Back to home
Property Pointers — India's #1 Trusted Real Estate Platform

Privacy Policy

How We Collect, Use, Store & Protect Your Personal Data

Effective Date

April 2, 2026

Last Reviewed

April 2, 2026

Regulation

DPDP Act 2023 | IT Act 2000 | IT Rules 2021

Data Controller

Property Pointers (www.propertypointers.com)

DPO Contact

privacy@propertypointers.com

Governing Law

Republic of India

This Privacy Policy describes how Property Pointers collects, uses, shares, and safeguards your personal data in compliance with Indian data protection law.

Our Commitment to Your Privacy

At Property Pointers, we understand that your personal data is important. This Privacy Policy explains in clear, plain language exactly what data we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have over it. We are committed to handling your data responsibly, transparently, and in full compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

01

Who We Are — Data Controller

Property Pointers operates the real estate platform accessible at www.propertypointers.com and its associated mobile applications (collectively, the "Platform"). For the purposes of applicable data protection law, Property Pointers is the Data Controller responsible for the personal data you provide or that is collected when you use the Platform.

DetailInformation
Legal EntityProperty Pointers
Platformwww.propertypointers.com
Registered Address[Registered Office Address], India
Data ControllerProperty Pointers
DPO / Privacy Contactprivacy@propertypointers.com
Grievance Officergrievance@propertypointers.com
Governing LawRepublic of India — DPDP Act 2023, IT Act 2000
02

Scope of This Policy

This Privacy Policy applies to all individuals who interact with the Platform in any capacity, including:

  • Visitors: Individuals who browse the Platform without registering an account.
  • Registered Users: Individuals who create an account as a home seeker, property owner, tenant, or landlord.
  • Brokers & Agents: Licensed real estate professionals who list properties on behalf of owners.
  • Developers & Builders: Companies listing new real estate projects.
  • Partners: Entities enrolled in the Property Pointers Partner Network.
  • Vendors: Service providers listed on the Property Pointers Vendor Marketplace.

This Policy does not apply to third-party websites, services, or platforms that may be linked to or integrated with the Platform. Those third parties operate under their own privacy policies, which we encourage you to review.

03

Personal Data We Collect

We collect personal data in the following categories, depending on how you use the Platform:

3.1Data You Provide Directly

Data TypeExamples & When Collected
Identity DataFull name, username, profile photograph — collected at registration and via account profile.
Contact DataMobile number, email address, postal address — collected at registration, property inquiry, lead forms.
Authentication DataPassword (stored in encrypted form), OTP verification — used for account login and security.
Property Listing DataProperty address, description, photographs, videos, price, area, RERA number — collected at listing submission.
Financial DataPayment card/UPI details (processed by payment gateway — not stored by us), transaction IDs — for paid services.
Identity VerificationPAN, Aadhaar (last 4 digits only), agent RERA number, GSTIN — for broker/developer verification.
Communication DataMessages sent via Platform chat, inquiry forms, support tickets — for user-to-user and user-to-support communication.
Feedback & ReviewsStar ratings, written reviews, comments — collected through community features.

3.2Data Collected Automatically

When you visit or use the Platform, we automatically collect certain technical and behavioural data:

  • Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers.
  • Usage Data: Pages visited, search queries entered, listings viewed, time spent on pages, click patterns, scroll depth, buttons clicked.
  • Location Data: Approximate location derived from IP address; precise GPS location (only if you grant permission in the mobile app for proximity-based search features).
  • Log Data: IP address, access timestamps, referrer URLs, error logs, and session identifiers.
  • Cookie & Tracker Data: Preferences, session tokens, and analytics identifiers stored via cookies, web beacons, and similar technologies. See Section 10 for full details.

3.3Data Received from Third Parties

  • Social Login Data: If you register or log in using Google, Facebook, or another social account, we receive your name, email address, and profile picture from that provider, subject to your privacy settings on that platform.
  • Partner & Referral Data: If you are referred to the Platform by a partner or affiliate, we may receive basic referral information from that partner.
  • Public Records & Verification Services: We may cross-reference listing data against publicly available government records (e.g., RERA portals, municipal databases) for verification purposes.

What We Do NOT Collect

We do not collect full Aadhaar numbers, full bank account details, credit/debit card numbers, or biometric data. Payment processing is handled entirely by our third-party payment gateway partners who are PCI-DSS compliant. We do not have access to your full card details.
04

Legal Bases for Processing Your Data

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:

Legal BasisWhen We Rely on It
ConsentWe rely on your consent for sending promotional communications, using non-essential cookies, sharing data with third-party advertisers, and processing sensitive data categories where required by law. You may withdraw consent at any time.
Contractual NecessityWe process data necessary to provide the Services you have requested — such as maintaining your account, displaying your listings, connecting you with buyers/tenants, and processing payments.
Legitimate InterestsWe process data to detect and prevent fraud, improve the Platform, personalise your experience, and ensure the security of the Platform — where these interests are not overridden by your data protection rights.
Legal ObligationWe process data to comply with applicable Indian laws including the IT Act 2000, RERA, Prevention of Money Laundering Act, and in response to valid orders from courts or law enforcement authorities.
Vital InterestsIn rare emergency circumstances, we may process data to protect the vital interests of a user or another individual.
05

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

5.1Providing & Operating the Platform

  • Creating and managing your account and user profile.
  • Displaying your property listings to relevant buyers, renters, or tenants.
  • Connecting buyers and renters with property owners, agents, and developers.
  • Processing payments for paid services and issuing receipts.
  • Enabling in-Platform communication between users through our chat and inquiry systems.
  • Delivering property alerts, saved search results, and shortlist notifications.

5.2Verification & Trust

  • Verifying the identity of users, particularly for broker and developer accounts.
  • Cross-checking listing details against public RERA databases for compliance.
  • Detecting and investigating fraudulent listings, fake accounts, or suspicious activity.
  • Assigning and displaying the Verified Listing badge where criteria are met.

5.3Communication

  • Sending transactional messages — account creation confirmations, password resets, payment confirmations, listing approval/rejection notices.
  • Sending property recommendation alerts and saved search notifications (with your consent or as part of our service).
  • Sending promotional and marketing communications about new features, platform updates, or relevant real estate offers (with your consent; you may unsubscribe at any time).
  • Contacting you in response to support requests or grievances.

5.4Personalisation & Analytics

  • Personalising the property listings, articles, and tools shown to you based on your search history, location, and stated preferences.
  • Analysing usage patterns to improve Platform design, navigation, and feature sets.
  • Generating anonymised, aggregated market insights and trend reports.
  • Conducting A/B testing to evaluate new features and user experience improvements.

5.5Legal & Compliance

  • Complying with applicable laws, regulations, and government orders.
  • Responding to valid legal processes — court orders, summons, and law enforcement requests.
  • Enforcing our Terms of Service, Terms of Use, and other platform policies.
  • Maintaining records required under RERA, GST, and other applicable legislation.
06

How We Share Your Personal Data

We do not sell your personal data to any third party. We share your data only in the following limited circumstances:

6.1With Other Users (as part of the Service)

When you submit a property inquiry or express interest in a listing, your contact details and profile information (name, phone number, email) are shared with the property owner, listing agent, or developer relevant to that inquiry. This sharing is integral to the Platform's core service and you consent to it by submitting an inquiry. Similarly, when you list a property, your contact details are visible to prospective buyers and tenants.

6.2With Service Providers & Processors

We share data with trusted third-party vendors who process data on our behalf under strict contractual obligations, including:

Service TypePurpose & Provider Type
Cloud HostingInfrastructure, storage, and computing services — AWS / Azure / GCP (as applicable).
Payment ProcessingSecure payment transactions — Razorpay / PayU / CCAvenue (PCI-DSS compliant).
AnalyticsPlatform usage analysis and performance monitoring — Google Analytics, Mixpanel (anonymised).
SMS / Email / PushTransactional and promotional communications — Twilio, SendGrid, Firebase.
VerificationIdentity and RERA data verification — Government databases, authorised bureaus.
Customer SupportSupport ticket management — Zendesk or equivalent.
Fraud DetectionAI-based listing and account fraud screening — third-party ML services.

All service providers are required to process your data only for the specified purpose, in accordance with our instructions, and under contractual data processing agreements that include appropriate security and confidentiality obligations.

6.3With Partners & Vendors (With Your Consent)

If you explicitly request information from a Partner (e.g., a home loan partner, insurance provider, or legal service listed on the Platform), we may share relevant data with that Partner to fulfil your request. Such sharing will only occur after you have expressly consented to it, either through a specific consent prompt or by submitting an inquiry directed at the Partner.

6.4With Regulators & Law Enforcement

We may disclose personal data to government authorities, regulatory bodies, courts, or law enforcement agencies when required by applicable law, court order, summons, or other valid legal process. We will notify you of such disclosure where permitted by law.

6.5In Business Transfers

In the event of a merger, acquisition, restructuring, or sale of Property Pointers, your personal data may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Our Commitment

Property Pointers does not sell, rent, or trade your personal data to any third party for commercial gain. Any sharing of data is limited to what is strictly necessary to provide the Services you have requested or to comply with legal obligations.
07

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

Data CategoryRetention Period & Reason
Account DataDuration of account + 3 years post-closure — for legal obligations and dispute resolution.
Property Listing DataDuration of listing + 2 years — for RERA compliance and audit trail.
Transaction Records7 years from transaction date — for GST, Income Tax, and financial audit requirements.
Communication Logs2 years — for fraud prevention and dispute resolution.
Device & Log Data90 days (rolling) — for security monitoring and debugging.
Cookie / Analytics13 months (as per Google Analytics standard) — for Platform analytics and personalisation.
KYC / VerificationAs required by RERA and applicable law (up to 7 years) — for regulatory compliance.
Fraud / Legal HoldsUntil legal proceedings conclude — for legal defence and law enforcement cooperation.

After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be associated with you. Where deletion is not technically feasible in the short term (e.g., backup archives), we ensure the data is not actively processed and is deleted at the next practicable opportunity.

08

Your Data Protection Rights

Under the Digital Personal Data Protection Act, 2023 and other applicable Indian data protection laws, you have the following rights with respect to your personal data:

Your RightWhat It Means
Right of AccessYou have the right to request a copy of the personal data we hold about you, including information about how it is processed.
Right to CorrectionYou have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most of your data directly through your account settings.
Right to ErasureYou have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (subject to legal retention obligations).
Right to Withdraw ConsentWhere we rely on your consent to process data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right to GrievanceYou have the right to lodge a complaint with our Grievance Officer (grievance@propertypointers.com) regarding any alleged violation of your data rights.
Right to NominateUnder the DPDP Act 2023, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
Right to Non-DiscriminationWe will not discriminate against you for exercising any of the rights described in this section.

To exercise any of the above rights, please submit a written request to privacy@propertypointers.com with your registered email address, the right(s) you wish to exercise, and any relevant details. We will respond within 30 days of receiving a valid request.

Note on Legitimate Refusals

In certain circumstances, we may be unable to fulfil a data rights request — for example, where deletion would impair our ability to comply with a legal obligation, or where an access request would require disclosure of another person's data. We will explain the reason for any such refusal clearly.
09

Data Security

9.1Security Measures

Property Pointers implements a comprehensive set of technical, physical, and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These include:

  • Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (HTTPS).
  • Encryption at Rest: Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
  • Access Controls: Access to personal data is strictly limited to authorised personnel who require it for their job functions, on a need-to-know basis.
  • Authentication: All employee accounts accessing production systems require multi-factor authentication (MFA).
  • Password Security: User passwords are never stored in plain text; they are hashed using industry-standard algorithms (bcrypt or equivalent).
  • Penetration Testing: We conduct periodic security audits and penetration testing by qualified third parties to identify and remediate vulnerabilities.
  • Incident Response: We maintain a documented data breach response plan and will notify affected users and relevant authorities in the event of a significant data breach, as required by applicable law.
  • Vendor Security: Third-party processors are subject to contractual security requirements and are assessed for compliance.

9.2Your Role in Security

The security of your account also depends on you. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, and logging out of shared devices. Property Pointers will never ask for your password via email, phone, or any channel other than the login screen.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights, we will notify you and the relevant regulatory authority (Data Protection Board of India) within the timeframe required by the DPDP Act 2023 and applicable rules.
10

Cookies & Tracking Technologies

10.1What Are Cookies

Cookies are small text files stored on your device by your browser when you visit a website. Property Pointers uses cookies and similar technologies (web beacons, pixel tags, local storage, session storage) to operate the Platform effectively and to understand how users interact with it.

10.2Types of Cookies We Use

Cookie TypePurpose & Notes
Strictly NecessaryEssential for the Platform to function — login sessions, security tokens, load balancing. Cannot be disabled without breaking the Platform.
FunctionalRemember your preferences, language settings, recently viewed properties, and saved searches.
AnalyticsCollect anonymised data about how users navigate and use the Platform to help us improve it (e.g., Google Analytics).
Marketing / TargetingUsed to deliver relevant advertisements on and off the Platform, and to measure ad effectiveness. Only set with your consent.
Third-PartySet by our integrated partners (e.g., home loan providers, map services). Governed by their respective cookie policies.

10.3Managing Cookies

You can manage your cookie preferences at any time through our Cookie Preference Centre, accessible via the cookie banner displayed on your first visit, or through your browser settings. Please note that disabling strictly necessary cookies will impair the Platform's core functionality.

10.4Do Not Track

Some browsers include a "Do Not Track" (DNT) feature. The Platform currently does not respond to DNT signals from browsers, as there is no industry-wide standard for how to interpret them. You may, however, use our cookie preference controls to limit tracking.

11

Cross-Border Data Transfers

Property Pointers stores and primarily processes your personal data in India. However, some of our service providers (such as cloud hosting providers, analytics platforms, and communication tools) may process data in other countries.

Where we transfer personal data outside India, we ensure that appropriate safeguards are in place, as required by the DPDP Act 2023 and any rules notified thereunder. This may include: entering into data processing agreements with standard contractual clauses; transferring data only to countries with adequate data protection standards as assessed by the Government of India; or relying on other approved transfer mechanisms.

User Rights in Cross-Border Transfers

Your rights under this Privacy Policy apply regardless of where your data is processed. If you have concerns about the transfer of your data outside India, please contact privacy@propertypointers.com.
12

Children's Privacy

The Property Pointers Platform is not directed at children under the age of 18. We do not knowingly collect, process, or retain personal data of minors. If you are under 18, please do not use the Platform or provide any personal information.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such data. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at privacy@propertypointers.com and we will act promptly.

13

Third-Party Services & Integrations

The Platform integrates with third-party services whose use of your data is governed by their own privacy policies. These include:

IntegrationPrivacy Notes
Google MapsProperty location display and area-level maps. Governed by Google's Privacy Policy.
Google AnalyticsWebsite and app usage analytics. Data is anonymised and aggregated. Governed by Google's Privacy Policy.
Home Loan PartnersIf you submit a home loan inquiry, your data is shared with the relevant lender under a data sharing agreement. You will be notified at the point of submission.
Social Login (Google/Facebook)If you register via social login, limited profile data is shared with us from that platform per your social account's privacy settings.
Payment GatewaysPayment data is processed by our payment partners under PCI-DSS standards. We do not receive or store full card details.
Push NotificationsDelivered via Firebase Cloud Messaging (FCM) or Apple Push Notification Service (APNS). Governed by the respective providers' policies.
14

Marketing Communications

14.1Promotional Emails & SMS

With your consent, we may send you promotional communications about new property listings matching your saved searches, platform feature updates, real estate market reports, and special offers from Property Pointers or its partners. You can opt out of promotional communications at any time by clicking "Unsubscribe" in any email or by updating your notification preferences in your account settings.

14.2Transactional Communications

We will continue to send you transactional messages (account confirmations, OTPs, payment receipts, listing approval/rejection notices, inquiry notifications) even if you opt out of promotional communications, as these are essential to providing the Services.

14.3NDNC / DND Registry

By registering on the Platform or submitting a property inquiry, you expressly consent to Property Pointers contacting you via calls, SMS, and WhatsApp in connection with the Services, even if your number is registered with the National Do Not Call (NDNC) or Do Not Disturb (DND) registry. This consent may be withdrawn by writing to privacy@propertypointers.com.

15

Automated Decision-Making & Profiling

Property Pointers uses automated systems for the following purposes:

  • Search & Recommendation: Algorithms rank property listings and generate personalised recommendations based on your search history, saved preferences, and location. These outputs are informational and do not produce legally significant effects on your rights.
  • Fraud Detection: Automated systems screen listings and account behaviour for indicators of fraud, such as duplicate listings, mismatched pricing, or unusual login patterns. Accounts flagged by automated systems are reviewed by a human moderator before action is taken.
  • Price Estimation: Our tools provide automated property value estimates based on comparable listings and market data. These are indicative only and not formal valuations.

We do not use fully automated decision-making that produces legal or similarly significant effects on individuals without human oversight. If you have concerns about any automated decision that has affected you, please contact privacy@propertypointers.com.

16

Data Protection Officer (DPO)

In accordance with applicable data protection law, Property Pointers has designated a Data Protection Officer (DPO) responsible for overseeing our data protection practices and serving as the primary point of contact for data subjects and regulatory authorities.

DetailInformation
RoleData Protection Officer (DPO)
OrganisationProperty Pointers
Emailprivacy@propertypointers.com
Postal Address[DPO Address], Property Pointers, India
Response TimeAcknowledgement within 48 hours; substantive response within 30 days.
Regulatory ContactData Protection Board of India (once constituted under DPDP Act 2023).
17

Grievance Redressal for Privacy Complaints

If you have any complaint, concern, or query regarding the processing of your personal data, you may contact our Grievance Officer through the channels below. All privacy-related grievances will be acknowledged within 24 hours and resolved within 15 working days.

ChannelContact
Grievance Officer Emailgrievance@propertypointers.com
Data Rights Requestsprivacy@propertypointers.com
General Supportsupport@propertypointers.com
Legal & Compliancelegal@propertypointers.com
Websitewww.propertypointers.com

If you are not satisfied with our response to your grievance, you may escalate your complaint to the Data Protection Board of India (once established under the DPDP Act 2023) or to any other competent authority under applicable law.

Escalation Path

Step 1: Contact privacy@propertypointers.com.

Step 2: If unresolved within 30 days, escalate to grievance@propertypointers.com.

Step 3: File a complaint with the Data Protection Board of India (DPBI) or the competent regulatory authority.

18

Changes to This Privacy Policy

Property Pointers reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. We will notify you of material changes through:

  • A prominent notice on the Platform homepage or login page.
  • An email notification to your registered email address (for significant changes).
  • An updated "Last Reviewed" date at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.

19

Governing Law & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in New Delhi, India.

20

Definitions

TermDefinition
Personal DataAny data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act 2023.
Data ControllerThe entity that determines the purposes and means of processing personal data — in this case, Property Pointers.
Data ProcessorA third party that processes personal data on behalf of the Data Controller under a data processing agreement.
ProcessingAny operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
ConsentA free, specific, informed, unconditional, and unambiguous indication of the data subject's agreement to processing.
Data PrincipalThe individual to whom the personal data relates — i.e., you, the user.
DPDP ActThe Digital Personal Data Protection Act, 2023, enacted by the Parliament of India.
DPBIData Protection Board of India — the regulatory authority established under the DPDP Act 2023.
Sensitive DataCategories of personal data requiring heightened protection, such as financial data, identity documents, and health information.
Anonymised DataData that has been irreversibly altered so that an individual can no longer be identified from it.

Summary of Your Key Rights

You have the right to: (1) Access your data — know what we hold. (2) Correct your data — fix errors. (3) Erase your data — request deletion. (4) Withdraw consent — stop certain processing. (5) Lodge a grievance — complain to us or to the DPBI. Contact: privacy@propertypointers.com.

Property Pointers — Privacy Policy  |  www.propertypointers.com  |  Effective April 2, 2026  |  Governing Law: Republic of India

Back to home
www.propertypointers.comlegal@propertypointers.com
LiveOn Site
Visitors browsing in the last 15 minutes
Call usWhatsApp us