payment-support records.

Payment providers may process payment information directly. The specific information collected depends on the payment method and provider.

2.7 Technical and usage information

When you use the Platform, we may collect technical information such as:

  • IP address and approximate location derived from it.
  • Browser, device, operating system, and language information.
  • Login timestamps and security logs.
  • Pages, features, and actions used.
  • Error logs, performance data, and diagnostic information.
  • Cookie identifiers or similar technologies, where implemented.

We use this information for service operation, security, troubleshooting, and other purposes explained in this Policy.

3How We Use Information

Subject to applicable law and the relevant permissions or consents, we may use personal data to:

•Create and manage accounts.
•Verify mobile numbers, email addresses, and account eligibility.
•Authenticate users and protect account security.
•Display profiles, listings, and project information.
•Process property enquiries and site visit requests.
•Facilitate communication between users.
•Operate reviews, ratings, referrals, and lead management features.
•Administer subscriptions, credits, rewards, and eligible transactions.
•Send service messages, OTPs, booking updates, and security alerts.
•Respond to customer support requests and complaints.
•Detect fraud, abuse, unauthorised access, and suspicious activity.
•Diagnose technical problems and improve Platform reliability.
•Comply with applicable legal obligations and respond to lawful requests.
•Protect our rights, users, and services.

We will not use personal data for a materially different purpose where applicable law requires additional notice or consent and that requirement has not been satisfied.

4Legal Grounds and Consent

We will process personal data on a lawful basis applicable to the relevant activity, including consent where required, processing necessary to provide a requested service, compliance with legal obligations, and other grounds recognised under applicable law.

Where consent is required, you may withdraw it using the available settings or by contacting us. Withdrawal does not invalidate processing lawfully carried out before withdrawal, and it may affect our ability to provide features that depend on the relevant information.

We will provide additional notices where necessary for optional permissions, marketing communications, location access, or other specific processing activities.

5How We Share Information

We do not treat personal information as unrestricted public information. We share it only as appropriate for the purposes described in this Policy, subject to applicable law and relevant permissions.

5.1 Other Platform users

Depending on your role, settings, and actions, certain information may be shared with:

  • Agents and developers whose listings you enquire about.
  • Property seekers who view your public professional profile or listings.
  • Users involved in a booking, lead, referral, or business connection.
  • Agencies and authorised team members.
  • Relationship managers or support personnel who need the information for their duties.

For example, when you submit a property enquiry or site visit request, relevant contact and request details may be shared with the person or organisation responsible for responding.

5.2 Service providers

We may engage providers to support:

  • Cloud hosting and database infrastructure.
  • Email, SMS, and OTP delivery.
  • File and media storage.
  • Payment processing.
  • Security monitoring and technical diagnostics.
  • Customer support and communications.

These providers may process information on our behalf or under their own applicable terms, depending on their role. We will use appropriate safeguards where required.

5.3 Legal, safety, and business requirements

We may disclose information where reasonably necessary to comply with applicable law, respond to valid legal process, investigate fraud, protect rights and safety, or establish or defend legal claims.

Information may also be transferred as part of a merger, restructuring, or business transfer, subject to applicable law and appropriate safeguards.

5.4 With your direction or consent

We may share information with other parties when you request or authorise the sharing, or where another lawful basis permits it.

6Public Profiles and User-Generated Content

Some information you submit may be displayed publicly, including professional profile details, listings, project information, photographs, reviews, or responses.

Before publishing information, consider whether it contains private contact details, personal information about another person, confidential documents, or information that should not be publicly available.

Publicly accessible content may be copied, indexed, or retained by third parties. Removing content from GlobalXRA may not immediately remove copies held elsewhere.

7Cookies and Similar Technologies

GlobalXRA may use cookies or similar technologies where implemented to:

  • Maintain sessions and account security.
  • Remember preferences.
  • Measure service performance.
  • Understand usage patterns.
  • Support other disclosed functions.

Where consent is required for non-essential cookies or similar technologies, we will provide an appropriate choice mechanism. You may also manage cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

8Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable law and legitimate operational requirements.

Retention periods may depend on:

  • Whether your account remains active.
  • The type of information and feature involved.
  • Security, fraud-prevention, and audit requirements.
  • Transaction, accounting, and legal obligations.
  • The resolution of complaints or disputes.
  • Applicable deletion and retention requirements.

When information is no longer required, we will take appropriate steps to delete it, anonymise it, or otherwise handle it lawfully. Certain information may remain in backups or records for a limited period, where necessary and lawful.

9Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse.

Depending on the system and information involved, safeguards may include access controls, authentication, permissions, logging, secure transmission, and restricted administrative access.

No online service can guarantee absolute security. You should protect your credentials, avoid sharing OTPs, and notify us promptly if you suspect unauthorised access.

Where a personal data breach triggers a legal notification obligation, we will respond in accordance with applicable law.

10Your Privacy Rights and Choices

Subject to applicable law, you may be able to:

  • Request information about personal data processed by us.
  • Request correction or updating of inaccurate information.
  • Request deletion of personal data where applicable.
  • Withdraw consent for processing based on consent.
  • Raise a complaint or grievance regarding personal data processing.
  • Nominate another person where such nomination is provided for under applicable law.

You can exercise applicable rights by contacting us using the details below. We may need to verify your identity before acting on a request. Some information may need to be retained where required by law or another lawful basis. We will explain relevant limitations where appropriate.

11Children's Privacy

The Platform is intended for individuals who are legally eligible to use the relevant services.

We do not knowingly seek to collect children's personal data in violation of applicable law. Where a service involves children or requires parental or guardian consent, we will apply the requirements relevant to that service.

If you believe a child has provided personal data unlawfully, contact us so that we can review the matter and take appropriate action.

12Third-Party Websites and Services

The Platform may link to external websites or use third-party services. Their privacy practices may differ from ours.

We encourage you to review their privacy policies before providing information directly to them. This Policy does not govern the independent processing activities of third parties acting on their own behalf.

13International Data Transfers

Depending on our hosting and service-provider arrangements, personal data may be processed or stored in locations outside your state or country.

Where international transfers occur, we will apply safeguards and comply with transfer restrictions and other requirements imposed by applicable law.

The locations of our servers and service providers are established with enterprise-grade cloud providers using secure storage regions within India and globally compliant availability zones.

14Changes to This Privacy Policy

We may update this Policy to reflect changes to our services, data practices, technology, or legal requirements.

We will publish the updated version with a revised “Last Updated” date. Where required, we will provide additional notice or obtain consent before implementing material changes.

15Contact and Privacy Grievances

For privacy questions, access or deletion requests, or complaints, contact:

Legal & Operations
Legal entity: GlobalXRA Technologies Private Limited
Registered address: GlobalXRA Tech Park, Outer Ring Road, Bengaluru, Karnataka 560103, India
Support email: support@globalxra.com
Grievance Officer
Officer: Data Protection & Grievance Officer
Designation: Head of Compliance & Legal Affairs
Privacy email: privacy@globalxra.com
Grievance email: grievance@globalxra.com

Please include enough information for us to understand your request without sending unnecessary sensitive information. We will acknowledge and handle requests and complaints within the periods required by applicable law.

This Privacy Policy should be read together with the GlobalXRA Terms and Conditions and any additional privacy notices presented for specific features.