Handle DPDP rights requests

Under the DPDP Act, anyone whose data you hold — a lead, a tenant, an owner — can ask to see it, correct it, have it erased, nominate someone to act for them, or raise a grievance. You must answer within 90 days.

Your public request link

Settings → Privacy & data → DPDP requests has your public request link (and a QR code). Put it on your website footer, forms and office notice board. People verify their phone or email with a code before a request is created — so you know the request comes from the person.

Requests from the public link and those you record yourself (a call, a letter) appear in the list with their 90-day clock.

Work a request

1. 1
   Open the request. Records covered lists the contacts matched to the verified phone or email — add or remove contacts before acting.
2. 2
   Act on it:

   • Access — PropZolo prepares a report of the person’s data (profile, enquiries, visits, deals, consents, message and call metadata). Review it; it is released to the person on their status page when you complete the request.
   • Correction — apply the change; old and new values are recorded in the audit log.
   • Erasure — see below.
3. 3
   Close it with the answer you are giving the person — it is shown to them on their status page.

Erasure

Contacts, leads, message contents, files, AI records and raw enquiry payloads are erased. Invoices, receipts and deals are kept with personal details removed (tax law needs them). The phone and email go on the do-not-contact list, so the person isn’t added again by the next portal lead — and you are told if they come back. Providers who hold copies (for example email or WhatsApp providers) are listed so you can ask them to delete theirs.