BizDP ("we", "our", or "us") provides the BizDP Client Portal application for verified property plot owners, purchasers, and authorized real estate stakeholders. This Privacy Policy informs users regarding our strict policies concerning the collection, usage, processing, storage, and disclosure of Personal Information for individuals utilizing our Android mobile service.
1. Information Collection and Processing
To ensure secure authentication, financial integrity, and tamper-proof ledger auditing, the BizDP Client Portal processes specific categories of personal and transactional information:
A. Plot Identification & Account Credentials
- Account Identifiers: Registered Plot Number, Project Code, Sub-Project Block, and secure account password/PIN.
- Owner Profile: Registered legal name, primary mobile number, national identity profile (where required for property record verification).
B. Biometric Verification Data
Local & Secure On-Prem Biometric Processing
Facial biometric vectors and facial recognition checkpoints are processed strictly for real-time plot owner verification during session login and high-value receipt authentication. Biometric templates are never sold, leased, or broadcast to third-party ad networks. Processing operates locally on-device and against isolated, dedicated secure enterprise servers with cryptographic signature verification.
C. Financial Ledgers & Payment Tokens
- Ledger Identifiers: Unique Transaction Reference Numbers, Ledger Statement IDs, Installment Schedule Indexes, and Surcharge adjustment logs.
- Payment Processing: When settling installments via our authorized checkout gateways (Safepay, Bank Alfalah), payment card numbers and online banking credentials are tokenized directly through PCI-DSS Level 1 certified processors. BizDP never stores full raw credit card PAN numbers or CVV codes on client devices.
2. Device Permissions Usage
BizDP adheres strictly to the principle of least privilege. The following Android runtime permissions are requested exclusively when corresponding functional workflows are invoked:
| Permission | Android Level | Operational Purpose |
|---|---|---|
CAMERA |
Dangerous (Runtime) |
1. Captures live facial frame vectors for secure biometric plot owner verification. 2. Scans QR codes embedded on physical and digital installment receipts for instant ledger validation. |
READ_MEDIA_IMAGES / Scoped Storage |
Runtime / Scoped | Downloads, renders, and caches official PDF installment statements and cryptographic payment receipts securely via Android FileProvider. |
POST_NOTIFICATIONS |
Runtime (Android 13+) | Delivers critical payment status confirmations, installment due date reminders, and security alert notifications. |
INTERNET & ACCESS_NETWORK_STATE |
Normal | Establishes TLS 1.3 encrypted HTTPS sessions with the BizDP Core API infrastructure and monitors offline queue synchronization. |
3. Data Security & Cryptographic Architecture
We implement state-of-the-art enterprise defenses to safeguard plot owner data against unauthorized access, loss, or alteration:
- Transport Security: All API communication is strictly encrypted using TLS 1.3 with Certificate Pinning enabled across all endpoints.
- Local Storage Encryption: Sensitive cached tokens and offline queue records are secured within Android Keystore-backed AES-256 encrypted Hive storage (
HiveAesCipher). - Tamper & Integrity Verification: The mobile client executes real-time root, debug, and integrity checks. Receipt exports are bound to cryptographically signed digital signatures to guarantee provenance.
- Automatic Session Timeout: Inactive authenticated sessions expire automatically to protect sensitive ledger accounts against physical device compromise.
4. Third-Party Services & Disclosures
BizDP does not sell, rent, or trade user personal data to third parties. We share data only with authorized service providers strictly required to complete portal transactions:
- Payment Gateway Partners: Safepay, Bank Alfalah APG, and EasyPaisa payment gateways for processing installment settlements.
- Regulatory Authorities: Disclosed only if strictly mandated by Pakistani judicial decree or statutory law enforcement directives.
5. User Rights & Data Retention
Plot owners possess the right to:
- Inspect and request a digital copy of their complete historical installment ledger and payment records.
- Request revocation or re-enrollment of facial biometric authentication templates at any time.
- Request account closure upon final property transfer clearance and settlement of outstanding dues.
6. Support & Privacy Inquiries
If you have questions, feedback, or compliance concerns regarding this Privacy Policy or your personal data handling, reach out to our dedicated support desks:
BizDP Client Support & Compliance Center
Available Monday – Saturday, 9:00 AM – 6:00 PM PKT | 24/7 AI Voice Escalation