Skip to main content
Back to Home
Last Updated: August 24, 2026
DPDP Act 2023 Governance

Privacy Policy

We value your trust and are committed to protecting your personal information with complete transparency, enterprise encryption, DPDP Act 2023 compliance, and strict TRAI communication standards.

1. Information We Collect

PropFyndr gathers only the data necessary to deliver personalized property intelligence, conversational assistance, and developer connections under the Digital Personal Data Protection Act, 2023 (DPDP Act):

  • Direct Interaction & Conversational Data: Search parameters, shortlisted sectors, BHK configurations, budget constraints, and prompt inputs submitted to our AI advisory engine.
  • Lead & Site Visit Data: Full name, mobile number, and email address provided voluntarily when scheduling site inspections, requesting brochures, or asking for developer callbacks.
  • Technical & Geolocation Data: IP address, device fingerprints, approximate geolocation (used strictly to recommend nearby NCR micro-markets such as Sector 150, Noida Expressway, Yamuna Expressway, or Greater Noida West), and anonymous session tokens via first-party analytics (PostHog).

2. Lead Consent, Developer Sharing & TRAI / DND Waiver

TRAI & DPDP Compliant

When you submit a request for a property callback, site visit, or brochure on PropFyndr:

  • Authorized Third-Party Sharing: You explicitly authorize PropFyndr to transmit your contact information (name, phone number, email, and property interest) to the concerned UP-RERA registered developer or their authorized UP-RERA registered Channel Partner (Real Estate Agent) to service your inquiry.
  • Overriding National DND / TRAI Preference: In accordance with the Telecom Commercial Communications Customer Preference Regulations, 2018 (TRAI TCCR), you agree that this inquiry grants express authorization for developers and channel partners to contact you via Voice Calls, SMS, WhatsApp, and Email, notwithstanding your registration on the National Do Not Call (NDNC / DND) Registry.
  • Zero Telemarketing Resale: We enforce strict partner agreements. Your contact details are shared solely with the specific developer/partner relevant to your requested project and are never sold, rented, or distributed to third-party telemarketing agencies.

3. Home Loan & Banking Partner Lead Sharing

Financial Partners

When you opt for home loan eligibility assistance, builder Approved Project Financials (APF) validation, or custom EMI calculations on PropFyndr:

  • Financial Data Transmission: You explicitly authorize PropFyndr to securely transmit your voluntarily submitted financial indicators (estimated budget, income range, employment type, loan requirement, and contact details) to scheduled partner commercial banks and NBFCs (e.g., HDFC Bank, State Bank of India, ICICI Bank, Axis Bank) or their officially registered Direct Selling Agents (DSAs).
  • Single-Purpose Processing: Transmitted financial data is used exclusively to evaluate home loan pre-approvals, check project APF tie-ups, and offer sanctioned interest rates.

4. Telephony, WhatsApp & Call Recording Consent

Quality & Audit

To deliver prompt real-time connectivity between property seekers and verified developers/channel partners, PropFyndr integrates cloud telephony infrastructure (e.g., Exotel, MyOperator, Twilio) and official WhatsApp Business APIs:

  • Call & Chat Monitoring: Inbound/outbound phone calls, IVR communications, WhatsApp messages, and virtual site tour sessions may be monitored, logged, or recorded.
  • Purpose of Recording: Such records are maintained strictly for operational quality assurance, buyer-broker dispute resolution, agent training, and statutory regulatory compliance under RERA and consumer protection directives.

5. AI Conversational Engine & Prompt Privacy

Zero-Retention Model

PropFyndr provides a domain-specific real estate advisory engine powered by enterprise-grade foundation models:

  • No Model Training on User Prompts: Your conversational queries, financial evaluations, and prompt inputs are processed via zero-data-retention enterprise APIs. Your conversations are never used to train public foundation models (such as Google Gemini, Anthropic Claude, or OpenAI models).
  • Encrypted Session Continuity: Chat transcripts are stored encrypted at rest (AES-256) within your authenticated session for your personal review and are purged according to our data retention schedule.
  • No Unconsented Behavioral Profiling: We do not sell prompt telemetry to ad-tech networks or data brokers for cross-site behavioral retargeting.

6. Purpose & Lawful Grounds of Processing

We process personal data strictly under lawful grounds of consent and legitimate uses as defined by the DPDP Act 2023:

  • Contextual Property Matching: Generating real-time market evaluations, RERA comparisons, and price benchmark calculations.
  • Fulfilling User Inquiries: Enabling verified developers, RERA channel partners, and lending partners to coordinate site visits, pricing sheets, and loan pre-approvals.
  • Platform Security & Anomaly Prevention: Monitoring query volume to prevent denial-of-service, scraping, or automated system abuse.

7. Age Restriction & Protection of Minors (DPDP Act Section 9)

18+ Platform

In strict compliance with Section 9 of the Digital Personal Data Protection Act, 2023:

  • Age Eligibility: PropFyndr is designed exclusively for individuals who are at least 18 years of age and legally competent to enter into binding contracts under the Indian Contract Act, 1872.
  • No Minor Data Collection: We do not knowingly collect, process, track, or target personal data or behavioral profiles of children under 18 years of age.
  • Immediate Deletion: If we discover that personal data of a minor has been collected without verifiable parental/guardian consent, we take immediate corrective steps to permanently delete such records from our databases.

8. Cross-Border Data Transfer & Infrastructure Security

Enterprise Security

To deliver high availability, low-latency search indexing, and resilient AI advisory processing, PropFyndr utilizes global enterprise cloud partners:

Supabase / PostgreSQL CloudEncrypted at rest (AES-256) with strict Row-Level Security (RLS) policies.
Vercel & Edge DeliveryTLS 1.3 encryption in transit, automated DDoS mitigation, and global edge points of presence.
Enterprise AI Inference ProvidersStateless AI processing governed by zero-data-retention and SOC 2 / ISO 27001 data safeguards.
PostHog AnalyticsFirst-party telemetry and UI performance metrics with privacy-preserving IP masking.

In accordance with DPDP Act 2023 provisions on cross-border transfers, data may transit or be processed on secure overseas cloud servers that comply with rigorous international data protection benchmarks.

9. Embedded Builder Microsites & Third-Party Widgets

PropFyndr showcases verified projects from premier developers across Delhi NCR (such as Godrej Properties, M3M, Gaurs Group, ATS, Eldeco, and others). In certain instances, property pages may incorporate embedded iframe brochures, 360° virtual tour players, or developer-hosted scheduling widgets:

  • Independent Privacy Policies: Submitting information directly inside an embedded developer form or following external links navigates you outside PropFyndr' direct governance. Such actions are subject solely to the respective builder's or vendor's privacy policy.
  • Release of Liability: PropFyndr is not responsible for data handling, storage, or unsolicited outreach initiated through independent third-party microsites or off-platform interactions.

10. Cookies, Local Storage & Geolocation Preferences

PropFyndr utilizes essential cookies and browser local storage to maintain session continuity, guest token states, and saved property shortlists:

  • Essential Cookies: Required for user authentication, security verification, and session state.
  • Geolocation Data: Used ephemerally to center the search radius to your relevant NCR sub-market (e.g. Noida vs Greater Noida or Yamuna Expressway). You can disable location permissions in your browser at any time without disrupting manual search.
  • Opt-Out: You can clear cookies or local storage directly in your browser settings at any time.

11. Data Principal Rights (DPDP Act 2023)

Statutory Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, you hold clear, legally enforceable rights:

  • Right to Access & Summary: Request an itemized summary of all personal data, inquiries, and transcripts processed by PropFyndr.
  • Right to Correction & Erasure: Request the immediate rectification of outdated details or the complete permanent erasure of your account, contact details, and search history.
  • Right to Consent Withdrawal: You may revoke consent for developer communications or platform data processing at any time by emailing our Grievance Cell. Upon withdrawal, your data processing will cease within statutory timeframes.
  • Right to Nominate: Nominate an individual to exercise your Data Principal rights in the event of incapacity or demise.

12. Data Retention & Erasure Schedule

Chat transcripts and search queries from unauthenticated guest sessions are automatically expired after 30 days. Registered user profiles and saved property collections remain active until account deletion is initiated. Upon receiving an erasure request, personal identifiers are completely purged from our active databases within 15 days.

Statutory Grievance Redressal & Privacy Officer

Designated officer under Section 5 of the Information Technology Rules, 2021 & DPDP Act, 2023

Data Protection & Grievance Officer:

Legal & Compliance Cell

PropFyndr Technologies Private Limited

Sector 62, Noida, Gautam Buddh Nagar, UP 201301, India

Official Channels & Turnaround SLA:

Email: privacy@propfyndr.in

Grievance Escalations: grievance@propfyndr.in

✓ Acknowledgment within 48 hours · Resolution within statutory DPDP timelines