Last updated: 25 October 2026 · Draft for legal review — not legal advice.
We collect only what we need to run the marketplace. Your phone number stays masked, and we never share your details with agents without your consent. Questions: webezze@gmail.com.
| What we collect | Why | Kept for |
|---|---|---|
| Name, mobile number, email, account type | Account, login (one-time code), notifications | While the account is open + 12 months |
| Business details, registration numbers, verification documents | Badges, fraud prevention | Documents: 90 days after the check; result kept while account is open |
| Listings, requests, prices, map pins | Showing your post, matching, market statistics | Live period + 24 months (statistics anonymised indefinitely) |
| Messages, call logs through masked numbers | Delivering contact, resolving disputes, preventing spam | 12 months |
| Contact-form and AI assistant chats | Answering you, improving answers | 12 months |
| Payments (credits, plans) | Billing, invoices, refunds | As required by tax law |
| Device, IP address, pages viewed, cookies | Security, analytics, saved searches | Up to 13 months |
How we share data.
- With professionals, only by your choice. A request goes to at most the number of agents you pick (1–5) and only after you tick the consent box. Agents receive a masked number and in-app chat, never your raw number unless you choose to share it.
- With service providers that host the site, send SMS, WhatsApp or email, process payments or run analytics, under contracts that limit use to our instructions.
- With authorities when Pakistani law requires it, for example a lawful request under the Prevention of Electronic Crimes Act 2016.
- We do not sell personal data.
Your choices and rights. You can view, correct, download or delete your data from your dashboard, or by emailing webezze@gmail.com. You can stop agent contact at any time with "Stop contacting me", and you can opt out of marketing messages. We reply within 30 days.
Security. We use encryption in transit, encrypted storage for verification documents, role-based staff access and audit logs. No system is fully secure. If a breach affects you, we will notify you without undue delay.
Children. Houseplot is not for anyone under 18.
International transfers. Some providers may store data outside Pakistan. We choose providers with recognised security standards.
Law. Pakistan does not yet have an enacted personal data protection law. We follow the Prevention of Electronic Crimes Act 2016 and its 2025 amendments, the Electronic Transactions Ordinance 2002, and the principles in the draft Personal Data Protection Bill. We will update this policy when that law is passed.
Last updated: 25 October 2026.