Privacy notice
Short version: we ask for your mobile number and first name only when you press Connect, only to call you about that home, and you can withdraw at any time.
This notice is not complete. Still to be set before launch: the name of the Data Fiduciary; a grievance and corrections contact; a retention period for leads; whether leads go to developers. Nothing below is a placeholder value; where a fact is not yet set, it says so.
Who is collecting
The name of the Data Fiduciary is not yet set.
When you press Connect
The notice you see beside the form is: “Vitti uses your mobile number and first name only to call you about the project you chose. You can withdraw any time in Settings.” (version 2026-10-07.1). Pressing Connect is your consent to that, under section 6 of India’s Digital Personal Data Protection Act, 2023.
| We collect | Your mobile number, your first name, the project you asked about, the page you were on, the campaign tags in the link that brought you (if any), the notice version and the time you agreed. |
|---|---|
| We use it to | Have a person from our desk call you about that project. Nothing else: no newsletters and no marketing lists. |
| Who else sees it | Whether your details are passed to the project’s developer is not yet decided. Until it is, they are not. |
| How long we keep it | The retention period is not yet set. |
| We do not collect | Email, address, location, contacts, or advertising cookies. There are no third-party trackers on Vitti. |
Withdrawing and your other rights
Open Settings on the device you used and press Withdraw next to the request. Your number and name are erased from it straight away; we keep only the fact that a request existed and was withdrawn. You can also ask the person who calls you to correct or erase your details, or to tell you what we hold.
Grievances and corrections
The grievance contact is not yet set. Until it is, the person who calls you is the only route, and that is not good enough for launch. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Everything else on the site
- Saved homes, theme and text size stay in your browser. We never see them.
- Searches are logged without any identifier: only the filters used and how many projects matched, so we can improve the board. Anything that looks like a phone number or email is removed from search text before it is stored.
- Abuse protection. To stop floods of requests we count requests per network address for a few minutes, using a salted one-way hash. The address itself is never stored.
- Cloudflare Turnstile checks that a person, not a script, pressed Connect. It runs only when you open the Connect form.
- YouTube loads only if you press play on a developer’s video, in privacy-enhanced mode.
- Maps and fonts are served from Vitti itself. Map data © OpenStreetMap contributors.