Our Commitment to Your Privacy
At Property Pointers, we understand that your personal data is important. This Privacy Policy explains in clear, plain language exactly what data we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have over it. We are committed to handling your data responsibly, transparently, and in full compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
Who We Are — Data Controller
Property Pointers operates the real estate platform accessible at www.propertypointers.com and its associated mobile applications (collectively, the "Platform"). For the purposes of applicable data protection law, Property Pointers is the Data Controller responsible for the personal data you provide or that is collected when you use the Platform.
| Detail | Information |
|---|---|
| Legal Entity | Property Pointers |
| Platform | www.propertypointers.com |
| Registered Address | [Registered Office Address], India |
| Data Controller | Property Pointers |
| DPO / Privacy Contact | privacy@propertypointers.com |
| Grievance Officer | grievance@propertypointers.com |
| Governing Law | Republic of India — DPDP Act 2023, IT Act 2000 |
Scope of This Policy
This Privacy Policy applies to all individuals who interact with the Platform in any capacity, including:
- ▸Visitors: Individuals who browse the Platform without registering an account.
- ▸Registered Users: Individuals who create an account as a home seeker, property owner, tenant, or landlord.
- ▸Brokers & Agents: Licensed real estate professionals who list properties on behalf of owners.
- ▸Developers & Builders: Companies listing new real estate projects.
- ▸Partners: Entities enrolled in the Property Pointers Partner Network.
- ▸Vendors: Service providers listed on the Property Pointers Vendor Marketplace.
This Policy does not apply to third-party websites, services, or platforms that may be linked to or integrated with the Platform. Those third parties operate under their own privacy policies, which we encourage you to review.
Personal Data We Collect
We collect personal data in the following categories, depending on how you use the Platform:
3.1Data You Provide Directly
| Data Type | Examples & When Collected |
|---|---|
| Identity Data | Full name, username, profile photograph — collected at registration and via account profile. |
| Contact Data | Mobile number, email address, postal address — collected at registration, property inquiry, lead forms. |
| Authentication Data | Password (stored in encrypted form), OTP verification — used for account login and security. |
| Property Listing Data | Property address, description, photographs, videos, price, area, RERA number — collected at listing submission. |
| Financial Data | Payment card/UPI details (processed by payment gateway — not stored by us), transaction IDs — for paid services. |
| Identity Verification | PAN, Aadhaar (last 4 digits only), agent RERA number, GSTIN — for broker/developer verification. |
| Communication Data | Messages sent via Platform chat, inquiry forms, support tickets — for user-to-user and user-to-support communication. |
| Feedback & Reviews | Star ratings, written reviews, comments — collected through community features. |
3.2Data Collected Automatically
When you visit or use the Platform, we automatically collect certain technical and behavioural data:
- ▸Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers.
- ▸Usage Data: Pages visited, search queries entered, listings viewed, time spent on pages, click patterns, scroll depth, buttons clicked.
- ▸Location Data: Approximate location derived from IP address; precise GPS location (only if you grant permission in the mobile app for proximity-based search features).
- ▸Log Data: IP address, access timestamps, referrer URLs, error logs, and session identifiers.
- ▸Cookie & Tracker Data: Preferences, session tokens, and analytics identifiers stored via cookies, web beacons, and similar technologies. See Section 10 for full details.
3.3Data Received from Third Parties
- ▸Social Login Data: If you register or log in using Google, Facebook, or another social account, we receive your name, email address, and profile picture from that provider, subject to your privacy settings on that platform.
- ▸Partner & Referral Data: If you are referred to the Platform by a partner or affiliate, we may receive basic referral information from that partner.
- ▸Public Records & Verification Services: We may cross-reference listing data against publicly available government records (e.g., RERA portals, municipal databases) for verification purposes.
What We Do NOT Collect
Legal Bases for Processing Your Data
Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:
| Legal Basis | When We Rely on It |
|---|---|
| Consent | We rely on your consent for sending promotional communications, using non-essential cookies, sharing data with third-party advertisers, and processing sensitive data categories where required by law. You may withdraw consent at any time. |
| Contractual Necessity | We process data necessary to provide the Services you have requested — such as maintaining your account, displaying your listings, connecting you with buyers/tenants, and processing payments. |
| Legitimate Interests | We process data to detect and prevent fraud, improve the Platform, personalise your experience, and ensure the security of the Platform — where these interests are not overridden by your data protection rights. |
| Legal Obligation | We process data to comply with applicable Indian laws including the IT Act 2000, RERA, Prevention of Money Laundering Act, and in response to valid orders from courts or law enforcement authorities. |
| Vital Interests | In rare emergency circumstances, we may process data to protect the vital interests of a user or another individual. |
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
5.1Providing & Operating the Platform
- ▸Creating and managing your account and user profile.
- ▸Displaying your property listings to relevant buyers, renters, or tenants.
- ▸Connecting buyers and renters with property owners, agents, and developers.
- ▸Processing payments for paid services and issuing receipts.
- ▸Enabling in-Platform communication between users through our chat and inquiry systems.
- ▸Delivering property alerts, saved search results, and shortlist notifications.
5.2Verification & Trust
- ▸Verifying the identity of users, particularly for broker and developer accounts.
- ▸Cross-checking listing details against public RERA databases for compliance.
- ▸Detecting and investigating fraudulent listings, fake accounts, or suspicious activity.
- ▸Assigning and displaying the Verified Listing badge where criteria are met.
5.3Communication
- ▸Sending transactional messages — account creation confirmations, password resets, payment confirmations, listing approval/rejection notices.
- ▸Sending property recommendation alerts and saved search notifications (with your consent or as part of our service).
- ▸Sending promotional and marketing communications about new features, platform updates, or relevant real estate offers (with your consent; you may unsubscribe at any time).
- ▸Contacting you in response to support requests or grievances.
5.4Personalisation & Analytics
- ▸Personalising the property listings, articles, and tools shown to you based on your search history, location, and stated preferences.
- ▸Analysing usage patterns to improve Platform design, navigation, and feature sets.
- ▸Generating anonymised, aggregated market insights and trend reports.
- ▸Conducting A/B testing to evaluate new features and user experience improvements.
5.5Legal & Compliance
- ▸Complying with applicable laws, regulations, and government orders.
- ▸Responding to valid legal processes — court orders, summons, and law enforcement requests.
- ▸Enforcing our Terms of Service, Terms of Use, and other platform policies.
- ▸Maintaining records required under RERA, GST, and other applicable legislation.
How We Share Your Personal Data
We do not sell your personal data to any third party. We share your data only in the following limited circumstances:
6.1With Other Users (as part of the Service)
When you submit a property inquiry or express interest in a listing, your contact details and profile information (name, phone number, email) are shared with the property owner, listing agent, or developer relevant to that inquiry. This sharing is integral to the Platform's core service and you consent to it by submitting an inquiry. Similarly, when you list a property, your contact details are visible to prospective buyers and tenants.
6.2With Service Providers & Processors
We share data with trusted third-party vendors who process data on our behalf under strict contractual obligations, including:
| Service Type | Purpose & Provider Type |
|---|---|
| Cloud Hosting | Infrastructure, storage, and computing services — AWS / Azure / GCP (as applicable). |
| Payment Processing | Secure payment transactions — Razorpay / PayU / CCAvenue (PCI-DSS compliant). |
| Analytics | Platform usage analysis and performance monitoring — Google Analytics, Mixpanel (anonymised). |
| SMS / Email / Push | Transactional and promotional communications — Twilio, SendGrid, Firebase. |
| Verification | Identity and RERA data verification — Government databases, authorised bureaus. |
| Customer Support | Support ticket management — Zendesk or equivalent. |
| Fraud Detection | AI-based listing and account fraud screening — third-party ML services. |
All service providers are required to process your data only for the specified purpose, in accordance with our instructions, and under contractual data processing agreements that include appropriate security and confidentiality obligations.
6.3With Partners & Vendors (With Your Consent)
If you explicitly request information from a Partner (e.g., a home loan partner, insurance provider, or legal service listed on the Platform), we may share relevant data with that Partner to fulfil your request. Such sharing will only occur after you have expressly consented to it, either through a specific consent prompt or by submitting an inquiry directed at the Partner.
6.4With Regulators & Law Enforcement
We may disclose personal data to government authorities, regulatory bodies, courts, or law enforcement agencies when required by applicable law, court order, summons, or other valid legal process. We will notify you of such disclosure where permitted by law.
6.5In Business Transfers
In the event of a merger, acquisition, restructuring, or sale of Property Pointers, your personal data may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Our Commitment
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period & Reason |
|---|---|
| Account Data | Duration of account + 3 years post-closure — for legal obligations and dispute resolution. |
| Property Listing Data | Duration of listing + 2 years — for RERA compliance and audit trail. |
| Transaction Records | 7 years from transaction date — for GST, Income Tax, and financial audit requirements. |
| Communication Logs | 2 years — for fraud prevention and dispute resolution. |
| Device & Log Data | 90 days (rolling) — for security monitoring and debugging. |
| Cookie / Analytics | 13 months (as per Google Analytics standard) — for Platform analytics and personalisation. |
| KYC / Verification | As required by RERA and applicable law (up to 7 years) — for regulatory compliance. |
| Fraud / Legal Holds | Until legal proceedings conclude — for legal defence and law enforcement cooperation. |
After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be associated with you. Where deletion is not technically feasible in the short term (e.g., backup archives), we ensure the data is not actively processed and is deleted at the next practicable opportunity.
Your Data Protection Rights
Under the Digital Personal Data Protection Act, 2023 and other applicable Indian data protection laws, you have the following rights with respect to your personal data:
| Your Right | What It Means |
|---|---|
| Right of Access | You have the right to request a copy of the personal data we hold about you, including information about how it is processed. |
| Right to Correction | You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most of your data directly through your account settings. |
| Right to Erasure | You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (subject to legal retention obligations). |
| Right to Withdraw Consent | Where we rely on your consent to process data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal. |
| Right to Grievance | You have the right to lodge a complaint with our Grievance Officer (grievance@propertypointers.com) regarding any alleged violation of your data rights. |
| Right to Nominate | Under the DPDP Act 2023, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of the rights described in this section. |
To exercise any of the above rights, please submit a written request to privacy@propertypointers.com with your registered email address, the right(s) you wish to exercise, and any relevant details. We will respond within 30 days of receiving a valid request.
Note on Legitimate Refusals
Data Security
9.1Security Measures
Property Pointers implements a comprehensive set of technical, physical, and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These include:
- ▸Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (HTTPS).
- ▸Encryption at Rest: Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
- ▸Access Controls: Access to personal data is strictly limited to authorised personnel who require it for their job functions, on a need-to-know basis.
- ▸Authentication: All employee accounts accessing production systems require multi-factor authentication (MFA).
- ▸Password Security: User passwords are never stored in plain text; they are hashed using industry-standard algorithms (bcrypt or equivalent).
- ▸Penetration Testing: We conduct periodic security audits and penetration testing by qualified third parties to identify and remediate vulnerabilities.
- ▸Incident Response: We maintain a documented data breach response plan and will notify affected users and relevant authorities in the event of a significant data breach, as required by applicable law.
- ▸Vendor Security: Third-party processors are subject to contractual security requirements and are assessed for compliance.
9.2Your Role in Security
The security of your account also depends on you. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, and logging out of shared devices. Property Pointers will never ask for your password via email, phone, or any channel other than the login screen.
Data Breach Notification
Cookies & Tracking Technologies
10.1What Are Cookies
Cookies are small text files stored on your device by your browser when you visit a website. Property Pointers uses cookies and similar technologies (web beacons, pixel tags, local storage, session storage) to operate the Platform effectively and to understand how users interact with it.
10.2Types of Cookies We Use
| Cookie Type | Purpose & Notes |
|---|---|
| Strictly Necessary | Essential for the Platform to function — login sessions, security tokens, load balancing. Cannot be disabled without breaking the Platform. |
| Functional | Remember your preferences, language settings, recently viewed properties, and saved searches. |
| Analytics | Collect anonymised data about how users navigate and use the Platform to help us improve it (e.g., Google Analytics). |
| Marketing / Targeting | Used to deliver relevant advertisements on and off the Platform, and to measure ad effectiveness. Only set with your consent. |
| Third-Party | Set by our integrated partners (e.g., home loan providers, map services). Governed by their respective cookie policies. |
10.3Managing Cookies
You can manage your cookie preferences at any time through our Cookie Preference Centre, accessible via the cookie banner displayed on your first visit, or through your browser settings. Please note that disabling strictly necessary cookies will impair the Platform's core functionality.
10.4Do Not Track
Some browsers include a "Do Not Track" (DNT) feature. The Platform currently does not respond to DNT signals from browsers, as there is no industry-wide standard for how to interpret them. You may, however, use our cookie preference controls to limit tracking.
Cross-Border Data Transfers
Property Pointers stores and primarily processes your personal data in India. However, some of our service providers (such as cloud hosting providers, analytics platforms, and communication tools) may process data in other countries.
Where we transfer personal data outside India, we ensure that appropriate safeguards are in place, as required by the DPDP Act 2023 and any rules notified thereunder. This may include: entering into data processing agreements with standard contractual clauses; transferring data only to countries with adequate data protection standards as assessed by the Government of India; or relying on other approved transfer mechanisms.
User Rights in Cross-Border Transfers
Children's Privacy
The Property Pointers Platform is not directed at children under the age of 18. We do not knowingly collect, process, or retain personal data of minors. If you are under 18, please do not use the Platform or provide any personal information.
If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such data. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at privacy@propertypointers.com and we will act promptly.
Third-Party Services & Integrations
The Platform integrates with third-party services whose use of your data is governed by their own privacy policies. These include:
| Integration | Privacy Notes |
|---|---|
| Google Maps | Property location display and area-level maps. Governed by Google's Privacy Policy. |
| Google Analytics | Website and app usage analytics. Data is anonymised and aggregated. Governed by Google's Privacy Policy. |
| Home Loan Partners | If you submit a home loan inquiry, your data is shared with the relevant lender under a data sharing agreement. You will be notified at the point of submission. |
| Social Login (Google/Facebook) | If you register via social login, limited profile data is shared with us from that platform per your social account's privacy settings. |
| Payment Gateways | Payment data is processed by our payment partners under PCI-DSS standards. We do not receive or store full card details. |
| Push Notifications | Delivered via Firebase Cloud Messaging (FCM) or Apple Push Notification Service (APNS). Governed by the respective providers' policies. |
Marketing Communications
14.1Promotional Emails & SMS
With your consent, we may send you promotional communications about new property listings matching your saved searches, platform feature updates, real estate market reports, and special offers from Property Pointers or its partners. You can opt out of promotional communications at any time by clicking "Unsubscribe" in any email or by updating your notification preferences in your account settings.
14.2Transactional Communications
We will continue to send you transactional messages (account confirmations, OTPs, payment receipts, listing approval/rejection notices, inquiry notifications) even if you opt out of promotional communications, as these are essential to providing the Services.
14.3NDNC / DND Registry
By registering on the Platform or submitting a property inquiry, you expressly consent to Property Pointers contacting you via calls, SMS, and WhatsApp in connection with the Services, even if your number is registered with the National Do Not Call (NDNC) or Do Not Disturb (DND) registry. This consent may be withdrawn by writing to privacy@propertypointers.com.
Automated Decision-Making & Profiling
Property Pointers uses automated systems for the following purposes:
- ▸Search & Recommendation: Algorithms rank property listings and generate personalised recommendations based on your search history, saved preferences, and location. These outputs are informational and do not produce legally significant effects on your rights.
- ▸Fraud Detection: Automated systems screen listings and account behaviour for indicators of fraud, such as duplicate listings, mismatched pricing, or unusual login patterns. Accounts flagged by automated systems are reviewed by a human moderator before action is taken.
- ▸Price Estimation: Our tools provide automated property value estimates based on comparable listings and market data. These are indicative only and not formal valuations.
We do not use fully automated decision-making that produces legal or similarly significant effects on individuals without human oversight. If you have concerns about any automated decision that has affected you, please contact privacy@propertypointers.com.
Data Protection Officer (DPO)
In accordance with applicable data protection law, Property Pointers has designated a Data Protection Officer (DPO) responsible for overseeing our data protection practices and serving as the primary point of contact for data subjects and regulatory authorities.
| Detail | Information |
|---|---|
| Role | Data Protection Officer (DPO) |
| Organisation | Property Pointers |
| privacy@propertypointers.com | |
| Postal Address | [DPO Address], Property Pointers, India |
| Response Time | Acknowledgement within 48 hours; substantive response within 30 days. |
| Regulatory Contact | Data Protection Board of India (once constituted under DPDP Act 2023). |
Grievance Redressal for Privacy Complaints
If you have any complaint, concern, or query regarding the processing of your personal data, you may contact our Grievance Officer through the channels below. All privacy-related grievances will be acknowledged within 24 hours and resolved within 15 working days.
| Channel | Contact |
|---|---|
| Grievance Officer Email | grievance@propertypointers.com |
| Data Rights Requests | privacy@propertypointers.com |
| General Support | support@propertypointers.com |
| Legal & Compliance | legal@propertypointers.com |
| Website | www.propertypointers.com |
If you are not satisfied with our response to your grievance, you may escalate your complaint to the Data Protection Board of India (once established under the DPDP Act 2023) or to any other competent authority under applicable law.
Escalation Path
Step 1: Contact privacy@propertypointers.com.
Step 2: If unresolved within 30 days, escalate to grievance@propertypointers.com.
Step 3: File a complaint with the Data Protection Board of India (DPBI) or the competent regulatory authority.
Changes to This Privacy Policy
Property Pointers reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. We will notify you of material changes through:
- ▸A prominent notice on the Platform homepage or login page.
- ▸An email notification to your registered email address (for significant changes).
- ▸An updated "Last Reviewed" date at the top of this document.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.
Governing Law & Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in New Delhi, India.
Definitions
| Term | Definition |
|---|---|
| Personal Data | Any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act 2023. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this case, Property Pointers. |
| Data Processor | A third party that processes personal data on behalf of the Data Controller under a data processing agreement. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion. |
| Consent | A free, specific, informed, unconditional, and unambiguous indication of the data subject's agreement to processing. |
| Data Principal | The individual to whom the personal data relates — i.e., you, the user. |
| DPDP Act | The Digital Personal Data Protection Act, 2023, enacted by the Parliament of India. |
| DPBI | Data Protection Board of India — the regulatory authority established under the DPDP Act 2023. |
| Sensitive Data | Categories of personal data requiring heightened protection, such as financial data, identity documents, and health information. |
| Anonymised Data | Data that has been irreversibly altered so that an individual can no longer be identified from it. |
Summary of Your Key Rights
Property Pointers — Privacy Policy | www.propertypointers.com | Effective April 2, 2026 | Governing Law: Republic of India