Version 1.0 · Effective from [date of publication]
This Privacy Notice explains what personal data GM Key Wee Private Limited collects through Keywee, why we collect it, who we share it with, and how you can control it. It is a standalone notice under Section 5 of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
It applies to two groups:
This notice is available in English and in the languages listed in the Eighth Schedule to the Constitution of India. [Language selector]
Keywee is operated by GM Key Wee Private Limited ("Keywee", "we", "us"). "Platform" means the website www.keywee.in and the Keywee mobile app.
| Company | GM Key Wee Private Limited |
| CIN | U74102HR2026PTC150012 |
| Registered office | D-26 EBD 114, Sector 114, Palam Vihar (Gurgaon), Gurgaon, Haryana, India, 122017 |
| Privacy contact | Grievance Officer, GMKEYWEE@GMAIL.COM (see section 13) |
We decide why and how your personal data is processed, so we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). You are the Data Principal.
We process your personal data with your consent, or where the law allows us to without it, such as to comply with a court order or a legal duty.
Your consent covers only the purposes listed in this notice. You can withdraw it at any time, as easily as you gave it (see section 10).
Users do not pay Keywee, so we do not collect payment details from you.
| Data | Why we use it |
|---|---|
| Name and mobile number | Create your account and verify it by OTP. Share with architects you contact, and with architects whose listings match your stated requirements. |
| Email address (if you give it) | Account notices, support, and notice of changes to our terms. |
| City and location | Show architects in your area and match your requirements to listings. |
| Project brief: property type, requirements, budget and style preferences | Share with architects you contact, and with architects whose listings match your requirements. |
| Enquiries and messages you send through the Platform | Deliver them to the architect, and handle support and complaints. |
| Reviews, ratings, photos and comments you post | Publish them on the Platform and in our marketing (Terms of Use clause 6.3). |
| Searches and shortlists | Show you relevant results, and improve the Platform. |
We also use this data for customer support, grievance redressal, fraud prevention, security and compliance with law.
We use your name and contact details to send you news about the Platform. You can opt out at any time without closing your account (see section 10).
| Data | Why we use it |
|---|---|
| Name, mobile number and email | Register you and verify your account, send notices (including changes to the Agreement), and billing. |
| Firm name, years of experience, office address, project budget range and professional bio | Publish your Listing so Users can find and contact you, and match it to User requirements. |
| Portfolio images, renders, drawings and logos | Publish on your Listing, and promote the Platform and your Listing. |
| Council of Architecture registration number, identity documents, GST registration and other papers you submit | Registration and identity verification, internal records and legal compliance. We do not authenticate these documents, and collecting them is not a verification of you for Users (Agreement clause 3.4). |
| Plan chosen, invoices, payment records and TDS certificates | Billing, invoicing, taxation and accounting. Card and bank details you enter at checkout are processed by our payment gateway partner, [gateway name]. |
| Enquiries you receive and your responses | Deliver enquiries to you, handle User complaints, and enforce the Agreement. |
We also use this data for customer support, grievance redressal, fraud prevention, security, analytics, product improvement and compliance with law.
Your Listing is public. Anyone visiting the Platform can see what you publish on it, including your name, firm, office address, bio and portfolio.
| Data | Why we use it |
|---|---|
| Device and browser details: device type, operating system, browser and IP address | Security, fraud prevention, fixing errors, and keeping a record of your acceptance of our terms. |
| Usage data: pages viewed, searches and clicks | Analytics and product improvement. |
| Cookies and similar technologies | Keep you signed in, remember your preferences, and measure how the Platform is used. |
When you accept our terms, we record the version accepted, the date, the time and your IP address as proof of acceptance.
You can block or delete cookies in your browser settings. Cookies needed for sign-in are essential, so blocking them may stop parts of the Platform from working.
We use automated tools, which may include AI, to show Users architect listings that match the requirements they enter, such as location, budget and style. We may also send a User's project brief to architects whose listings match those requirements.
Matching compares what a User enters with what architects say about themselves. It is not a recommendation, endorsement or verification of any architect (Terms of Use clause 3).
The main factors that decide the order of listings are explained on our ranking page, [link], as required by Rule 5(6) of the Consumer Protection (E-Commerce) Rules, 2020.
We do not sell your personal data. We share it only as set out below.
| Who receives it | What they receive | Why |
|---|---|---|
| Architects a User contacts, and architects whose listings match the User's requirements | The User's name, contact details and project brief | So they can respond to the enquiry |
| Anyone visiting the Platform | An Architect's Listing | So Users can find architects |
| Payment gateway partners | Architects' billing and payment details | To process fees |
| Cloud hosting, analytics and communication providers (including SMS, OTP and email services) | Only the data they need to provide their service | To run the Platform |
| Auditors and legal advisers | Data relevant to their work | Audits, accounts and legal advice |
| Courts, government bodies and regulators | Data they lawfully request | To comply with law |
| A buyer or successor of our business | Your data, still covered by this notice | If Keywee merges or is sold |
Our service providers act on our instructions and are bound by confidentiality. Some may store data outside India. We transfer data outside India only where the law allows.
Once an architect receives a User's details, that architect becomes an independent Data Fiduciary for them. Keywee is not responsible for what an architect does with that data. A User's remedy for misuse lies against that architect, without affecting the User's statutory rights (Terms of Use clause 11.5).
We keep personal data only as long as the purposes in this notice need it, then erase it, unless the law requires us to keep it longer.
| Data | How long we keep it |
|---|---|
| User and Architect account details | While your account is open. After closure, registration details are kept for 180 days, as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require. |
| Architect Listing | While your subscription is active. Taken down when it ends or is terminated. |
| Billing, invoices and tax records | For the period that tax and company law require. |
| Records of acceptance of terms and consent | For as long as a claim could arise under the Terms of Use or the Agreement. |
| Security and access logs | For the period the law requires. |
We use reasonable security safeguards to prevent personal data breaches, including encryption of data in transit, access controls, and limiting staff access to those who need it.
If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act and Rules require. We will tell you what happened, the likely impact, and what you can do to protect yourself.
Never share your OTP with anyone. Keywee will never ask a User to pay an architect's fee to Keywee or to any account Keywee nominates. Report any such request to our Grievance Officer at once.
| Your right (DPDP Act) | What it means |
|---|---|
| Access (Section 11) | Get a summary of the personal data we process about you, and who we have shared it with. |
| Correction and erasure (Section 12) | Correct, complete or update your data, or ask us to erase it. |
| Withdraw consent (Section 6) | Stop our future processing that is based on your consent. |
| Grievance redressal (Section 13) | Complain to our Grievance Officer, and then to the Data Protection Board of India. |
| Nomination (Section 14) | Name a person to exercise your rights if you die or become unable to. |
How to make a request: email GMKEYWEE@GMAIL.COM, or use [in-app path, e.g. Profile › Privacy]. Include your name and registered mobile number. We may ask you to confirm your identity. We acknowledge requests within 48 hours and aim to resolve them within one month.
What happens when you withdraw consent:
Withdrawal does not affect processing that happened before it.
Under Section 15 of the DPDP Act, you must give accurate information, must not impersonate anyone, and must not file false or frivolous complaints.
Keywee is not for anyone under 18. If you are under 18, do not use the Platform. Where a parent or guardian allows a child to use it, the parent or guardian is the User and must register in their own name (Terms of Use clause 1.4).
We do not knowingly collect personal data of children. If we learn that we have, we will delete it.
We may create aggregated, anonymised data, such as average project budgets by city, that cannot reasonably be used to identify you. This is not personal data. We may use, retain, license and monetise it without restriction, including after your account is closed (Terms of Use clause 11.4, Agreement clause 11.4).
| Name | Keywee Grievance Officer |
| Designation | Grievance Officer |
| Address | D-26 EBD 114, Sector 114, Palam Vihar (Gurgaon), Gurgaon, Haryana, India, 122017 |
| GMKEYWEE@GMAIL.COM | |
| Telephone | 8989952828 |
| Working hours | 11 am to 6 pm |
Complaints must be in writing or electronic form and include your name and contact details. We acknowledge every complaint within 48 hours and aim to resolve it within one month.
If you are not satisfied with our response, you can complain to the Data Protection Board of India through its online platform, [link], after first using our grievance process.
We may update this notice. For material changes, we will notify you on the Platform and by email at least 15 days before they take effect. Where a change needs fresh consent, we will ask for it. The version number and effective date at the top show which version applies.