Data protection (DPDP Act)
Last updated 8 November 2026
Draft. This page is being reviewed by our lawyers and may change before LoftRay launches. Questions in the meantime: connect@loftray.com.
India's Digital Personal Data Protection Act, 2023 applies to LoftRay in two ways. For data people send us through this website, we are the Data Fiduciary. For data builders keep in the LoftRay product, the builder is the Data Fiduciary and we process it on their behalf, with tools that help them meet their duties.
Data from this website
When you send our demo form, we decide why and how your data is used, so we are responsible for it. Our privacy policy says what we collect, why, how long we keep it, and how to ask us to access, correct or erase it.You can reach our grievance officer at grievance@loftray.com.
Data builders keep in LoftRay
A builder using LoftRay decides how its buyers', brokers', tenants' and staff's personal data is used. The builder is the Data Fiduciary and LoftRay acts as its Data Processor, under the customer agreement. We process that data only to provide the service the builder has asked for.
Tools in LoftRay for the builder's DPDP duties
- Consent notices and history: publish notices by purpose and language, record each person's consent, and let buyers see and withdraw consents in their portal.
- Rights requests: track requests to access or erase personal data from receipt to completion.
- Breach register: record personal-data breaches and the response to each.
- Retention and legal holds: retention rules that clear data when it is no longer needed, with holds where a law or dispute requires keeping it.
- Protection by design: personal fields such as phone numbers, PAN and Aadhaar are encrypted one by one, every customer's data is separated, and an audit log that no one can edit records who did what.
These tools support the builder's compliance; they do not replace the builder's own policies or legal advice. See Security for how the product protects data.
Timeline
The DPDP Rules, 2025 bring the Act's obligations into force in stages. We will update this page as each stage applies.