Data Security

1. Your own private space

Every business gets its own separate, secure database, created when its registration is approved. Your buyers, staff, projects, flats, deals and their history are kept there and nowhere else.

Each business's space is locked with its own key, stored encrypted. That key opens only your data.

2. Only you reach your data

When you sign in, we find your workspace from your account and check that it is active before anything is opened. Changing a web address or a link can never take you into another business's data. Every time your data is opened, we check it really is your workspace.

3. Accounts and access

Passwords are stored in a form that cannot be turned back into the password. Accounts lock for 15 minutes after 5 wrong passwords, and repeated attempts are limited. Activation, invitation and reset links work once and expire. Suspending or removing a person signs them out at once.

Roles and permissions are checked every time something is opened or changed. Sales executives see only their own buyers; managers see their team's.

4. Our staff

Our staff who handle registrations see registrations, payments and account status only. Payment evidence is visible only to people authorised to review payments, and every view is logged.

Only the Super Admin of H&G NextGen Private Limited can view or export workspace data, and only to support, secure or bill the service, or when the law requires it. Every view, download and change is recorded in a tamper-proof audit log.

5. Payments and files

Every payment is confirmed with Razorpay. Payment screenshots are checked, stored privately and never given a public link. We never see card numbers, UPI PINs or bank credentials.

6. Your part

Security also depends on you: use strong passwords, never share them, remove staff who leave, keep your devices secure, and export important data regularly using the export features. We are not responsible for access gained through your users, passwords or devices.

7. Backups and recovery

Backups of the service's databases, where taken, are kept for up to 30 days. We do not guarantee that deleted or lost data can be recovered.

8. Reporting a problem

Report suspected security issues to [email protected] with the subject "Security". We will acknowledge within 48 hours.