Last Updated: September 2024
At PropVista, your privacy matters deeply. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform and services. We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and all applicable data protection regulations in India. Please read this policy carefully before using PropVista.
Questions about your data?
Contact Privacy TeamCompliant with
DPDP Act 2023 & RERA
PropVista collects several categories of personal data to deliver and improve our real estate discovery and advisory services across the National Capital Region. Information you provide directly includes your full name, mobile number, email address, residential city, budget range, property preferences (type, locality, BHK configuration), and any messages you submit through our contact forms, enquiry buttons, or WhatsApp integration. If you create a registered account, we also collect a password (stored in encrypted form) and your saved-property and search history.
Information collected automatically when you browse our Platform includes your IP address, browser type and version, device type and operating system, pages visited, time spent on each page, referral URL, and search queries entered on the Platform. This data is collected through server logs, cookies, and third-party analytics tools. We use this information in aggregate form to understand how users interact with PropVista and to improve the Platform's functionality and content.
Information from third parties: We may receive personal information about you from third-party sources, such as real estate developers or agents who share lead data with us, or social media platforms if you choose to log in using a social sign-on feature. We may also receive publicly available information from property registries, including the Delhi Sub-Registrar office records, HRERA and UP-RERA project registration databases, and other government sources, which we use to enrich our listing information and to verify property details. All such data is handled in accordance with this Privacy Policy.
We use the personal information we collect to: (a) provide and operate the Platform and its core features, including property search, listing display, and account management; (b) connect you with RERA-registered partner agents and developers in response to your property enquiries; (c) send you property recommendations, price-drop alerts, new project launches, and other communications tailored to your stated preferences; and (d) facilitate site visits, call-back requests, and other advisory interactions between you and our relationship managers.
We also use your information to: improve and personalise your experience on the Platform by analysing your browsing patterns and search history; conduct market research and generate aggregated, anonymised insights about real estate trends in the NCR; detect, investigate, and prevent fraudulent activity, abuse, and security incidents; comply with legal obligations under Indian law including RERA, the IT Act, the DPDP Act, and orders from regulatory authorities; and to enforce our Terms & Conditions and other applicable policies.
Where we process your personal data for marketing or personalisation purposes, we do so on the basis of your consent, which you provide when you submit an enquiry or register an account. You have the right to withdraw this consent at any time. Where processing is necessary for compliance with a legal obligation or for our legitimate business interests (such as fraud prevention, network security, or internal analytics), we process your data on those grounds. We will always inform you of the legal basis for processing where required by law.
PropVista implements industry-standard technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include: SSL/TLS encryption for all data transmitted between your browser and our servers; AES-256 encryption for sensitive data stored at rest; access controls and role-based permissions that restrict employee access to personal data on a need-to-know basis; regular security audits and vulnerability assessments; and multi-factor authentication for administrative access to our systems.
All our servers and data storage infrastructure are hosted in ISO 27001-certified data centres located within India, in compliance with the localisation requirements of the DPDP Act, 2023 and applicable RBI guidelines. We conduct regular employee training on data privacy and security best practices, and our data protection practices are reviewed periodically by an independent information security team. Our third-party service providers are vetted for their security posture before engagement and are required to maintain equivalent security standards.
Despite our best efforts, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your data. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the Data Protection Board of India as required by the DPDP Act, 2023 without undue delay. If you suspect any unauthorised access to your account or a data security incident, please notify us immediately at security@propvista.in.
We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law. For registered users, we retain account information and associated data for the duration of your account's existence and for a period of three (3) years following account closure, to address any disputes or regulatory queries that may arise. Enquiry and lead data is retained for up to two (2) years from the date of the last interaction.
Transaction and financial records, if any, are retained for a minimum of eight (8) years in accordance with the requirements of the Income Tax Act, 1961, and applicable accounting standards. Server logs and access records are retained for a period of ninety (90) days for security and debugging purposes. Anonymised and aggregated analytics data, which cannot be used to identify you, may be retained indefinitely for business intelligence and platform improvement purposes.
Once the retention period expires, we will securely delete or anonymise your personal data in accordance with our internal data destruction policy. If you request deletion of your data before the expiry of the applicable retention period, we will fulfil your request to the extent permitted by law. In cases where we are required by law to retain certain data (such as for ongoing legal proceedings, regulatory investigations, or audit requirements), we will retain only the minimum data necessary and will isolate it from active processing systems. We will inform you if a legal hold prevents us from immediately fulfilling your deletion request.
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal: (a) Right to Access: the right to obtain a summary of your personal data processed by PropVista and the identities of other Data Fiduciaries and processors with whom your data has been shared; (b) Right to Correction and Erasure: the right to correct inaccurate or incomplete personal data and to request erasure of data that is no longer necessary for the purpose for which it was collected; (c) Right to Grievance Redressal: the right to have your grievances addressed in a timely and effective manner; and (d) Right to Nominate: the right to nominate another individual to exercise your rights in the event of your death or incapacity.
In addition to your rights under the DPDP Act, you have the right to withdraw consent for the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal. You also have the right to opt out of receiving marketing communications from PropVista at any time by clicking the "Unsubscribe" link in any email we send you, by sending an SMS "STOP" in response to any promotional SMS, or by contacting us at privacy@propvista.in. Please note that you may still receive transactional or service-related communications even after opting out of marketing.
If you are a registered user, you can access and update most of your personal information directly through your account dashboard. To exercise any of your rights under the DPDP Act, 2023, or to raise a complaint regarding our data processing practices, please contact our Grievance Officer (see Section 11 below). We will respond to all requests within the timelines prescribed by applicable law, and in any event within thirty (30) days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India, once constituted under the DPDP Act.
The PropVista Platform may contain links to third-party websites, including project microsites maintained by developers, RERA registration portals (hrera.org.in, up-rera.in, rera.delhi.gov.in), property news publications, home loan comparison tools, and social media platforms. This Privacy Policy applies solely to information collected by PropVista. We are not responsible for the privacy practices or the content of third-party websites, and we encourage you to review the privacy policies of any third-party website you visit.
PropVista integrates with several third-party services to enhance its functionality. These include: Google Maps for property location display and neighbourhood exploration; WhatsApp Business API for enquiry and communication features; Google Analytics and Meta Pixel for platform analytics and advertising; MSG91 or a similar provider for SMS notifications; Razorpay or PayU for processing service fee payments; and Intercom or a similar tool for in-platform chat support. Each of these providers has its own privacy policy governing the data they receive. By using the Platform, you acknowledge that your interactions with these integrated services are subject to those providers' terms and privacy policies.
When you embed your property enquiry through our WhatsApp integration, your conversation with our team is handled through the WhatsApp Business Platform and is subject to Meta's data processing terms. When you use Google Maps embedded in our property listing pages, Google may collect data pursuant to its own privacy policy. PropVista has no control over how these third-party services collect, use, or share the data they receive from your interactions with their tools on our Platform. We recommend reviewing the privacy policies of Google, Meta, and any other third-party service you interact with through PropVista.
The PropVista Platform is not directed at, and is not intended to be used by, children under the age of eighteen (18) years. We do not knowingly collect personal information from minors. In accordance with the Digital Personal Data Protection Act, 2023, PropVista will not process personal data of children without verifiable parental or guardian consent, and will not conduct behavioural tracking of children or provide targeted advertising based on children's data.
If you are a parent or guardian and you believe that your child under the age of 18 has provided personal information to PropVista without your consent, please contact us immediately at privacy@propvista.in. Upon verification of such a report, we will take prompt steps to delete the child's personal information from our systems and to prevent any further processing of such information. We may ask for information to verify your identity and your relationship to the child before processing your request.
If it comes to our attention that we have inadvertently collected personal data from a child under 18 without appropriate parental consent, we will delete such data from our records as expeditiously as possible. The Platform is designed to facilitate property transactions, which are legal acts requiring the capacity to contract under the Indian Contract Act, 1872. As such, the Platform is inherently unsuitable for use by minors, and we expect all users to confirm their eligibility when registering an account or submitting an enquiry.
PropVista reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or changes to the Platform's features. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and will notify registered users by email or through a prominent notice on the Platform at least fifteen (15) days before the changes take effect, where practically possible.
Your continued use of the Platform after the effective date of any changes to this Privacy Policy constitutes your acknowledgement of the updated policy. If the changes require fresh consent under the DPDP Act, 2023 — for example, if we wish to process your data for a new purpose that was not covered by your original consent — we will seek your explicit, affirmative consent before processing your data for that new purpose. You have the right to withdraw consent and request deletion of your data if you do not agree to the updated policy.
We encourage you to review this Privacy Policy periodically. The current version will always be available at propvista.in/privacy.php. Previous versions of this policy are available upon request by contacting our Grievance Officer. PropVista is committed to transparent data practices and will communicate any significant changes to our privacy approach clearly and in plain language, in addition to any formal legal updates required by regulatory authorities in India.
In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, PropVista has appointed a Grievance Officer to address any complaints, concerns, or queries related to the processing of your personal data or your privacy rights. The Grievance Officer will respond to all complaints within five (5) working days of receipt and endeavour to resolve them within thirty (30) days.
For general privacy queries, or to exercise your rights under the DPDP Act, 2023 (including requests to access, correct, or erase your personal data), please write to us at privacy@propvista.in or visit our Contact page to submit your request. If you are not satisfied with our resolution, you may escalate your complaint to the Data Protection Board of India, once established under the DPDP Act, 2023, or seek appropriate remedies through the Consumer Disputes Redressal Commission having jurisdiction at your place of residence.
Our privacy team is here to help you understand and exercise your rights under Indian data protection law.
Contact Privacy Team