Privacy Policy

1. About Nondiq

Nondiq is a CRM and business-memory tool for independent real-estate brokers. It helps a broker manage buyers, sellers and property owners, properties, requirements, interactions, follow-ups, site visits, deals, commissions, matching, and supported WhatsApp business communications.

Nondiq is owned and operated by Abhijit Tanaji Mali, sole proprietor, India.

2. Information processed

Account and business profile information

We may process a broker's name, phone number, email where provided, business profile, authentication and session information, and settings required to operate the account.

Broker-entered CRM information

A broker may enter buyer and seller details, contact numbers, property requirements and changes, property listings, notes, interactions, follow-ups, site visits, negotiations, deals, and commission information. The broker decides what legitimate business information to record.

3. WhatsApp Business integration

When a broker connects an eligible WhatsApp Business integration, Nondiq may receive supported WhatsApp Business Platform webhook events on that broker's behalf. Depending on the event and configured privacy mode, this may include a business contact phone number, message direction and timestamp, message text, message or media metadata, provider event identifiers, and delivery or status metadata where applicable. Status-only events do not create CRM communications in the current implementation.

Dedicated Business Number

This mode is intended for a number used for business conversations. Supported messages received after connection may be retained as business memory and begin in an unreviewed state. A phone identity alone is not treated as proof that every message is business-related.

Personal + Business Number

Restricted Privacy Mode disables automatic business-content ingestion into CRM memory. Brokers can continue using manual CRM notes and Open WhatsApp actions. Eligible business communications are retained only through the explicit classification and contact-linking workflows available when business processing is enabled.

Private and excluded contacts

Contacts marked Private or Not Business are added to a tenant- and connection-specific exclusion mechanism. Future content from an excluded contact is minimized or discarded according to the current architecture. Excluded private content is not kept in CRM timelines, unresolved-contact records, follow-ups, exports, or future AI processing. Minimal technical metadata may be retained temporarily where necessary for secure processing, deduplication, and audit. Reversing an exclusion applies only to future messages and does not restore removed content.

Dismiss is not an exclusion. It hides the current unresolved review item, and a future message from the same number may return for broker review.

4. WhatsApp history and unknown contacts

Nondiq does not currently request historical WhatsApp chat import. History synchronization remains disabled in the WhatsApp connection architecture.

An unknown WhatsApp sender is not automatically created as a Buyer or Seller. The broker must explicitly review and classify the sender, link the communication to an existing contact, or create the appropriate CRM contact.

5. Why information is used

Information is processed to provide and protect:

• CRM records, business memory, communication timelines, and record history;
• buyer and property matching, follow-up management, site visits, deals, and commission;
• authentication, security, tenant routing, privacy controls, and service operation; and
• event deduplication, troubleshooting, retention, and abuse prevention.

6. Artificial intelligence

Nondiq does not currently use an LLM or AI system to process WhatsApp messages in production. Any future intelligent feature would require separate implementation and appropriate privacy and confirmation safeguards.

7. Sale, advertising, and model training

Nondiq does not sell WhatsApp Business communication data, use it to build advertising profiles, or use WhatsApp Business data to train or improve a general or shared AI model.

8. Service providers

Nondiq may rely on service providers needed to operate the service, such as hosting, database, security, and communication platforms. When the WhatsApp integration is used, Meta and WhatsApp operate their respective services under their own terms and policies. Providers should receive only the access and information needed for their role.

9. Security and tenant isolation

Implemented safeguards include authenticated sessions, tenant-scoped database access, CSRF controls, signed webhook verification, server-controlled phone-number routing, event deduplication, request-size limits, privacy exclusions, data minimization, and restrictions on secret exposure. No online service can promise absolute security.

10. Retention

Different information classes have configurable retention. The current architecture is configured with a default seven-day technical webhook-event period, a default 30-day unresolved-contact period, and a default 730-day permitted business-communication content period. Scheduled cleanup and legally approved retention procedures must be operated for these periods to take effect. Legitimate CRM records may remain while the account is active or until deletion is requested, subject to legal, security, dispute, and operational needs. Final commercial retention periods remain subject to legal and product review.

11. Access, correction, and deletion

Account holders may request access to applicable account information, correction, deletion, or account closure. Identity verification may be required before a request is completed. See the Data Deletion Instructions for the currently supported process.

12. India and continuing review

Nondiq is currently intended primarily for users in India and is being developed with privacy-by-design controls. Legal and regulatory requirements applicable to commercial deployment are subject to continuing review.