Privacy

Your email address, but only if you choose to sign in. Signing in exists so a shortlist survives changing device, and so the research layers (survey parcels, drains, flood areas) can be shown to a person rather than to a scraper. You can use the map, the filters, the commute tool, every project page and every report without ever giving it.

You can sign in with a one-time code emailed to you, or with your Google account. Choosing Google shares your name, email address and profile photo URL with us through Google’s own sign-in screen. We use the email address the same way as an email sign-in: to identify your account. Supabase, which stores our accounts, keeps the name and photo Google supplies as part of that record; this site does not read, display or otherwise use either one.

The projects you shortlist, and the unit type you picked, stored against your account so they load on your next visit.

Anonymous usage analytics, through PostHog, hosted in the EU: pages opened, time on page, which controls get used, and error reports when a page fails to load. We deliberately do not build a profile for anonymous visitors: PostHog is configured with person_profiles: "identified_only", so an unsigned visit produces a count, not a person.

No phone number, no name, no address, no age, no income, no financial details, no documents, and no location beyond what you type into the commute box yourself. We do not use advertising trackers, we do not run third-party ad pixels, and we have never sold or shared a visitor’s details with a builder, broker or agent: the site has no mechanism to do so.

The places you type into the commute tool are sent to a routing service to compute travel times, and are not stored against your account.

Your email and shortlist are held on the basis of your consent, which you give by signing in and can withdraw at any time by asking us to delete the account (see below). Analytics are held for the legitimate purpose of understanding whether the tool works (which pages are read, where people give up) and are not linked to an identified person unless you have signed in.

Five processors, each doing one job: Supabase stores accounts and shortlists; Resend delivers the sign-in code to your inbox if you choose that option; Google authenticates you if you choose to sign in with your Google account instead, through its own sign-in screen (we never see or store your Google password); PostHog (EU) records the anonymous analytics; and Cashfree Payments handles payment details if you buy a full report (we never see or store your card, UPI or bank details ourselves). The site is hosted on Vercel. None of them is permitted to use your data for their own purposes, and no one else receives it.

Your email and shortlist are kept until you ask us to delete them: a shortlist that expired on a timer would defeat the point of having one. Analytics events are retained by PostHog under its standard retention and are not used to identify anyone. Sign-in codes expire within the hour and are never stored in readable form.

Under the Digital Personal Data Protection Act 2023 you can ask what we hold about you, ask us to correct it, ask us to delete it, and withdraw consent. Email support@dosl.in from the address you signed up with and we will action it within 30 days. Deletion removes the account and its shortlist rows outright; there is no archived copy to recover, which is the point.

If you are unhappy with how we handle a request, you may complain to the Data Protection Board of India.

Devesh Rohan: support@dosl.in. Bengaluru, India.

DOSL is built for people buying property and is not directed at children. We do not knowingly hold data about anyone under 18. If you believe we do, write to the address above and it will be deleted.

If what we collect changes, this page changes in the same release, and the date at the top moves. There is no separate archive of prior versions; the git history of this file is the record.