# Turrets Privacy Policy

> Formal privacy governance policies published by Turrets Bliss Private Limited.

## metadata
- route: /privacy-policy
- markdown_twin: /agent/privacy-policy.md
- canonical_url: https://turrets.in/privacy-policy
- type: legal
- effective_date: 18th Oct 2024
- jurisdiction: India (DPDPA 2023, IT Act 2000)
- last_updated: 2026-10-12

## Scope & Regulatory Basis
This Privacy Policy outlines how Turrets Bliss Private Limited ("Company", "we", "us", "our") collects, processes, stores, and protects personal data and property records via turrets.in and app.turrets.in ("Platform").
Published in compliance with:
- The Digital Personal Data Protection Act, 2023 (DPDPA)
- The Information Technology Act, 2000
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

## Data Categories Processed
- **Identity & Account Data:** Name, contact details, email address, phone number, and government-issued identifier numbers where mandated for KYC.
- **Property Ownership Records:** Scanned sale deeds, title documents, encumbrance certificates, municipal tax receipts, and mutation records uploaded by Permitted Users.
- **Technical & Audit Logs:** IP addresses, browser agents, access timestamps, and cryptographic signature logs of document operations.

## Purpose of Processing
- Rendering encrypted property storage and document intelligence services.
- Generating transaction readiness scores and compliance warnings.
- Facilitating permissioned, watermarked document sharing among designated co-owners, buyers, banks, and legal advisors.
- Maintaining statutory audit records as required by Indian legal frameworks.

## Data Principal Rights Under DPDPA
- **Right to Access & Summary:** Data Principals can review their personal data and active processing workflows.
- **Right to Correction & Erasure:** Request rectification of inaccuracies and deletion of records, subject to statutory retention obligations.
- **Right of Grievance Redressal:** Access to our designated Grievance Officer for privacy dispute escalation.

## Security Practices
- AES-256 data encryption at rest and TLS 1.3 encryption in transit.
- Multi-tenant data segregation preventing cross-tenant information exposure.
- Continuous access logging and automated vulnerability scanning.

## Navigation & Twins
- links: [/agent/cookie-policy.md, /agent/acceptable-use-policy.md, /agent/master-service-agreement.md, /agent/home.md]