Privacy Policy
Last updated: April 2026
NeerSoft Technology LLP ("we", "us", "our") operates MyListed.co (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the Information Technology Act 2000 (India), and other applicable data protection laws.
1. Data Controller
NeerSoft Technology LLP, Pune, Maharashtra, India is the data controller responsible for your personal data. For any data-related inquiries, contact us at hello@neersoft.com.
2. Information We Collect
2.1 Agent Account Data (Data Subject: Agents)
When you register for an account, we collect your name, email address, phone number, WhatsApp number, Telegram handle, profile photo, cover photo, username, bio, social media links, and any other information you voluntarily provide in your agent profile. If you sign up via Google, we receive your Google profile name, email, and profile photo.
2.2 Property Listing Data
Property titles, descriptions, photos, pricing, location details, area, features, and AI-generated content that you create when adding listings.
2.3 Lead Data (Data Subject: Visitors/Leads)
When visitors submit inquiries through an agent's public page, we collect their name, email address, phone number (optional), and message. This data is collected on behalf of the agent and is stored in our database. Lead data is also transmitted via email to the agent using our email service provider (Resend).
2.4 Usage & Analytics Data
Page views, click counts on contact buttons (WhatsApp, Email, Telegram, Phone), lead submission counts, and basic device information collected through Firebase Analytics.
2.5 Payment Data
We do not store credit card, bank account, or UPI details. All payment processing is handled securely by our payment partners (Razorpay for Indian customers, Lemon Squeezy for international customers). These providers may share your email, name, and transaction status with us for subscription management.
2.6 Communication Data
We send transactional emails (account verification, password reset, welcome emails, lead notifications) using Resend. Your email address and name are shared with Resend solely for the purpose of delivering these emails. We do not use your data for marketing emails without your explicit consent.
3. Legal Basis for Processing (GDPR)
We process your data under the following legal bases:
Contractual necessity — To provide the Service you signed up for (account creation, listing management, lead delivery, subscription management).
Legitimate interest — To improve the Service, prevent fraud, and ensure security.
Consent — For optional features like AI content generation (your property descriptions are sent to OpenAI) and marketing communications.
Legal obligation — To comply with tax, accounting, and regulatory requirements.
4. How We Use Your Information
We use the collected information to:
Provide and maintain the Service; create and manage your account; process subscriptions and payments via Razorpay or Lemon Squeezy; generate AI-powered listing content via OpenAI; display your public agent page and property listings; deliver lead inquiries to you via email (Resend) and dashboard; send transactional emails (verification, password reset, welcome emails); monitor usage and improve the Service; ensure security through Cloudflare and Firebase; and comply with legal obligations.
5. Third-Party Services & Sub-Processors
We share your data with the following third-party services (sub-processors) only as necessary to provide the Service:
Firebase (Google Cloud) — Authentication, Firestore database, Cloud Storage for images, and hosting infrastructure. Data is stored on Google Cloud servers. Firebase Privacy Policy
OpenAI — AI-powered content generation. Your property descriptions are sent to OpenAI's API for processing. OpenAI does not use API data for training. OpenAI Privacy Policy
Razorpay — Payment processing for Indian customers. Handles UPI, credit/debit cards, and net banking. Razorpay Privacy Policy
Lemon Squeezy — Payment processing for international customers (USD). Handles credit card payments and subscription billing. Lemon Squeezy Privacy Policy
Resend — Transactional email delivery (lead notifications, welcome emails, verification emails). Your email address, name, and lead data are shared with Resend to deliver emails. Resend Privacy Policy
Cloudflare — DNS, CDN, security (Turnstile CAPTCHA, WAF rules, DDoS protection). Cloudflare Privacy Policy
Vercel — Web application hosting and serverless functions. Vercel Privacy Policy
We do not sell your personal data to any third party.
6. Data Storage & Security
Your data is stored on Firebase (Google Cloud) servers. We implement industry-standard security measures including encrypted connections (HTTPS/TLS), Firebase Authentication with email verification, Firestore security rules enforcing strict tenant isolation (each agent can only access their own data), Cloudflare WAF and DDoS protection, and rate limiting on API endpoints.
Images are stored in Firebase Cloud Storage with file type validation (images only) and size limits (2MB for profile photos, 5MB for listing photos). All images are compressed to WebP format before upload for optimal performance.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion or request for erasure, we delete your profile, listings, leads, analytics, and subscription data within 30 days. Minimal anonymized logs may be retained for fraud prevention and internal metrics. Payment records are retained as required by applicable tax and accounting laws.
8. Your Rights (GDPR & Applicable Laws)
You have the following rights regarding your personal data:
Right of Access — Request a copy of all personal data we hold about you.
Right to Rectification — Update or correct your data through your dashboard or by contacting us.
Right to Erasure — Request deletion of your account and all associated data. We will delete your data within 30 days of your request.
Right to Data Portability — Request your data in a structured, machine-readable format (JSON).
Right to Restrict Processing — Request that we limit how we use your data.
Right to Object — Object to processing based on legitimate interest.
Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at hello@neersoft.com. We will respond within 30 days.
9. Lead Data & Agent Responsibilities
When a visitor submits an inquiry through an agent's public page, we act as a data processor on behalf of the agent (data controller for their leads). Agents are responsible for handling lead data in compliance with applicable privacy laws and must not use lead data for unsolicited marketing without the lead's consent.
Lead data (name, email, phone, message) is stored in our Firestore database under the agent's tenant and transmitted to the agent via email using Resend. A confirmation email is also sent to the lead acknowledging their inquiry.
10. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States (where Firebase/Google Cloud, OpenAI, Resend, Vercel, and Cloudflare operate). These transfers are protected by Standard Contractual Clauses (SCCs) and the service providers' data processing agreements.
11. Cookies & Tracking
We use essential cookies for authentication and session management (Firebase Auth). We do not use advertising, marketing, or third-party tracking cookies. Cloudflare may set functional cookies for security purposes (bot detection, CAPTCHA).
12. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority. For EU residents, you can find your authority at edpb.europa.eu.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:
NeerSoft Technology LLP
Pune, Maharashtra, India
Email: hello@neersoft.com
Website: neersoft.com