Interim Privacy Policy for early production. GST registration is in process; GSTIN will be published when available. Obtain counsel review before treating this as final.
Interim notice
This Privacy Policy is temporary / interim legal copy for early production use on propdha.com. It has not been reviewed by counsel and is not legal advice. Counsel should review it before it is treated as a final DPDP / IT Act privacy programme.
Operator: Propdha Solutions P Ltd, registered office at 33, 7,SRIPADMAM APTS, BAGIRATHI AMMAL ST, Thygarayanagar, Chennai, 600017, Tamil Nadu, India. Contact / security: support@propdha.com. Grievance Officer: Siva Sivakumar. propdha’s GST registration is in process — GST details will be updated on the site and invoices when available.
1. Who we are
This Policy explains how Propdha Solutions P Ltd (propdha, we, us, our), intended as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), collects, uses, shares, and protects personal data through propdha.com and related application surfaces (the Platform).
It should be read with our Terms at /terms. On personal-data matters, this Policy prevails. We also aim to operate consistently with the Information Technology Act, 2000 and applicable rules, at a high level, pending counsel review.
2. Personal data we collect
Account and identity data: name; mobile number (primary login identity); email where provided; authentication secrets; profile fields you add.
Organisation and role data: firm or landlord organisation details you supply; role assignments; staff and team membership; portfolio or assignment scopes.
Property and unit data: communities / properties; blocks and units; occupancy status; ownership / co-ownership shares and validity periods.
Mandate and relationship data: management-mandate scopes, status, and related terms recorded between firms and landlords.
Tenancy and letting data: proposals and parties; rent, deposit, dates, and related terms; confirmations, disputes, handovers, notices, and deposit-related records where used; two-sided rent records (recording / confirmation — not rent collection on propdha rails).
Operational data: tasks and requests; unit events; messages between authorised parties; maintenance / contracts-hub records; documents and attachments.
Billing data for propdha’s fees: subscription plan, invoices, payment status, and payment-processor references. We do not operate a rent-settlement product that holds landlord/tenant rent as escrow on our rails.
Tax / GST identity (interim): where the product or invoices collect tax fields, we may store GST-related fields you supply. propdha’s own GST registration is in process; our GSTIN and related tax-invoice particulars will be updated on the site and invoices when available.
Usage, device, and log data: IP address, browser / device information, timestamps, routes accessed, error and security logs.
Support and grievance data: filings, verification codes, and correspondence. Cookies and similar technologies: see Cookies below.
3. How we collect data
Directly from you when you register, invite others, enter property or tenancy data, message, upload documents, pay a subscription, or contact support.
From a counterparty who invites you or shares a unit, tenancy, or mandate workflow that includes your details.
Automatically from your device and our systems (logs, cookies, security signals).
From payment processors handling propdha subscription payments.
4. Purposes of processing
We process personal data to: create and authenticate accounts; provide the Platform workflows (properties, units, ownership, mandates, tenancies, invites, rent recording, tasks, messaging, contracts hub, documents, subscriptions); show authorised counterparties information needed for shared workflows; bill and collect propdha’s own fees and maintain tax records (including updating GST particulars once registration completes); send service communications; provide support and handle grievances; secure the Platform and prevent abuse; improve reliability using aggregated or limited analytics; and comply with law.
Lawful bases under the DPDP Act and related law may include consent, performance of a contract or service you request, compliance with law, and other permitted grounds as counsel confirms for our final policy.
5. Sharing and processors
We do not sell personal data.
We may share data with: counterparties on the Platform who are authorised on the same organisation, mandate, unit, tenancy, task, thread, or document; service providers (hosting, email/SMS, storage, monitoring, analytics if enabled, payment processors for propdha fees); professional advisers; authorities where required or permitted by law; and a successor in a merger or sale of assets, subject to appropriate protections.
6. Cross-border transfers
We aim to host primary production data in locations suitable for an India-focused service. Some processors may process data in other countries. Where cross-border transfer occurs, we will do so in line with applicable Indian law and contractual safeguards, as refined with counsel.
7. Retention
We retain personal data only as long as needed for the purposes above, including while your account or organisation relationship is active, and thereafter for security, dispute resolution, audit, tax, and legal retention (including subscription and invoice records).
When no longer needed, we delete or anonymise data, subject to backup cycles and legal holds. Soft-closed property, unit, or relationship records may be retained in non-active form where historical attribution is required. Signed-in privacy tools at /account/privacy operate according to their own eligibility rules.
8. Your rights
Subject to the DPDP Act and other applicable law, you may have rights to access a summary of your personal data; correct inaccurate data; request erasure of data no longer needed (subject to legal retention); withdraw consent where processing is consent-based; nominate another person to exercise rights in case of death or incapacity where the law provides; and raise a grievance.
Contact support@propdha.com or use in-product privacy / support channels. We may verify identity and may decline requests where the law allows. If unsatisfied, you may pursue remedies available under Indian law, including any complaint pathway to the Data Protection Board of India once applicable.
9. Security
We implement reasonable technical and organisational measures appropriate to the sensitivity of the data — including access controls scoped by role and relationship, encryption in transit where appropriate, logging of administrative actions, and least-privilege operational access.
No method of transmission or storage is perfectly secure. Protect your credentials and devices. Report suspected security issues to support@propdha.com or hello@propdha.com marked “Security.”
10. Cookies and analytics
Marketing and application surfaces may use cookies or similar technologies that are necessary for session, security, and preference functions. We may use limited analytics to understand aggregate usage. You can control cookies through browser settings; blocking some cookies may affect login or site functions. We will update this section if we introduce additional trackers or a preference centre.
11. Children
The Platform is intended for adults (18+). We do not knowingly offer the service to children. If you believe a child has provided personal data without lawful guardian involvement where required, contact us and we will address it.
12. Changes
We may update this Policy. Material changes will be notified via the Platform and/or email where reasonably practicable. The Last updated date will change. Where consent is required for a new purpose, we will seek it as required.
13. Contact
Operator: Propdha Solutions P Ltd. Address: 33, 7,SRIPADMAM APTS, BAGIRATHI AMMAL ST, Thygarayanagar, Chennai, 600017, Tamil Nadu, India. Email: support@propdha.com or hello@propdha.com. Grievance Officer: Siva Sivakumar (also on /support when that channel is enabled). Signed-in privacy tools: /account/privacy. Terms: /terms.
Canonical markdown source for counsel review: docs/legal/privacy-policy.md in the product repository.