This Privacy Policy explains how Propfocus Technologies Pvt Ltd (“Propfocus”, “we”, “us”) collects, uses, shares and protects personal data when you visit www.propfocus.in, interact with us, or use the Propfocus platform. It also explains the rights available to you under applicable law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Questions about this policy or your data can be sent to privacy@propfocus.in.

1. The two roles we play

Propfocus handles personal data in two distinct capacities, and your rights differ by role:

As a Data Fiduciary. For visitors to our website and for the business contacts of our customers and prospects (for example, when you book a demo, request our case study, or contact us), we decide how and why the data is processed.
As a Data Processor. For information about property buyers and leads, the developer is the Data Fiduciary and Propfocus operates as the developer’s internal tool. The developer receives the enquiry directly from the buyer, brings that lead data to the platform, and we process it only on the developer’s documented instructions, as the medium through which project information and follow-ups reach the buyer.

If you are a property buyer who enquired about a project with a real estate developer, your details reached that developer through your own enquiry. The developer uses Propfocus as its internal tool to send you project information and manage follow-ups, and the developer controls your data and the consent for contacting you. Propfocus does not supply buyer details to developers or anyone else. Please direct requests about your data to the developer first; we support our customers in honouring such requests, and you can also write to us at privacy@propfocus.in.

2. Personal data we collect

Data you give us directly

Contact and identity details, such as your name, company and phone number, when you book a demo or request access to gated content.
One-time verification codes sent to and confirmed from your WhatsApp number, used only to verify that the number is yours.
Messages and questions you send us, including through forms and the assistant on our website.

Data collected automatically

Standard technical information when you use our website, such as device and browser type, pages viewed, and approximate location derived from your IP address.
Cookies or similar technologies, where used, for the website to function and to understand how it is used. You can control cookies through your browser settings.

Data we process for our customers

Lead and buyer contact details, communication history, and engagement information relating to a developer’s projects, supplied by the developer from enquiries the buyer made, received from the developer’s own CRM system where the developer has connected one, or generated through the operation of the service.
Records we write back to the developer’s connected CRM on their instructions, such as alerts and lead status updates relating to their own leads.
For the RNR Agent, buyer phone numbers supplied by the developer, which the agent uses to re-engage those buyers on the developer’s behalf.

Propfocus does not collect personal data directly from buyers for its own purposes, and does not itself capture consent from buyers. Consent for contacting a buyer is obtained and managed by the developer when the lead is generated, and our customer agreements make the developer responsible for ensuring that a lawful basis exists before their leads are contacted through the platform. We process buyer data in reliance on that confirmation.

3. How we use personal data

To provide, operate and maintain the Propfocus platform and website.
To schedule and deliver product demonstrations you request.
To verify phone numbers through one-time codes before granting access to gated content or services.
To respond to your questions and provide support.
To send service communications, including alerts and messages that are part of the product experience, over channels such as WhatsApp.
To secure our systems, prevent misuse, and comply with legal obligations.
To improve our website and services, using information in aggregated or de-identified form wherever possible.

We process personal data on the basis of your consent, the performance of a contract with you or your organisation, and other legitimate uses recognised by the DPDP Act. Where processing is based on consent, you may withdraw it at any time by writing to privacy@propfocus.in; withdrawal does not affect processing already carried out.

4. What we do not do

We do not sell personal data.
We do not share buyer or lead data between customers. Each developer’s data is theirs alone and is never pooled, resold, or used for the benefit of another developer.
We do not use buyer or lead data for our own advertising.

5. When we share data

We share personal data only with:

Service providers who help us run the platform, including Amazon Web Services (AWS) for cloud hosting and our communication delivery providers, under contracts that restrict their use of the data to providing services to us.
Our customers, in the form of alerts and records relating to their own leads only. We never provide one developer’s buyer data to another developer or to any other business.
Authorities, where disclosure is required by law, legal process, or to protect rights, safety and security.
A successor entity, if we are involved in a merger, acquisition or asset sale, in which case this policy will continue to apply to the transferred data.

6. Where data is stored, and for how long

Personal data processed by the Propfocus platform is hosted in India, on cloud infrastructure provided by Amazon Web Services (AWS). AWS operates that infrastructure as our processor under contract, and does not use the data for its own purposes. We retain personal data only for as long as needed for the purposes described in this policy, to comply with legal obligations, or as instructed by the customer on whose behalf we process it. When data is no longer required, it is deleted or de-identified.

7. How we protect data

Propfocus is certified to ISO 27001:2022, the international standard for information security management, and the platform runs on AWS, whose own infrastructure is independently certified against international security standards. We apply administrative, technical and organisational safeguards appropriate to the sensitivity of the data, including access controls, encryption in transit, and security review of how the platform is built and operated. No method of transmission or storage is completely secure, and we encourage you to contact us immediately at privacy@propfocus.in if you believe your data has been compromised.

8. Your rights

Subject to applicable law, and where we act as the Data Fiduciary, you have the right to:

Access a summary of the personal data we hold about you and how it is processed.
Request correction, completion or updating of your personal data.
Request erasure of personal data that is no longer necessary for the purpose it was collected for.
Withdraw consent where processing is based on consent.
Nominate another individual to exercise your rights in the event of death or incapacity.
Raise a grievance about how your data has been handled.

To exercise any of these rights, write to privacy@propfocus.in. We will respond within the timelines required by law. If you are not satisfied with our response, you may escalate to the Data Protection Board of India as provided under the DPDP Act.

9. Grievance redressal

Our Grievance Officer can be reached at privacy@propfocus.in. Please include enough detail for us to identify your data and understand your concern; we acknowledge grievances promptly and aim to resolve them within the statutory period.

10. Children

Our website and services are intended for business use and are not directed at children. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us personal data, contact us and we will delete it.

11. Third-party links and services

Our website and communications may contain links to third-party sites and services, including messaging and video platforms. Their privacy practices are governed by their own policies, and we encourage you to review them.

Where a customer connects their own CRM or business systems to Propfocus, data exchanged with those systems is also governed by the customer’s agreement with that provider. The customer’s CRM provider is the customer’s own service provider, not ours.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision, and material changes will be communicated through the website or directly where the law requires it.

13. Contact

Propfocus Technologies Pvt Ltd
Privacy: privacy@propfocus.in
Legal: legal@propfocus.in