Asset Ok · Primeline International
Privacy policy
This policy explains how Asset Ok, a brand of Primeline International (CIN U46900AP2026PTC123228, registered office to be added at launch, "we"), collects and uses personal data. It is written to meet the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. We are the data fiduciary for the data described here.
1. What we collect
| Data | Examples | Why we need it |
|---|---|---|
| Identity and KYC | Name, date of birth, nationality, passport or OCI card number, PAN, address, and the documents you upload to prove them | To confirm you are the owner on record, and to prevent impersonation and fraud |
| Contact | Email, phone, overseas address, preferred call times | To reach you about your properties and services |
| Property records | Deeds, EC, pattadar passbook, 1B/Adangal, tax receipts, layout approvals, survey numbers, co-owner details | To onboard and audit each property and check it against government records |
| Site evidence | Photos and videos of your property, with latitude, longitude and timestamp; inspection notes | To report the condition of your property and keep a record you can rely on |
| Payments | Invoices, payment references, bank or gateway confirmations, FIRA | To bill you, meet GST and FEMA rules, and keep accounts |
| Authorised contacts | Name and contact details of a relative or representative you add | To speak to them only within the limits you set |
| Website use | Form entries, WhatsApp messages and emails to us | To answer questions before registration, handle enquiries and improve the website |
| Sign-up | Name, email, mobile number, country, and a password (we keep only a scrambled form of it that cannot be turned back into the password) | To create your account and let our office approve it |
| Applications to work with us | Field Officers and vendors: name, email, mobile, district, business name, password | To decide on the application and, if approved, to give you an ID |
| Client Portal account | Login email, sign-in and security logs, messages you send through the portal | To give you access to your own reports, invoices and documents, and to keep the portal secure |
We do not ask for Aadhaar. If you choose to share it, we accept only a masked copy, and we delete any unmasked copy.
Before you register. We answer questions on WhatsApp, by email, or on a free 15-minute call that you book with us. Questions sent from our website go to our client records in Zoho CRM, and bookings are made through Zoho Bookings; both ask only for your name, email, phone and question. These give general information only. Please do not share identity documents, property papers or personal details before you register; if you do, we delete them. We never cold-call.
2. Consent and other grounds
We process your data with your consent, which you give on our forms and in the Service Agreement. We rely on your consent for KYC, property evidence and any marketing. We process data without consent only where s.7 of the DPDP Act allows it, mainly to keep the tax and company records the law requires. You may also manage consent through a registered Consent Manager once they are available. You can withdraw consent at any time. Withdrawal stops further processing but does not undo what was done before, and we may no longer be able to provide the service.
Notice at collection. Every form we use shows a short notice before you submit it. It lists each item of data asked for, why we need it, how long we keep it, how to withdraw consent, how to use your rights, and how to complain to the Data Protection Board. The notice is available in English and Telugu.
3. Photos of other people and neighbouring property
Our Field Officers photograph your property, its boundaries and its surroundings. Occupants, workers or neighbouring land may appear in them. We take such images only to record the state of your property, avoid faces where we can, and use them for no other purpose. Faces and vehicle number plates are blurred in any copy shared outside the company.
Security cameras. If you ask us to arrange cameras at your property, they are set up in your own app account. You decide what is recorded and who can see it, and you are responsible for the footage. We do not receive, watch or store the feed; the installer sees the camera settings only while installing them. Cameras are pointed only at your property, not at neighbours or the road.
4. Who we share data with
- Service providers acting for us: Zoho, on its India data centre, for our email (Zoho Mail), website questions (Zoho CRM), call bookings (Zoho Bookings), agreements (Zoho Sign) and invoices (Zoho Books); Cloudflare, for the website and our app, including your account, your Client Portal and property photos; Brevo, which sends the app's emails (sign-up codes, password links and your reports with their photos); Razorpay and our bank, for payments; and WhatsApp, for the messages you send us and, only if you opt in after registering, for reminders.
- Partners you approve for a job: advocates, CAs, licensed surveyors, vendors and PSARA-licensed security agencies. We share only what that job needs.
- Government portals and offices, when you ask us to help with a record, tax or verification.
- Authorities, when the law requires it.
Who inside the company sees what. Your name, contact details, identity documents, KYC and payments are seen only by our Admin Desk. District Desk staff, Field Officers and vendors see the property, its place and the job, not who you are. A vendor learns your name only when you choose to pay that vendor directly, because the vendor's invoice is then made out in your name.
Developer Partners. If your property is in a partner developer's project, the developer receives only totals for its project (for example, how many units are enrolled and how many visits were made). It never receives your name, contact details, documents, reports, photos or flags, or which unit you own.
Data about developers. When a developer applies to be a partner, we collect its company documents (incorporation, PAN, GST and RERA registrations, address and bank proof) and the identity and authority of the person who signs for it. We check them against public government records (for example the MCA, GST, RERA, court, land-record and registration portals). We use this only to verify the developer and its projects, and keep it for the length of the partnership plus the period the law requires.
We do not sell personal data and we do not use it for third-party advertising.
5. Transfers outside India
We keep identity documents and deeds on servers in India. Photos and videos of your property, and your app account, are stored with Cloudflare and may be held outside India. The emails our app sends, including your reports and photos, pass through Brevo, whose servers are in the European Union. If any data is transferred abroad, it goes only to countries the Government of India has not restricted under s.16 of the DPDP Act, and subject to any conditions notified under Rule 15.
6. How long we keep data
| Data | Kept for |
|---|---|
| Enquiries, call bookings, call notes and WhatsApp messages that do not lead to registration | Deleted within 30 days of your last message |
| Sign-ups and work applications that are not approved or not completed | Deleted after 30 days |
| Property photos in our app | Kept for the current month and the previous month only, for comparison, then deleted automatically. Every report's photos are emailed to you first |
| Sign-in codes, reset links and connection counts used to stop misuse | Deleted when they expire, and within 24 hours at most |
| Identity and KYC documents, property records, contact details and your Client Portal account | Deleted within 30 days after your contract is cancelled or ends |
| Everything from a One-Time Property Audit, if you start no plan | Deleted 60 days after the audit report is delivered; you are sent a full copy first |
| Site evidence and reports | Deleted within 30 days after the contract for that property is cancelled or ends; you are sent a full copy first. Kept longer only while a complaint, dispute or legal claim about the property is open, or a court or authority requires it |
| Invoices, payment records and signed agreements | 8 years, as GST, income-tax and company law require; locked and used for nothing else |
| Logs of how we processed your data | Deleted within 30 days |
| KYC and property documents you upload (scans and photos) | Deleted as soon as the details in them are verified. Only the verified details are kept, locked |
| Visit reports and their photos | Only the latest report is kept. When the next visit is done and compared with it, the earlier report and its photos are deleted; you keep the copy we emailed you |
When your contract ends. When you cancel, or your last property's contract ends, we email you a copy of your reports, photos and videos, and they stay in your Client Portal until deletion. We email you 48 hours before we erase anything. Within 30 days we delete your personal data from our systems, including client records, the Client Portal, our app and our document store, and confirm this by email. Backup copies are overwritten in the normal backup cycle and never restored for use. The only records we keep are the ones listed above that the law requires, and we use them for nothing else. If you have not registered, your enquiry is deleted within 30 days.
7. Your rights
You can ask us to:
- give you a summary of your data and who we shared it with;
- correct, complete or update it;
- erase data we no longer need, subject to the retention periods above;
- nominate a person to act for you if you die or cannot act yourself.
Use the Data Rights Request form on our website, or write to the grievance officer below. We reply within 30 days. Please raise a complaint with our grievance officer first. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
8. Security and breaches
We limit access by role, encrypt sensitive fields, log access, and never put identity documents into public AI tools. Passwords are stored only in a scrambled form; five wrong passwords lock the sign-in for 15 minutes, and repeated sign-ups or sign-ins from one connection are limited. If a breach affects your data, we will tell you without delay and report to the Data Protection Board, with a detailed report within 72 hours, as the DPDP Rules require.
9. Children
Our services are for adults. Where an owner or co-owner is a minor, we act only through the lawful guardian, with verifiable consent from that guardian (Rule 10), after advocate review.
10. Cookies
The website uses only the cookies it needs to work. It runs no analytics, advertising or chat tools today. If we add any, we will update this policy first, and ask for your consent where it is needed.
11. Changes
We will post any change here with a new effective date, and email clients about material changes.
12. Grievance officer
The Grievance Officer of Asset Ok, Primeline International, is named here, with an email address, at launch. We acknowledge a grievance within 48 hours and resolve it within one month.
Last updated: 17 October 2026.