The ProperticianBack to the site

In effect from 25 September 2026 · Last changed 5 October 2026

Privacy Policy

This says what personal data we collect, why we collect it, who else sees it, how long we keep it and what you can make us do with it. It is also the notice required under section 5 of the Digital Personal Data Protection Act, 2023, which is why it is specific about columns and retention periods rather than general about care and commitment.

1.Who this is about

The business trading as The Propertician operates this site and the services on it. Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

Questions about your personal data go to privacy@thepropertician.com, or through the form at Get in touch. Clause 9 says what we do when one arrives.

2.What we collect, and why

Only the first two rows apply to everybody. The rest depend on what you do here: nothing about a property is collected from somebody who only searches, and no document is collected from somebody who never lists one.

Phone number
To sign you in, because a one-time code is how an account here is proved, and to reach you about something you have listed or enquired about.
Email address
The alternative way to sign in, with a one-time code or a password, and where we send anything that needs to be read later rather than at once. (Notice sign-in-2026-10-05.)
Name
So that the other side of a conversation knows who they are speaking to, and so that a name on an ownership document can be matched against the person advertising the property.
IP address, browser and device
Recorded when a code is requested, when a sign-in succeeds or fails, and when a phone number is revealed. It is what limits one number to three codes in fifteen minutes, and what makes a stolen session detectable.
Identity documents
If you verify your identity: the details DigiLocker shares with your consent from your Aadhaar or your PAN, such as your name, date of birth and gender. We keep your name, as the name on your account, and a coded form of your DigiLocker account ID and, if you verify with your PAN, of your PAN number. The coded form is a keyed hash: it cannot be turned back into the ID or the number, but it can be matched, which is how one identity verifies only one account here. When an identity already verifying one account is presented for another, we note which two accounts were involved, and nothing about the identity, and a PAN is refused. From a DigiLocker check we never store your Aadhaar number, in full or in any coded form, and we do not keep your PAN number itself or the document. You choose Aadhaar or PAN each time, and we record your consent. DigiLocker asks for your details on its own pages: we never ask you to type your Aadhaar number or an Aadhaar OTP on ours. If you choose instead to upload a copy of an identity document — a PAN card, passport, voter ID, driving licence or Aadhaar card — we keep that file, and our team reads it to check who you are. Each time somebody on our team opens it, who opened it, when and from where is recorded. (Notice identity-2026-10-05.)
Company papers
If you register a company: a GSTIN or the company’s PAN, a CIN if it has one, and the papers you send to prove it exists. We ask the government’s GST register whether the GSTIN is real and active, and keep its answer for our team; our team may also ask the Income Tax register whether a PAN matches the name given. The PAN is stored encrypted, and only its last four characters are ever shown. Our team reads the papers, and each time somebody opens one, who opened it, when and from where is recorded. A company’s public page shows what the company puts on it — its description, logo and cover picture — with its live listings and projects. (Notice company-2026-10-05.)
Ownership documents
If you list a property: a paper that shows who holds it, such as a sale deed, a khata or e-Khata, a gift deed or a will, and any other papers you choose to add. Our team reads them, and so does a text-recognition service (Amazon Textract), so that the names on them can be compared with the name of the person advertising. Each time somebody on our team opens one, who opened it, when and from where is recorded. Buyers see only that a paper was checked, never the paper. (Notice papers-2026-10-05.)
Property and location
The map pin, address, pincode and city of a property you list. One of our people navigates to that pin for a site visit. While you fill them in, the pin and what you type in the address box are sent from your browser to Google Maps, to fill in the address and to suggest places nearby, such as schools, hospitals, metro stations, the airport, tech parks and malls, with their distances. Opening a map anywhere on this site also loads it from Google. (Notice maps-2026-10-05.)
Photographs
Pictures of a property, including ones taken by our own field agents. Those carry, when the phone records them, the place and time they were taken, which is what makes them evidence rather than decoration. (Notice photos-2026-10-05.)
Payment records
What you paid for and when. Card and UPI details are entered on the payment provider's own page and never reach us.
Saved homes, searches and alerts
The homes you save, the searches you run or save, and the alerts you switch on, so that we can show them to you again and send you a daily email of what is new. Every alert email lets you switch alerts off. (Notice alerts-2026-10-05.)
Messages to our support team
What you write to us in a support conversation, with any files and voice notes you send, so that our team can answer you. A file you uploaded but never sent is deleted. (Notice support-2026-10-05.)
Reviews
If you rate a company: your stars and what you wrote, shown on the company’s public page without your name, and any papers you attach to support it, which only our team sees. (Notice reviews-2026-10-05.)

If you use Get in touch, or “Tell me when it opens”. The form on our home page asks what you do — or, for construction or home services, which are not open yet, whether you want to hire that work or offer it — and your name and a phone number or an email address. We also record when it was sent, and the IP address and browser it came from. Only our own operations team can open it, and they use it to reply to you, or to tell you when that marketplace opens. If you gave an email address we may acknowledge it with one email; we send no text message. It is not attached to an account, so erasing an account does not remove it: write to privacy@thepropertician.com and we will delete it. Otherwise it stays until our team removes it; no fixed period applies. (Notice enquiry-2026-10-05.)

If you send a Bank enquiry. The Bank Enquiries form asks for your name, a phone number and what the loan is for; your email address, your profession and the loan amount you expect are optional. We do not ask what you earn, and the form has no place for it. We also record when it was sent, and the IP address and browser it came from. Your profession and what the loan is for are kept as you typed them. The loan amount is encrypted, and each time somebody on our team reads it, who read it, when and from where is recorded.

Only our own operations team can open a Bank enquiry. They see your number and email address in full, because the enquiry is used for one thing: so that somebody from that team can contact you about the loan you asked about. If you gave an email address we may acknowledge it with one email; we send no text message. We do not forward it, or anything you told us in it, to any bank, lender or lawyer. It is not attached to an account, so erasing an account does not remove it: write to privacy@thepropertician.com and we will delete it, together with every other enquiry sent from the same number or email address. Otherwise it stays until our team removes it; no fixed period applies. A record that it was removed, by whom and when, is kept; it holds nothing the enquiry said. (Notice bank-enquiry-2026-09-30.)

Which loan. The Bank Enquiries form also asks which kind of home loan you are planning, chosen from a list. It is kept with your enquiry and handled exactly as above. (Notice legal-enquiry-2026-09-30.)

Only our own operations team can open a Legal services enquiry. They see your number and email address in full, so that somebody from that team can contact you about the service you asked about. We do not forward it, or anything you told us in it, to any lawyer, law firm, bank or lender, and if that ever changes we will ask you first. It is not attached to an account, so erasing an account does not remove it: write to privacy@thepropertician.com and we will delete it, together with every other enquiry sent from the same number or email address. Otherwise it stays until our team removes it or you ask us to; no fixed period applies. A record that it was removed, by whom and when, is kept; it holds nothing the enquiry said. (Notice legal-enquiry-2026-10-05.)

If you list a profile with us as a lawyer. Your profile holds your name as verified through DigiLocker, the phone number you proved with a one-time code, the State of your Bar Council, your enrolment number and year, the papers you upload (your enrolment certificate, and any other paper our team asks for, such as a Bar Council ID card or a Certificate of Practice), a photo, the legal services you offer, the cities and places you serve, your languages, your years of practice, your specialisations, qualifications and the courts you appear in, the area and city of your office, and an introduction you write.

Nothing about you is shown to anybody until our team has checked your phone, your identity and your papers and approved your profile. Our team opens each paper through a link that works for five minutes, and each time somebody opens one, who opened it, when and from where is recorded. Once approved, your profile has a public page anybody can see: your photo, your name, your Bar Council and year of enrolment, the day we verified you, your years of practice, the legal services you offer, your cities and places, languages, specialisations, qualifications and courts, the area and city of your office, and your introduction. It never shows your enrolment number, phone number, email address, papers or any rating. Changes you make after approval are shown only once our team approves them. Our own staff cannot also list a profile as a lawyer.

If you book a consultation. Anyone signed in may book one. The booking holds who booked it, the lawyer, the legal service you chose, the listing it is about if you named one, your note, the times you suggested, the time agreed, what happened to it, and the payment. The lawyer sees the name on your account, the service, your note, your times and the listing’s title if you named one, and never what you paid.

Phone numbers. Neither side’s number is shared until a time is confirmed. Then, and only while the booking stays confirmed, the lawyer can see the phone number your account proved with a one-time code — or your verified email address if your account has no phone number — and you can see the phone number the lawyer proved the same way. Each time either is shown, who saw it, for which booking, when, and from which IP address and browser is recorded permanently. Apart from our own team’s enquiry desk (clause 4), this and the paid reveals in clause 5 are the only times anybody here is shown another person’s full number. We tell you about changes to a booking in the app, and by one email to a verified email address; we send no text message.

How long. A profile and a booking are kept while the account exists. When a lawyer’s account is erased, their enrolment details, photo, practice details and introduction are removed, the record of their papers and any change waiting for approval are deleted, and their public page address is cleared, so the page comes down for good. The uploaded files of the papers are not removed by that step: write to privacy@thepropertician.com and we will delete them. When the account of somebody who booked is erased, the notes they wrote to lawyers are removed. The history of each booking and the records of numbers being shown and papers being opened cannot be changed, by us or anybody, and are kept (clause 7); after erasure they no longer point at a named person. Payment records are kept for as long as tax law requires. (Notice lawyers-consultation-2026-10-05.)

We do not buy personal data from anybody, and we do not build advertising profiles. There is no advertising on this site.

3.The legal basis, which is your consent or your request

Almost everything here is processed because you asked for it — you cannot be signed in without a phone number, or have a property verified without the documents that prove you own it. Section 7(a) of the DPDP Act calls this the certain legitimate use of data voluntarily provided for a purpose you specified.

Identity verification through DigiLocker is separate and is asked for explicitly each time, because it reaches a government record. You can decline it, and upload an identity document for our team to check instead. (Notice identity-2026-10-05.)

You can withdraw consent at any time (clause 8). Withdrawing it stops the processing it covered — which, for the things that are the service itself, means the service stops.

4.How a phone number is actually stored

Phone numbers, email addresses and the identifier Google gives us are each stored twice and never in plain text.

One copy is a keyed hash, which cannot be read back but can be matched, and is what lets us find your account when you sign in. The other is encrypted with AES-256-GCM under a key held outside the database, and is decrypted only at the moment we need the value itself — to send you a code, for instance. Everywhere else in the system, including our own internal screens and logs, a number appears as its last four digits, with one exception: on our operations team’s enquiry desk, the number and email address you leave with an enquiry form, a Bank or Legal services enquiry included, are shown in full so that the team can contact you (clause 2).

One-time codes are not stored at all. What is kept is a keyed hash of the code, which can confirm the one you typed and cannot produce the one we sent.

5.Who else sees it

These are processors acting on our instructions, not parties we sell data to. We do not sell personal data.

Amazon Web Services
Hosting, the database, file storage, and the text recognition (Amazon Textract) that reads an uploaded ownership document. In the Mumbai region.
MSG91
Delivers the one-time codes we send to your phone, which is the only text message we send. Receives the number and the code.
Google
Sign in with Google, if you use it; our email; and the maps. When you place a property on the map in the listing form, or open a map on this site, your browser sends Google Maps what it needs to draw it: the pin, what you type in the address box, and the usual details any browser sends to a website. Google receives nothing else about you unless you sign in with it or we email you. (Notice processors-2026-10-05.)
Razorpay
Takes the payment. You enter card or UPI details on their page and we are told only that it succeeded.
Sandbox
Carries the DigiLocker check, and our questions to the government’s GST register about a GSTIN and to the Income Tax register about a PAN (clause 2). Receives what is being asked about, and returns the answer. (Notice processors-2026-10-05.)

We will also disclose personal data where a law, a court or a lawful order of a public authority requires it. Where we are permitted to tell you that this has happened, we will.

When you contact a seller. When you send an enquiry, or ask to see a seller’s number and choose to share your details, we share your name and the phone number you signed in with — or your email address, if your account has no phone number — with the seller of that property, so they can contact you about it. We show you exactly what will be shared before you confirm. The seller sees your first name and your message straight away, and your full name and number or email once they choose to unlock them. Sellers may pay The Propertician to unlock your details. You can see which sellers have your details, and stop sharing with any of them, under Account → Sellers you’ve contacted; stopping does not undo what a seller has already seen. A seller’s number is shown to a buyer only when the buyer asks to see it, and every one of those, and every unlock of a buyer’s details, is recorded permanently — who saw it, when, and from where. (Notice lead-share-2026-09-27.)

6.Where it is kept

In India. The database, the file storage and the servers are all in Amazon Web Services' Mumbai region, and personal data is not transferred out of India in the ordinary course of running this service.

Amazon Web Services and Google are global companies whose support and security functions may be reached from outside India, and Google may handle the map requests your browser sends it outside India. We do not transfer personal data to a country the Central Government has restricted under section 16 of the DPDP Act. (Notice processors-2026-10-05.)

7.How long, and what erasure can and cannot reach

Sign-in codes and the records of requesting them, including the IP address that asked, are deleted after 30 days by a job that runs nightly. This happens whether or not an account was ever created, which matters because somebody who abandons sign-up has no account for a deletion request to be made against.

Some things go sooner. Searches you ran but did not save are deleted after 90 days, and so is our record of each daily alert email we sent you. Everything else is kept while your account exists.

When you ask for erasure, you are signed out everywhere at once and your listings come off the site. We then wait seven days — so that a request made in error, or by somebody who has taken your phone, can be undone — and then:

  • delete the record that ties this account to a human being: your encrypted phone number and email address, their lookup hashes, the identifier Google gave us, and the coded PAN and DigiLocker ID from clause 2, and any MahaRERA certificate of competency you filed with us;
  • clear your name, including the name from your verified identity, and delete your pictures;
  • delete your saved homes, your searches, your alerts and our record of the alert emails, and clear your name and words from enquiries you sent to sellers;
  • take the PAN out of any company papers you sent us;
  • if you are a lawyer, remove your profile’s details, papers and public page address as clause 2 describes, and if you booked a lawyer, remove the notes you wrote to them.

An enquiry sent through one of our forms — Get in touch, a Bank enquiry or a Legal services enquiry — is not attached to an account, so none of that applies to it: it is kept until our team removes it or you ask us to, and no fixed period applies (clause 2 says how to ask).

Some records survive that, and we would rather say so than imply otherwise. Sign-in attempts, the records of a contact being revealed and of a number being shown in a consultation, the history of a consultation booking, the record of somebody on our team opening a paper, a field agent’s report from a site visit, the note that an identity was presented for a second account, the reviews you wrote, and the record of a decision one of our operators made are append-only in the database itself: a rule refuses any change to them, including by us. They are what makes this product’s claims checkable after the fact, and a record we could quietly rewrite would be worth nothing. After erasure they no longer point at a named person.

Also not removed by that step: the files of papers you uploaded (to verify your identity, a property, or your enrolment as a lawyer); a company’s GSTIN and the GST register’s answer about it, kept as the record of what our team decided; the record of the consents you gave; your conversations with our support team; and your listings, which stay off the site. If you want any of these removed as well, write to privacy@thepropertician.com and we will tell you what we can delete and what the law makes us keep. (Notice erasure-2026-10-05.)

Records we are required to keep by tax, accounting or anti-money-laundering law are kept for as long as that law says, and no longer.

8.What you can make us do

The DPDP Act gives you these rights and we will act on all of them.

See what we hold
A summary of your personal data, what it is processed for, and who it has been shared with (s.11).
Correct it
Have anything inaccurate corrected, anything incomplete completed, and anything out of date updated (s.12).
Erase it
From your account settings, or by asking us. Clause 7 says what erasure reaches and what it does not (s.12).
Withdraw consent
At any time, and as easily as it was given. Processing stops except where a law requires us to continue (s.6(4)–(6)).
Nominate somebody
Name a person to exercise these rights for you if you die or become unable to (s.14). Ask us and we will record it.
Complain
To us first (clause 9), and to the Data Protection Board of India if our answer does not satisfy you (s.13).

9.Complaints, and who answers them

Write to privacy@thepropertician.com. We will acknowledge within 48 hours and answer within 30 days, which is what the Consumer Protection (E-Commerce) Rules, 2020 require of a marketplace.

If you are not satisfied, you may complain to the Data Protection Board of India under section 13(3) of the DPDP Act.

10.Children

This service is for people aged 18 and over, and section 9 of the DPDP Act forbids us from tracking or advertising to a child in any case. We do not knowingly collect personal data from anybody under 18. If you believe we hold a child’s data, tell us at privacy@thepropertician.com and we will delete it.

11.Cookies, of which there are few

We use browser storage to keep you signed in and to remember small preferences, such as which tab you were last on. There are no advertising cookies and no third-party tracking pixels on this site. When you open a map, sign in with Google or pay, that company’s own page or map loads, and it may use cookies of its own. (Notice processors-2026-10-05.)

12.If a breach happens

Section 8(6) of the DPDP Act requires us to notify the Data Protection Board of India and every affected person of a personal data breach. We will, and we will say what happened rather than that an incident occurred.

13.Changes to this policy

When this changes we will change the date at the top, and a passage we add carries a dated notice marker, so you can tell which sentences are newer than the rest. If a change materially affects how your personal data is used, we will tell you directly rather than rely on your noticing the date.

This version is in effect from 25 September 2026, and was last changed on 5 October 2026. See also the Terms of Service.