Privacy Policy
Last Updated: November 25, 2025
Operated by: YBOne Strategic Solutions Private Limited
This Privacy Policy outlines how YBOne Strategic Solutions Private Limited (“Company”, “we”, “us”, “our”) collects, processes, stores, and protects personal information when you use our online marketplace for fractional real estate ownership, SPV-based units, and REIT-related investment products (“Platform”).
Compliance Framework
This Policy is designed to comply with applicable Indian laws including:
- SEBI Regulations (REIT Regulations, Intermediaries Regulations, KYC Guidelines)
- Information Technology Act, 2000
- IT Rules, 2011 (Reasonable Security Practices & Sensitive Personal Data)
- Prevention of Money Laundering Act (PMLA), 2002
- RERA (where applicable)
Important Disclosure: We do not store user KYC information, property documentation, or verification data on our systems. All Know-Your-Customer (KYC) compliance, property-related data, due diligence, and documentation obligations rest solely with the real estate issuers, SPVs, and REITs with whom we integrate. Our Platform only displays information supplied by these regulated entities.
1. Information We Collect
We collect information necessary for legal compliance, user verification, and platform operation.
1.1 Personal Information
- Full name, contact number, email ID
- Address, nationality
- PAN, Aadhaar, or other identity documents (as permitted)
- Bank details for payouts/refunds
- KYC and AML-related documents
- Investment profile and transaction history
1.2 Sensitive Personal Data
As defined under IT Rules, this may include:
- Financial information (bank account details)
- Identification documents
- Biometric data (if required for KYC via third-party providers)
1.3 Non-Personal Information
- Device information, IP address, browser type
- Cookies, log data
- Application usage patterns
1.4 Third-Party Sources
- KYC service providers
- Payment aggregators
- REIT partners, SPVs, escrow agencies
2. Purpose of Data Processing
We process your information strictly for lawful purposes, including:
- Account creation, authentication, and KYC verification
- Compliance with SEBI, PMLA, and FIU-IND reporting requirements
- Facilitating listing, buying, and selling of fractional units or REIT-related products
- Risk management, fraud detection, and AML monitoring
- Processing payments, settlements, and withdrawals
- Improving platform performance and analytics
- Sending transactional notifications and regulatory updates
Marketing communications are sent only with your explicit consent.
3. Legal Basis for Processing
We process data based on:
- Contractual necessity: Required for using the Platform.
- Legal obligations: KYC, AML, and SEBI-mandated reporting.
- Legitimate interests: Security and fraud prevention.
- User consent: For marketing or optional features.
4. Sharing of Information
We may share information with:
- SEBI-registered intermediaries
- KYC/AML verification agencies
- Payment gateways and escrow partners
- SPV managers, REIT operators, custodian entities
- Legal advisors, auditors, and compliance bodies
- Courts or government authorities (as legally required)
We do not sell user data.
5. Data Security Measures
We implement ISO/IEC 27001-equivalent security standards, including:
- Data encryption (AES-256 / TLS 1.3)
- Multi-factor authentication
- Secure server architecture and firewalls
- Restricted access controls
- Regular vulnerability assessments
Note: Despite safeguards, users acknowledge that no digital system is fully risk-free.
6. User Rights
As per IT Rules and general privacy principles, users may request:
- Access to personal data
- Correction or updates
- Withdrawal of consent (where applicable)
- Deletion of data (subject to SEBI/PMLA retention requirements)
7. Data Retention
We retain data as required by applicable laws:
| Regulation | Retention Period |
|---|---|
| PMLA | Minimum 5 years |
| SEBI Regulations | Typically 5–10 years |
| Legal/Tax | As per statute |
8. Third-Party Links
Our Platform may contain links to external websites. We are not responsible for the privacy practices or content of such third-party sites.
9. Updates to This Policy
We may periodically update this Policy. Any changes will be posted on the Platform, and continued use will constitute acceptance of the updated Policy.
10. Contact Information
For questions or updates to your data, please contact:
YBOne Strategic Solutions Private Limited
Email: support@ybonesolutions.com