Privacy & Data Practices

What data we hold

• Buyer enquiries — name, contact, stated requirement (BHK, location, budget). Captured when you fill out a form on propertybutler.in or our Meta ad funnel.
• Owner records — name, contact, building, and (where available) flat number / floor. Sourced from public listings or direct enquiry. Used only to send property valuation notes and listing offers.
• Conversation history — WhatsApp and email messages you exchange with our team (Kavya), stored for service continuity.

How we use it

• Match you with relevant properties or buyers
• Send periodic market updates and valuations
• Respond to your enquiries
• Comply with legal obligations under Indian law

Your rights (DPDP Act 2023)

• Withdraw consent — reply STOP on WhatsApp or click the unsubscribe link in any email. Effect is immediate.
• Access your data — write to privacy@propertybutler.in and we will share what we hold on you within 30 days.
• Correct or delete — same email above. Deletion processed within 30 days unless retention is legally required.

Grievance contact

Under the DPDP Act 2023, Property Butler has appointed a Grievance Officer for data-related concerns:

We respond to grievances within 30 days. If unresolved, you may approach the Data Protection Board of India once it is operational.

Sharing and retention

We do not sell your data. Service providers we use (Supabase for storage, Amazon SES for email, Meta Cloud API for WhatsApp, Anthropic for AI-assisted drafting) process your data on our behalf under contract. Retention period: active records as long as relevant; on deletion request, removed within 30 days subject to legal hold.

DigiLocker (MeriPehchaan) integration

Property Butler is an authorised DigiLocker partner (Issuer ID in.Propertybutler), registered with the National e-Governance Division, Ministry of Electronics and Information Technology, Government of India. When you choose to verify your identity via DigiLocker, the following applies:

• What we receive — only what you explicitly consent to on DigiLocker's consent screen. Typically: your name, date of birth, gender, masked Aadhaar number (last 4 digits only), and address as recorded by UIDAI. We do not receive your full Aadhaar number.
• What we do with it — verify that the identity matches the person enquiring with Property Butler, prevent impersonation, and satisfy KYC obligations for property transactions where applicable.
• How long we keep it — verified identity data is retained as long as you have an active relationship with Property Butler, plus 7 years after for audit purposes (consistent with Income Tax Act record-keeping). You can request earlier deletion at privacy@propertybutler.in subject to legal retention requirements.
• Revoking access — you can revoke Property Butler's DigiLocker access at any time from your DigiLocker account at digilocker.gov.in. Revocation is effective immediately for future API calls.
• Document integrity — every document we receive from DigiLocker is cryptographically signed by the Government of India and HMAC-verified by Property Butler before being used. We do not modify government-issued documents.
• No onward sharing — DigiLocker-sourced identity data is not shared with any third party except where compelled by law (e.g., a court order or tax authority notice).