Legal
Privacy Policy
Last updated: June 2026 · ISO 27001:2022 certified
Data protection
Privacy matters because property work carries sensitive documents
Owner identity, bank and property records need access-controlled handling.
Tenant KYC and employment records should be collected only for clear service purposes.
Vendors and partners should receive only the information needed to complete assigned work.
Requests around data access, correction or deletion need a clear contact channel.
1. Introduction
SANGAU ("we", "us", "the Company") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, how we secure it, and your rights as a data subject.
SANGAU holds ISO 27001:2022 certification for Information Security Management. Our data practices are audited annually by an independent body.
2. Data We Collect
Identity data: Name, Aadhaar, PAN, passport (for NRI), date of birth.
Contact data: Phone number, email address, residential and office address.
Property data: Property address, ownership documents, rental history.
Financial data: Bank account for rent credits, security deposit details.
Usage data: IP address, browser type, pages visited, via cookies.
3. How We Use Your Data
We use your data to: provide and manage property management services; draft and execute rent agreements; conduct tenant verification; process rent and maintenance payments; communicate service updates and alerts; comply with legal obligations; and improve our services.
We do not sell, rent or trade your personal data to third parties for marketing purposes.
4. Legal Basis for Processing
We process your data under the following legal bases as applicable under Indian law: performance of a contract; compliance with legal obligations (Aadhaar verification, police e-verification); legitimate business interests; and your consent where required.
5. Data Sharing
We share your data only with: verified vendors and contractors who need it to perform services; government and law enforcement when required by law; technology providers under strict data processing agreements; and professional advisors under confidentiality obligations.
6. Data Security
SANGAU maintains ISO 27001:2022 information security controls including: access-controlled document storage; staff security training and policy acknowledgements; regular security audits and penetration tests; incident response and breach notification procedures.
7. Data Retention
We retain your data for the duration of our service engagement and for up to 7 years thereafter, as required by Indian legal and tax obligations. Upon expiry, data is securely deleted or anonymised.
8. Your Rights
You have the right to: access your personal data; correct inaccurate data; withdraw consent where processing is consent-based; request deletion of data not required by law; and lodge a complaint with the relevant data protection authority.
9. Cookies
Our website uses essential cookies for functionality (session, authentication) and analytics cookies (with your consent) to understand how visitors use the site. You may disable non-essential cookies in your browser settings.
10. Contact for Privacy Queries
For any privacy-related requests or complaints, contact: enquiry@sangau.com
SANGAU concierge
Need help with a privacy or document-security question?
Tell us what data or document you are asking about. We will route your query to the right desk.
Fast, human, documented.
The right team gets the right message from the first tap.