Privacy Policy

DealDirect is operated by Agrawal Business Network LLP, 129, Growmore Tower, Sector 2, Kharghar, Navi Mumbai 410210, Maharashtra (“DealDirect”, “we”, “us”). For the personal data described here, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023. DealDirect serves users in India only.

This notice explains what personal data we process when you use the dealdirect.in website or the DealDirect app, why, who receives it, how long we keep it, and the rights you have. It follows the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 and the rules under it where they still apply.

• We collect what we need to run accounts, listings and enquiries, and to keep the Platform safe.
• When you send an enquiry, the owner receives your name, email address and mobile number. That is how they reply.
• We do not sell your personal data, and we use no third-party advertising or analytics tools.
• You can see, correct and delete your data, withdraw consent, and complain to us or to the Data Protection Board of India.

We process the following personal data, each for the purpose shown next to it. We ask for your consent when you create an account and when you use features that need more data (such as location). Where you give us data voluntarily for a purpose, such as an enquiry, we use it for that purpose.

We do not ask for your PAN, Aadhaar or bank details to use the Platform. Do not include them in listings, photos or messages.

Section 7 of the DPDP Act allows some processing without consent. We rely on it only where it applies, for example to comply with a law or a court order, to respond to a medical emergency or a threat to someone’s safety, or to use data you gave us voluntarily for the purpose you gave it for.

We share personal data only as set out below. The service providers listed process it on our behalf, under their published terms for processing data for their customers, and only to provide their service to us.

Builder projects: your enquiry reaches the DealDirect team, and our team passes your name, phone number and email address to the builder of that project. We tell you this when you send the enquiry.

We may also disclose personal data to a government agency, court or regulator when the law requires it, and to a successor if DealDirect’s business is transferred, under the same protections. We do not sell personal data or share it for others’ advertising.

Our database is held in India (MongoDB Atlas, AWS Mumbai). Some of the providers above store or process data outside India: crash reports go to Sentry in the European Union, and providers such as Cloudinary, Meta and Google may process data in other countries under their own terms. Section 16 of the DPDP Act permits this, except to any country the Central Government restricts, and we will follow any such restriction.

We use only the cookies and device storage needed for the Platform to work and to remember your choices. We do not use advertising or tracking cookies.

Maps and property videos on the website come from Google Maps and YouTube, which set their own cookies under Google’s privacy policy. They load only after you allow them, on your first visit or with the “Show” button in place of a map or video. You can change this any time with Cookie settings at the bottom of every page. Signing in with Google and opening the rewards store also connect you to those services, because you chose to use them.

We keep personal data only as long as its purpose needs, or as long as the law requires, and then delete it.

Delete your account explains how to delete your account and exactly what is removed and what is kept.

Under the DPDP Act you have the right to:

• Access: a summary of the personal data we process about you and the processing we carry out, and the identities of those we have shared it with.
• Correction and erasure: have inaccurate or incomplete data corrected, completed or updated, and have data erased when it is no longer needed. You can edit your profile and listings, and delete your account, yourself in the app or on the website.
• Withdraw consent: at any time, as easily as you gave it (see the next section).
• Nominate: name another person to exercise your rights if you die or become unable to.
• Grievance redressal: complain to us, and then to the Data Protection Board of India.

To exercise any of these rights, including nomination, write to our Grievance Officer at grievance@dealdirect.in from the email address on your account, or include your registered mobile number. We may ask you to confirm your identity. We will respond within 90 days.

• Location: turn it off in your browser’s site settings or your phone’s app permissions. You can still choose a city by hand.
• Notifications: change email, SMS and WhatsApp preferences in your account settings, or turn off app notifications on your phone.
• Promotional messages (offers and new project updates by email, SMS or WhatsApp): we send them only if you tick the box for them when you sign up, or turn on “Offers and new project updates” under Notifications in your profile. Turn it off there at any time; every such message also explains how to stop them.
• Everything else: delete your account, or write to us.

Withdrawing consent does not affect processing that took place before. Some features, such as enquiries, cannot work without the data they need, so withdrawing consent for them may mean closing your account.

DealDirect is for adults only. You must be 18 or older to create an account, and you confirm this when you sign up. We do not allow accounts for anyone under 18 and do not knowingly process their personal data; if we learn that an account belongs to someone under 18, we will delete it.

We use reasonable security safeguards, including:

• encryption of data in transit (HTTPS);
• passwords stored only as one-way hashes, and sign-in sessions held in cookies that page scripts cannot read;
• sessions that expire, and a list of your signed-in devices that you can sign out of;
• limits on repeated sign-in and OTP attempts;
• access to personal data limited to the staff and providers who need it;
• error monitoring that masks screen text, form inputs and images.

If a personal data breach affects you, we will tell you without delay, in the way the DPDP Rules require, and report it to the Data Protection Board of India.

The DPDP Act also asks you not to impersonate anyone, not to suppress material information, to give only true information when you ask us to correct your data, and not to file false or frivolous complaints.

We will update this notice when our processing or the law changes, and show the date at the top. If a change is material, we will tell you in the app or by email before it takes effect, and ask for fresh consent where the law requires it.

For questions about this notice, to exercise your rights, or to complain, contact our Grievance Officer:

If you are not satisfied with our response, or we do not respond within the time allowed, you may complain to the Data Protection Board of India in the manner it prescribes.

This notice is published in English. On request to grievance@dealdirect.in, we will provide it in any language listed in the Eighth Schedule to the Constitution of India; if the versions differ, the English version prevails.