Privacy Policy

This policy explains how Evrnest Vista Associate Private Limited (CIN U68200TN2024PTC167525), a real estate channel partner registered in Tamil Nadu, handles personal data. It is written to the Digital Personal Data Protection Act, 2023.

It covers two separate things, and they share nothing but this page:

• Part A: the website at evrnest.org Anyone may visit it and send an enquiry from it.
• Part B: the Google-authorised application Named Evrnest Vista Associate, it copies this organisation's own server backups to a Google Drive account this organisation owns. It has no public sign-up and no external users.

Part AThe website

What we collect, and only when you give it

We collect nothing that identifies you until you send us an enquiry. The enquiry form asks for your name, a WhatsApp number and its country, and optionally an email address and a message. We also record which page you sent the enquiry from, and that you ticked the consent box.

Our servers keep ordinary request logs, which include IP addresses, for security and abuse prevention.

Cookies

This website sets no analytics cookies, no advertising cookies and no cross-site trackers, and embeds no social or advertising scripts. It sets a single short-lived cookie that protects the enquiry form against cross-site request forgery. Pages that show a map load that map from Google; Google may set cookies of its own when it does, and that is governed by Google's privacy policy.

Why we use it

Your enquiry is used to contact you about property, to understand what you are looking for, and to introduce you to the developers whose projects match it. It is not used for anything else, it is not sold, and it is not passed to advertisers.

Contact on WhatsApp

The consent box is what permits us to contact you on WhatsApp and by phone about your enquiry. WhatsApp is operated by Meta, so a message we send you passes through Meta's systems. You may withdraw that consent at any time by replying STOP on WhatsApp or by writing to us at the address below, and we will stop. Withdrawing it does not affect anything already lawfully done.

If you go on to buy

A purchase requires identity and address documents, and documents the developer and any lender require. Those are held in our document store, encrypted at rest, reachable only by the staff working your file and only through links that expire. We share them with the developer, and with a lender, only for the transaction you have asked us to act on.

Who else sees your data

• the developer whose project you are enquiring about, when you ask us to introduce you;
• Meta, to the extent a WhatsApp message passes through it;
• Google, for maps shown on this website and for the backups in Part B;
• our hosting and email providers, who process it on our instructions; and
• anyone a law, a court or a regulator obliges us to tell.

We do not sell personal data, and we do not share it for anyone else's advertising.

Where it is held

Our servers are in India. We operate in Chennai and Dubai, so if your enquiry concerns a Dubai property it will be seen by our team there.

How long we keep it

• The raw record of a website enquiry is deleted automatically after 180 days.
• The enquiry itself becomes a record in our system, which we keep while we are dealing with you and afterwards for as long as company, tax and property law require us to keep records of a transaction.
• Server logs are kept for a short period and then rotated away.

Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

• ask what personal data of yours we hold and what we have done with it;
• ask us to correct or complete anything inaccurate;
• ask us to erase it, where we are not required to keep it;
• withdraw a consent you have given, as easily as you gave it; and
• nominate someone to exercise these rights if you cannot.

Write to sales@evrnest.org. We will answer within the period the Act allows.

Grievances

If you are not satisfied with how we have handled your data or your request, write to sales@evrnest.org, or to Evrnest Vista Associate Private Limited, Flat No. 3, 2nd Floor, K V Apartments, 16A, Poes Garden, Chennai, Tamil Nadu 600 086. If we do not resolve it, you may complain to the Data Protection Board of India.

Children

This website is not intended for anyone under 18 and we do not knowingly collect a child's personal data. If you believe we have, write to us and we will delete it.

Security

Access to our systems is restricted per person and per record, every sign-in and every access to a sensitive document is logged, traffic is encrypted in transit, and backups are encrypted before they leave our servers. No system is perfect, and we do not claim otherwise.

Part BThe Google-authorised application

If you have arrived here from a Google consent screen, you are the owner of the Google account that receives our backups. This application is authorised once, by you, and thereafter runs unattended on our own server.

What the application accesses

It requests a single Google Drive scope, drive.file. That scope is deliberately the narrowest one available for this purpose: it grants access only to files the application itself creates. It cannot read, modify, list or delete any other file in the Drive account, including files created by you or by any other application.

The files it creates are nightly backup archives containing:

• logical database dumps from our own servers,
• archives of our own application data and container volumes,
• our own server configuration, and
• checksums and an inventory manifest for the above.

What the application does not do

It collects no personal information from visitors to this website. It has no analytics, no advertising and no tracking. It does not read your Google profile, contacts, mail or calendar, and it does not transmit your Drive contents anywhere.

Where the data goes, and in what form

Backups are written to our own server and copied to the Google Drive account that granted access. Since 14 September 2026 the copy in Drive is encrypted before it leaves our server, so Google Drive holds ciphertext and the key never leaves our premises. Transfer is over TLS. Backups are not shared with, sold to, or processed by any other party.

Retention of backups

Recent copies are kept on our own server for a few days. In Google Drive we keep 7 daily, 4 weekly and 4 monthly copies, and older ones are removed automatically. The account owner may revoke the application's access at any time at myaccount.google.com/permissions, and may delete the stored files directly from Google Drive.

Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Data obtained through Google APIs is used only to provide and maintain the backup function described above, is not transferred to others except as required by law, and is not used for advertising or for building profiles.

Changes to this policy

We update this page when what we do changes, and the date at the top is when it last changed.

Contact

Questions about this policy, or about the website: sales@evrnest.org. Questions about the backup application: admin@evrnest.org.