This Privacy Policy explains how Liaison Card collects, uses, stores, and protects your personal information. It is written in plain language. If you have questions, contact us at our contact form before using the service.
RERA Disclosure: Liaison Card is operated by Madesh Vijay Kumar, RERA Registered Real Estate Agent, Karnataka. Registration No. PRM/KA/RERA/1251/310/AG/260103/006684. Channel partner commissions are received from empanelled builders on completed transactions. The 0.2% buyer reward is funded from these commissions and returned to the buyer after the 120-day refund window completes. This arrangement is fully disclosed to all parties and compliant with RERA Karnataka regulations.
Liaison Card is a buyer intelligence and advisory service for real estate buyers in Bangalore, India. It is operated by Madesh Vijay Kumar, trading as Liaison Cart Business Solutions, Bangalore, Karnataka, India.
Liaison Card is accessible at liaisoncard.com and through our chat interface powered by Liara™, our AI intelligence system.
For privacy matters, contact us at: our contact form
This policy is governed primarily by the Digital Personal Data Protection Act, 2023 (DPDPA) of India. Where our services are accessed by users in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) also applies to those users.
Under the DPDPA, you are a Data Principal. We are a Data Fiduciary. We process your data only for the purposes described in this policy and only with a lawful basis for doing so.
| Data | Why we collect it | Legal basis |
|---|---|---|
| Name | To personalise your Liara™ conversation and address you correctly | Consent / Contract |
| Phone number (WhatsApp) | To identify returning users and enable your Liaison to contact you | Consent / Contract |
| Email address | To send your Visit Preparation Guide and important account communications | Consent / Contract |
| PDF brochures uploaded | To enable Liara™ to analyse your project shortlist. PDFs are processed and not stored permanently after analysis. | Consent |
| Conversation content with Liara™ | To enable conversation continuity — so Liara™ remembers your context when you return | Consent / Legitimate Interest |
| Property preferences and priorities | To personalise the analysis and generate your Visit Preparation Guide | Consent |
| Financial preference information (budget, loan tenure) | To provide indicative EMI estimates. This is not formal financial advice. | Consent |
| Data | Why we collect it | Legal basis |
|---|---|---|
| Session data (via browser localStorage) | To remember returning users without requiring repeated login. Stored locally on your device. | Legitimate Interest |
| Journey stage data | To track your current progress through the Liaison Card process | Contract |
| Payment confirmation data | Received from Cashfree when a card payment is completed | Contract |
Liara™, our AI intelligence system, is powered by Google Gemini API. When you send a message in the Liara™ chat, that message — along with your conversation history — is transmitted to Google's Gemini API for processing. Google returns a response which Liara™ delivers to you.
Explicit consent required: Your conversation content is transmitted to Google's servers for AI processing. By checking the consent box at login and using the Liara™ chat, you explicitly consent to this processing. If you do not consent, do not use the chat feature. Google's data handling for API usage is governed by their Gemini API Terms of Service and Google Privacy Policy.
Under Google's API terms for paid usage, Google does not use API inputs and outputs to train their models. Your conversations are not used to train Google's AI models.
| Data type | Storage platform | Location | Retention |
|---|---|---|---|
| Buyer profile (name, phone, email, stage) | Supabase (PostgreSQL) | AWS — Asia-Pacific region where possible | Until you request deletion or 12 months after last activity |
| Conversation history with Liara™ | Supabase (PostgreSQL) | Same as above | 12 months after last activity by default. You may opt in to extended retention of up to 36 months to preserve session continuity across a longer property search. |
| Session identifier | Browser localStorage (your device) | Your device only | Until you clear browser data |
| Payment records | Cashfree | Cashfree servers | Per Cashfree's retention policy |
| CRM and operational data | Google Sheets | Google servers | Active client records — reviewed annually |
Supabase is SOC 2 Type 2 certified and encrypts data at rest and in transit.
We do not sell your data. We share your data only with the following parties and only to the extent necessary to deliver our service:
| Party | What they receive | Why |
|---|---|---|
| Google (Gemini API) | Your messages to Liara™ and conversation history | AI processing to generate Liara's responses |
| Supabase | Your profile and conversation data | Database storage and retrieval |
| Cashfree | Name, email, phone, payment amount | Payment processing |
| Railway | Workflow data in transit | Hosting our automation infrastructure (n8n) |
| Google (Gmail / Sheets) | Your name, contact details, conversation summary | Sending operational emails and CRM tracking |
| Your assigned Liaison | Your name, phone, project shortlist, Visit Preparation Guide | To facilitate your site visits |
| Empanelled builders | Your name and visit date only | For site visit registration — required to activate your reward |
Builder disclosure: When your Liaison registers you at a site office, your name and visit date are shared with the builder. This is the tagging process that activates your 0.2% reward. No other personal data is shared with builders without your consent.
Liaison Card operates as a RERA registered channel partner (Registration No. PRM/KA/RERA/1251/310/AG/260103/006684). When a member purchases a property through a Liaison Card facilitated site visit, Liaison Card receives a channel partner commission from the builder.
The 0.2% cashback reward paid to members is funded from this commission and returned after the 120-day refund window completes. This arrangement is fully disclosed and compliant with RERA Karnataka regulations.
By using Liaison Card and activating the visit card, you acknowledge and consent to this commission arrangement.
In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, Liaison Card will notify affected users without undue delay and in any case within 72 hours of becoming aware of the breach. Notification will be sent to your registered email address or WhatsApp number and will describe the nature of the breach, the data affected, and the steps being taken to address it. Serious breaches will also be reported to the relevant data protection authority as required under applicable law.
Liaison Card does not use tracking cookies. We use browser localStorage to remember your session between visits, stored only on your device. You can clear localStorage at any time through your browser settings. We do not use advertising cookies, analytics cookies, or third-party tracking of any kind.
You can request a copy of all personal data we hold about you, including your conversation history with Liara™.
You can request that we correct any inaccurate information we hold about you.
You can request that we delete all data we hold about you. Deletion of conversation history means Liara™ will no longer remember your previous sessions. We will process deletion requests within 30 days.
You can request your data in a structured, machine-readable format.
Where processing is based on consent, you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Under the DPDPA, you have the right to raise a grievance with us. We will respond within 72 hours and resolve within 30 days. If unresolved, you may escalate to the Data Protection Board of India once it is constituted.
To exercise any of these rights, use our contact form with the subject line "Data Rights Request" and your registered phone number.
Liaison Card is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, contact us immediately and we will delete it promptly.
Some data is processed outside India — by Google, Supabase (AWS), Cashfree, and Railway. Where data is transferred outside India, adequate protections are in place through standard contractual clauses and data processing agreements with each processor.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify active members by email or WhatsApp. Continued use of the service after notification constitutes acceptance of the updated policy.
Name: Madesh Vijay Kumar
Organisation: Liaison Cart Business Solutions
Address: Bangalore, Karnataka, India
Contact: Use the support form on liaisoncard.com
Grievances acknowledged within 72 hours and resolved within 30 days of receipt.
We aim to respond to all privacy enquiries within 48 hours on business days.