Privacy Policy
Effective date: 19 September 2026 | Last updated: 19 September 2026
1. Who we are and scope
This Privacy Policy explains how Peri Gold Developers Pvt Ltd, operating the PropITZ platform (“PropITZ”, “we”, “us”, “our”), collects, uses, shares, stores and protects personal data when you visit www.propitz.com, create an account, use a tool, submit a property or service request, upload documents, list or enquire about property, apply to or participate in the Recommended Vendor Panel, communicate with us, or use services offered through PropITZ.
This Policy is intended to comply with the Information Technology Act, 2000 and currently applicable Indian data-protection requirements. The Digital Personal Data Protection Act, 2023 is being brought into force in phases, and PropITZ will update its notices, consent flows and rights processes as additional provisions become operative.
2. Personal data we collect
Depending on how you use the Platform, we may collect identity and contact data such as name, email, mobile number, WhatsApp number, address, preferred language or contact channel and account identifiers.
We may collect account and authentication data such as login email or mobile number, password hash or authentication tokens, verification status and security events.
We may collect property and service data such as property location, survey number, extent, property type, ownership or transaction details, requirements, seller or buyer preferences, asking or offer information, service scope and case status.
We may collect property documents such as title or parent deeds, Encumbrance Certificates, Patta or related revenue records, FMB or survey material, approvals, tax receipts, agreements, identity and PAN documents, legal-heir or power-of-attorney documents and other records reasonably required for a requested service.
We may collect professional and vendor data such as qualifications, registrations or licence information, firm details, service categories, service areas, experience, profile information, photographs, availability, communications, service-performance information, customer feedback, complaint records, panel status, listing fee or subscription information and ranking or matching inputs.
We may collect transaction and payment data such as quotations, invoices, payment status, refunds, GST or tax information and transaction references. Complete card credentials, UPI PINs and banking authentication secrets are ordinarily handled by the relevant payment provider rather than PropITZ.
We may collect communications such as emails, WhatsApp messages, callback preferences, support messages, complaints and call notes or recordings where lawful and appropriately notified.
We may collect technical and usage data such as IP address, device and browser information, login and security events, cookies, page interactions, referral source and diagnostic logs.
We may collect city, locality or property location and, only where a feature requires it and you permit it, device-based location.
We may keep records of Terms and Privacy acceptance, communication preferences, marketing choices, consent withdrawal and related compliance records.
PropITZ does not ordinarily require biometric data, health information or similarly unrelated sensitive data for its property-services model. Do not upload unnecessary sensitive information. Where identity proof is genuinely required, use masked or limited identification where appropriate and lawful.
3. Where we get personal data
We obtain personal data directly from you when you register, submit a form, upload a file, list property, request a service, apply to the Vendor Panel or communicate with us.
We may receive data from a person authorised by you, such as a family member, employee, broker, advocate or representative; from sellers, buyers, promoters, professionals or service partners involved in a case; from lawfully accessible public or government records relevant to a service; automatically from devices, security logs, cookies and analytics tools; and from payment, identity-verification, communication, CRM or other vendors used to provide the service.
4. Why we use personal data
We use personal data to create and secure accounts; respond to enquiries and provide quotations; identify service scope and property or document requirements; coordinate independent professionals; carry out property and document verification workflows; manage SRO, registration and document processes; provide case updates; enable property listings, seller and buyer enquiries and marketplace communications; assess and administer professional or vendor-panel participation; match and rank professionals according to disclosed parameters; provide tools and resources; process payments, invoices, refunds and tax records; prevent fraud and maintain cybersecurity; handle complaints and legal claims; comply with legal or regulatory requests; improve the Platform using appropriately limited analytics; and send marketing only where permitted by law and your communication choices.
5. Consent and other lawful processing
Where applicable law requires consent, PropITZ will seek a clear affirmative choice for the specified purpose. Consent for an account or requested property service is separate from consent for unrelated marketing.
Some processing may be necessary to take steps at your request, perform a service you ordered, comply with law, prevent fraud or security incidents, respond to emergencies, establish or defend legal claims, or rely on another lawful basis recognised by applicable law.
As additional operative provisions of the Digital Personal Data Protection Act, 2023 take effect, PropITZ will apply the notice, consent, legitimate-use and rights requirements then in force.
6. Property documents and third-party personal data
Property files often contain personal data about people other than the person uploading them. If you upload documents containing data of a co-owner, seller, buyer, family member, witness, attorney, tenant or another person, you confirm that you are authorised to share the document for the requested property purpose.
PropITZ requests documents that are reasonably relevant to the requested service. Access to case material is limited to personnel and independent professionals who need the information for the relevant service or authorised operational purpose.
Property documents and identity documents are not used for unrelated marketing.
Where confidential material can be shared directly with an independent professional, PropITZ may facilitate direct sharing.
Users must avoid uploading unnecessary identity numbers, unrelated pages or data that is not needed for the requested service.
7. Recommended Vendor Panel and ranking data
For a professional or vendor applying to or participating in the Recommended Vendor Panel, PropITZ may process identity, business, qualification, registration or licence, service-area, experience, profile, fee, payment, availability, performance, customer-feedback, complaint and panel-status information.
PropITZ uses relevant professional or vendor data to assess eligibility, administer panel participation, present public profiles, respond to customer requests, match professionals to requirements, maintain quality standards, investigate complaints and determine organic ranking or prominence using the parameters disclosed in the Terms and on the Platform.
Listing or participation fee information is used for billing and panel administration. Listing fees are not used as an organic ranking factor.
Public professional profiles may display business or professional information reasonably necessary for customers to understand the provider, such as name, profession or category, service area, experience, qualifications or registrations where appropriate, profile photograph, service description and feedback or rating where the Platform provides it.
8. When we share personal data
We may share personal data only as reasonably necessary with independent professionals engaged or introduced for a requested service; the other transaction party or authorised representative when you ask us to facilitate contact; government offices or authorities where you instruct us to coordinate a lawful process; technology providers supporting hosting, database, authentication, CRM, email, analytics, messaging, maps, document storage, cybersecurity and support; payment gateways, banks, accountants and tax or compliance providers where paid services are enabled; insurers, auditors, professional advisers or prospective corporate transferees under appropriate confidentiality obligations; and courts, regulators, law-enforcement agencies, CERT-In or other authorities where disclosure is required or permitted by law.
If you ask PropITZ to introduce you to a property owner, buyer, seller, professional or vendor, the Platform may share the contact and requirement information reasonably necessary to make that introduction. Before or at the point of sharing, the Platform will identify the recipient or relevant recipient category where appropriate for the service.
We do not sell personal data to advertisers. Independent professionals and service providers are not permitted to use PropITZ case information for unrelated marketing unless they have their own lawful basis and, where required, your consent.
9. Independent professionals as separate data handlers
An advocate, surveyor, valuer, architect, accountant or other professional may independently determine how they process data necessary for their professional engagement and may have separate legal or professional confidentiality duties. Their own privacy notice or engagement terms may apply to that professional service.
PropITZ remains responsible for personal-data processing carried out by PropITZ itself.
10. Payments
Where online payments are enabled, payment providers may collect card, UPI, bank or authentication information under their own privacy and security terms.
PropITZ ordinarily receives transaction amount, status, reference and payer or invoice information needed for reconciliation, support, fraud prevention and legal or tax records rather than complete payment credentials.
11. Cookies, analytics and similar technologies
The Platform may use strictly necessary cookies for login, session security and essential functions; preference cookies to remember settings; analytics tools to understand use and improve services; and marketing or advertising technologies only if enabled and lawfully used.
If non-essential tracking is enabled, PropITZ will provide any consent or preference controls required by applicable law. Continued browsing will not be treated as blanket consent where affirmative consent is required.
12. WhatsApp, email, SMS and calls
If you contact PropITZ on WhatsApp or choose WhatsApp, callback, SMS or email as your preferred channel, communications are also processed through the relevant telecommunications or messaging provider under that provider’s terms.
PropITZ may use the selected channel for an active request. Promotional communications remain subject to applicable law and your communication choices.
13. Data storage and international processing
PropITZ may use cloud, communication, analytics and support providers that process data in India or other jurisdictions.
PropITZ will comply with applicable Indian restrictions or requirements concerning data processing and cross-border transfer as they apply from time to time, and will use contractual and security measures appropriate to the vendor and data involved.
14. How long we keep personal data
PropITZ keeps personal data only for as long as reasonably necessary for the stated purpose, service delivery, legal obligations, fraud and security, accounting and tax records, complaint handling and defence of legal claims. We apply different periods to different categories rather than treating all records as subject to one retention period.
Where a legal proceeding, complaint, investigation, audit, tax matter or regulatory hold is open, relevant records may be retained until the matter and any required preservation period are complete.
When retention ends, PropITZ will securely delete, de-identify or irreversibly anonymise the data unless further retention is required by law.
Indicative retention schedule
| Data / record category | Baseline retention | Notes |
|---|---|---|
| Enquiry / callback lead | Up to 24 months after the last meaningful interaction | Delete earlier where no continuing purpose exists; convert to case record if a service opens. |
| Account profile | While active + up to 3 years after closure | Shorten on valid deletion request unless legal, security or dispute retention is required. |
| Service case management records | Up to 5 years after case closure | Operational period for complaints and claim defence; extend only for an open dispute, legal hold or specific statutory duty. |
| Uploaded property / identity documents | Active case + ordinarily up to 12 months after closure | Retain longer only for an active service, user-requested Workspace storage, dispute/legal hold, or specific legal requirement. |
| Digital Property Workspace documents | While the Workspace/property record remains active or until user deletion | Subject to legal holds and records that must be preserved separately. |
| Vendor / professional panel records | During panel participation + up to 5 years after exit | Supports complaints, credential history and quality/compliance records; financial records follow statutory periods. |
| Invoices / accounting / tax records | For the applicable statutory period; corporate books may require at least 8 financial years | GST and income-tax periods differ and may extend where proceedings are open. |
| Marketing preference / opt-out | Until the preference changes; minimal suppression record as needed | Maintains the user’s opt-out and prevents accidental re-marketing. |
| Security / ICT logs | At least 180 days within India where CERT-In directions apply | May be longer for an active incident or investigation. |
| Abandoned uploads / incomplete drafts | Normally 30–90 days | Delete if not needed for recovery, security or fraud investigation. |
Data / record category: Enquiry / callback lead
- Baseline retention
- Up to 24 months after the last meaningful interaction
- Notes
- Delete earlier where no continuing purpose exists; convert to case record if a service opens.
Data / record category: Account profile
- Baseline retention
- While active + up to 3 years after closure
- Notes
- Shorten on valid deletion request unless legal, security or dispute retention is required.
Data / record category: Service case management records
- Baseline retention
- Up to 5 years after case closure
- Notes
- Operational period for complaints and claim defence; extend only for an open dispute, legal hold or specific statutory duty.
Data / record category: Uploaded property / identity documents
- Baseline retention
- Active case + ordinarily up to 12 months after closure
- Notes
- Retain longer only for an active service, user-requested Workspace storage, dispute/legal hold, or specific legal requirement.
Data / record category: Digital Property Workspace documents
- Baseline retention
- While the Workspace/property record remains active or until user deletion
- Notes
- Subject to legal holds and records that must be preserved separately.
Data / record category: Vendor / professional panel records
- Baseline retention
- During panel participation + up to 5 years after exit
- Notes
- Supports complaints, credential history and quality/compliance records; financial records follow statutory periods.
Data / record category: Invoices / accounting / tax records
- Baseline retention
- For the applicable statutory period; corporate books may require at least 8 financial years
- Notes
- GST and income-tax periods differ and may extend where proceedings are open.
Data / record category: Marketing preference / opt-out
- Baseline retention
- Until the preference changes; minimal suppression record as needed
- Notes
- Maintains the user’s opt-out and prevents accidental re-marketing.
Data / record category: Security / ICT logs
- Baseline retention
- At least 180 days within India where CERT-In directions apply
- Notes
- May be longer for an active incident or investigation.
Data / record category: Abandoned uploads / incomplete drafts
- Baseline retention
- Normally 30–90 days
- Notes
- Delete if not needed for recovery, security or fraud investigation.
15. Security practices
PropITZ maintains reasonable administrative, technical and organisational security practices designed to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.
Access to property and identity documents is restricted according to role and service need. PropITZ maintains authentication, access-control, logging, backup and incident-response measures appropriate to the relevant system and risk.
No internet or storage system can be guaranteed to be completely secure. Users must use strong credentials, secure devices and avoid sending unnecessary sensitive material.
16. Security incidents
PropITZ maintains a process for identifying, assessing and responding to information-security and personal-data incidents.
Where an incident triggers reporting or notification duties under CERT-In directions, the Information Technology Act framework, the Digital Personal Data Protection framework when applicable, or another law, PropITZ will follow the legally required process and timeframe. User notification will be provided where required by law or reasonably necessary to reduce material risk.
17. Your choices and rights
Subject to applicable law and the stage of commencement of the Digital Personal Data Protection Act, you may ask to access or obtain information about personal data held by PropITZ, correct or update inaccurate data, request erasure where the data is no longer required and no legal retention ground applies, withdraw consent for consent-based processing, stop promotional communications, close your account and raise a grievance.
Withdrawal of consent does not affect processing lawfully completed before withdrawal and may prevent PropITZ from continuing a service that requires the relevant data.
As additional DPDP rights become legally operative, PropITZ will update its processes to support the rights then in force.
18. Account deletion and privacy requests
Privacy and account requests may be submitted to enquire@propitz.com or through a privacy or account-deletion form when available.
PropITZ may verify your identity before providing access, correction or deletion to protect against unauthorised requests.
We will respond within the period required by applicable law and will explain if a lawful retention exception prevents immediate deletion.
19. Children
The Platform is intended for adults who can enter into property and service contracts. PropITZ does not knowingly offer account-based property services to persons under 18.
If PropITZ learns that a child’s personal data has been collected in circumstances that do not comply with applicable law, PropITZ will take appropriate steps to delete, restrict or otherwise regularise the processing as required.
20. Legal and regulatory disclosures
PropITZ may preserve or disclose information when reasonably necessary to comply with a court order, statutory notice, government or regulatory request, tax or accounting duty, RERA or consumer-law obligation, cybersecurity direction, investigation of fraud or impersonation, or to establish, exercise or defend legal claims.
PropITZ will limit disclosure to information reasonably relevant to the lawful request or purpose.
21. Third-party websites and services
Links to TNREGINET, TNRERA, government sites, Google Maps, WhatsApp, payment gateways or other third-party services are governed by those third parties’ privacy practices. PropITZ does not control their privacy or security practices.
22. Changes to this Policy
We may update this Policy for legal, operational or service changes. The “Last updated” date will be revised.
Where a change materially alters how previously collected personal data is used and applicable law requires additional notice or consent, PropITZ will provide it.
23. Privacy and grievance contacts
Peri Gold Developers Pvt Ltd / PropITZ
Registered office: Villa No 4, Sri Harsha, 30, Church Main Road, Perungudi, Chennai, Tamil Nadu 600096
Privacy contact & Grievances: enquire@propitz.com
General contact: enquire@propitz.com | WhatsApp: +91 89258 76765
Where applicable law provides a right to approach a Consumer Commission, Data Protection Board, regulator or other authority, nothing in this Policy restricts that right.
