Privacy Policy
One Touch Marketing is a real-estate installment management service. Members use the mobile app to view the property they have booked, follow their installment schedule, submit payments with a receipt, browse property listings and contact support. This policy explains exactly what personal data the app and its servers collect, why, who it is shared with, how long it is kept, and how to have it deleted.
1. Information we collect
| Data | Why we collect it |
|---|---|
| Name, email address, phone number | To create and identify your account, sign you in, and contact you about your booking and payments. |
| CNIC (national identity number) | To identify you as the registered purchaser of a plot, as required for a real-estate transaction. |
| Membership, plot and installment records (plot number, block, society, amounts, due dates, amounts paid) | To run your payment schedule and show you what you owe and what you have paid. |
| Payment submissions and receipt images you upload | So an administrator can verify and confirm each payment against your schedule. |
| Property listings you submit (title, price, description, contact details, photos) | Only if you choose to list a property for sale or rent. Listings are reviewed by an administrator before they become visible to other users. |
| Support tickets and property inquiries you send | To answer your question and keep a record of the conversation. |
| IP address, browser/app user agent, and timestamps of administrative actions | Kept in a security audit log so we can investigate unauthorised access and prove who approved or changed a payment record. |
We do not collect your location, contacts, photos other than the images you deliberately upload, advertising identifiers, or your browsing activity outside the app. We do not use third-party advertising or analytics trackers. We never ask for or store your bank password, card number or one-time passcode — you pay through your own bank and simply upload proof of that payment.
2. What the app keeps on your device
The app works offline, so a copy of some of your information is stored in the app's private storage on your phone. This copy never leaves your device unless you are signed in and the app syncs it, and it is removed when you sign out or uninstall the app.
- Your profile, installment schedule and the property catalogue you have browsed, in the app's private database.
- Your session token, encrypted with a key held in the device's own secure hardware (Android Keystore).
- A protected copy of your password — not the password itself, but a slow salted hash (PBKDF2, 600,000 iterations) — so the app can verify a sign-in while offline. It cannot be turned back into your password, and it is deleted when you sign out.
Reminders about upcoming installments are scheduled on your device by the operating system's alarm system. We do not operate a push notification service and we do not hold a device token for your phone.
3. How we use your information
- Creating and managing your account and keeping you signed in.
- Maintaining your installment schedule and recording payments you submit.
- Letting an administrator verify, approve or reject a submitted payment.
- Sending you service messages about your account, payments and announcements.
- Responding to support requests and property inquiries.
- Meeting legal, accounting and financial recordkeeping obligations for property transactions.
- Protecting the service against fraud, abuse and unauthorised access.
We do not use your personal data for automated decision-making or profiling.
4. How your information is shared
We do not sell your personal data, and we do not share it for advertising. Your information is shared only:
- With the housing society, developer or dealer connected to your own transaction, so your booking and payments can be reconciled against their records.
- With our hosting provider, which stores the database and uploaded files on our behalf and may not use them for any other purpose.
- Where we are legally required to do so — for example a lawful request from a court, regulator or law-enforcement authority.
5. How long we keep your information
Account profile data (name, email, phone, CNIC) is kept while your account is active. When you ask us to delete your account we remove your profile and sign-in credentials, so you can no longer sign in and we stop contacting you.
Please note: payment, installment and property-transaction records — including receipt images that evidence a payment — are financial records of a real-estate transaction. We retain these for the period required by applicable accounting, tax and property law even after an account deletion request, and they may be retained in the name under which the transaction was made. We keep security audit log entries (which action was taken, by which administrator account, from which IP address) for the same reason. This retention is limited to what the law and legitimate dispute resolution require; nothing is retained for marketing.
6. How we protect your information
- Passwords are never stored in readable form — they are hashed with bcrypt.
- App and admin panel sessions are authenticated with signed, expiring JSON Web Tokens.
- All traffic to our servers is served over HTTPS/TLS in production.
- Database access uses parameterised queries; uploaded files are stored under server-generated names in directories where script execution is disabled.
- Administrative access is role-restricted and recorded in an audit log.
No system is perfectly secure. If a breach affects your personal data we will notify affected users and the relevant authority as required by law.
7. Children
The service is intended for adults entering into property transactions. It is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.
8. Your rights and choices
- Access and correction — view and edit your profile in the app, or contact us for anything you cannot change yourself.
- Reminders — turn the installment reminders off at any time in your device settings; the app then schedules nothing on your phone.
- Deletion — request deletion of your account at any time (see below).
9. How to request account deletion
You can request deletion in either of two ways:
- In the app — open Settings and choose Delete my account.
- On the web, without signing in — use our account deletion request form.
Either route creates a request that a member of our team reviews. We will remove your profile and sign-in credentials, and confirm by email when this is done. Financial and transaction records are retained as described in section 5.
10. Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes will also be announced in the app.
11. Community content
The app includes a member community feed. Posts are reviewed by a moderator before they become visible to other members. If you want to report a post, or want to know what is allowed in the feed, see our Community Guidelines & Content Moderation Policy.
12. Contact us
Email: support@onetouch.com