Privacy Policy
1. Who we are
Joefex Real Estate Suite (the “App”) is developed and operated by Joefex, a sole proprietorship established in Puducherry, India, of which the proprietor is Aruldass (“Joefex”, “we”, “us”), No. 3, Surcouf Street, White Town, Puducherry 605001, India. This policy explains what data the App handles when your organisation (the “Customer”) installs it from the Bitrix24 Market, and what happens to that data.
For the business data managed through the App — property listings, agents, owners, clients and enquiries — the Customer is the data controller and Joefex acts as a processor: we process that data only on the Customer’s documented instructions (which the Customer gives by configuring and using the App) and only to provide the App’s features. The Customer is responsible for having a lawful basis to collect and publish the data it puts into the App, and for the rights of the individuals that data concerns.
To provide the App we rely on a small number of sub-processors: Bitrix24 (the CRM the App runs inside), our cloud hosting and media-storage provider (Amazon Web Services), our email-delivery provider, and our payment provider (Razorpay, for billing). Each processes data only as needed for its part of the service. Customers who require a signed Data Processing Agreement may request one at support@joefex.com.
2. What we store on our servers
When the App is installed, we create one installation record for your Bitrix24 portal in our database. It contains, exactly:
| Data | Why |
|---|---|
Your Bitrix24 portal address and Bitrix24’s account identifier (member_id) | To recognise which portal each request belongs to |
| OAuth access and refresh tokens issued by Bitrix24 | To read and write CRM records in your portal on your behalf — the App never sees or stores your Bitrix24 password |
| A feed token generated by the App | To protect your listing feed URLs; only someone holding the token can read the feed |
| Technical configuration (the IDs and field names of the CRM entities the App created in your portal, and your per-portal feed on/off settings) | To address your portal’s own field names correctly |
| Installation status and timestamps | Operations |
The installation record contains no personal data about your staff or clients. We do not store names, emails, phone numbers or listing content in our database.
3. What we process but do not store
Your listings, agents, developers and related records live in your own Bitrix24 portal, in CRM entities that belong to you. When you use the App, it reads that data from Bitrix24 over its REST API, renders it (lists, dashboards, PDF/JPG brochures, portal feeds), and discards it — it is processed in memory per request and is not copied into our database. This includes personal data your records may contain, such as agent names, phone numbers, email addresses and listing-owner names.
4. Uploaded media files
Photos, floor plans and documents you upload through the App are stored on
Joefex’s cloud storage
(Amazon S3, Asia Pacific — Mumbai region, ap-south-1),
in a folder reserved for your installation. The App enforces that one customer cannot
read from or delete another customer’s folder. These files may contain personal data
(for example, agent photos or documents) — you control what you upload and can delete
any file through the App at any time. Files you have published in a feed or brochure are
served publicly by design.
5. Publishing and feeds — data you choose to disclose
When you enable syndication for a portal (Property Finder, Bayut, Dubizzle) or your website, the App publishes the listings you marked as published — including any agent contact details in those listings — as a feed at a token-protected URL, for that portal to collect. This disclosure happens only for the portals you switch on, and stops when you switch a portal off or unpublish a listing. What a portal does with collected data is governed by that portal’s own privacy policy.
6. Cookies
The App sets one strictly necessary session cookie so that Bitrix24 can keep you signed in while the App is open inside your portal. It contains a random session identifier only. The App uses no analytics, advertising or tracking cookies.
7. Third-party content delivery
The App’s pages load some static assets (fonts, scripts, styles) from public content delivery networks: jsDelivr, cdnjs (Cloudflare), jQuery CDN, unpkg and Tailwind CDN. When your browser fetches these assets, those providers receive your IP address and browser information, as with any website. These requests carry none of your listing data.
8. Server logs
Our servers keep standard technical logs (request paths, timestamps, IP addresses, error diagnostics) for security and troubleshooting. Logs are retained for 30 days and are not used for profiling.
9. How long we keep data, and deletion
- While installed: the installation record is kept, and your media files remain in your storage folder.
- When you uninstall: Bitrix24 immediately revokes the App’s access to your portal — the stored tokens stop working at that moment. The CRM entities and listing data the App created remain in your Bitrix24 portal, under your control. We keep the installation record (marked uninstalled) and your uploaded media so that reinstalling restores your configuration and files.
- Full deletion: to have your installation record and all uploaded media permanently deleted, email support@joefex.com from your organisation. We complete deletion within 30 days and confirm in writing.
10. Security
All traffic between your browser, our servers and Bitrix24 uses HTTPS. Each customer’s installation is isolated: API access requires an authenticated Bitrix24 session for your own portal, feeds require your feed token, and storage is namespaced per installation with server-side checks. Access to our production systems is restricted to authorised Joefex personnel. No method of storage or transmission is completely secure; if we become aware of a breach affecting your data we will notify you without undue delay at your portal’s administrator contact.
11. Where data is processed
Our servers are located in Mumbai, India (Amazon Web Services, ap-south-1). Your Bitrix24 data itself is hosted by Bitrix24 under its own terms and locations. Because the App serves customers in the Gulf from infrastructure in India, personal data you upload may be transferred to and processed in India; by using the App you instruct us to process it there for the purpose of providing the App to you.
12. Your rights
Depending on applicable law (for example the UAE Personal Data Protection Law, or the GDPR where it applies), individuals may have rights of access, correction, deletion and objection. For data held in your Bitrix24 portal, exercise these with the Customer (your organisation), which controls that data. For the little we hold — the installation record, media files and logs — contact support@joefex.com.
13. Children
The App is a business tool and is not directed at children.
14. Changes to this policy
We may update this policy when the App or the law changes. The current version is always available at this address, with the “Last updated” date above. Material changes will be announced through the App or the Market listing.
15. Contact
For any privacy question, or to exercise a right over the data we hold, contact us:
Joefex
No. 3, Surcouf Street, White Town, Puducherry 605001, India
Email: support@joefex.com
Website: https://joefex.com
Formal legal notices may instead be sent to our advocates, Al India Law Firm (Adv. Shukul Ahamad), 38, Villianur Main Road, Marie Oulgaret, Puducherry 605110, India.