Privacy notice

Donfin · RGVS Professionals LLP · version v1.4 · 24 Oct 2026

Who we are

Donfin is the desktop-valuation service of RGVS Professionals LLP (LLPIN ABZ-9461), 51, Fifth Floor, Shalvik Complex, 9 Kalpana Society, Navrangpura, Ahmedabad 380 006. Under India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data you give us here or on our WhatsApp number.

What we collect

• About the property — type, address, locality, map location, areas, floor, year built and the purpose of the report.
• Documents you upload or send — sale deed, Index-2, share certificate, plans, photos. They can carry names, addresses and registration numbers.
• About you — your name, WhatsApp number, email address and report language, and the payment reference of your order. Card and bank details stay with the payment provider; we never see them.
• For a visa report — the name of the passport holder (the visa applicant) and the passport number, which the report must name. They are printed on the report itself (never on the verify page) and kept with it for the period below. We do not ask for a copy of the passport.
• When you agreed — the time and the version of this notice you agreed to (the tick box on the order form, or your YES on WhatsApp).

Why we use it

1. To prepare, sign and deliver your valuation report, and to keep you told of its progress.
2. To check the location and the documents — they are read by our document reader and by the valuer.
3. To take payment and keep the accounts and records the law and our professional rules require.
4. Once a report is issued, its property facts — type, locality, map point, area, rate and value, without your name or contact details — join the firm's rate data bank, which helps value other properties.

Who else handles it — only what each needs for its task

• DigitalOcean — our server, in Bengaluru, India, and the off-site backup copy, in Singapore (encrypted on our server before it leaves).
• Periskope and WhatsApp — the chat messages and the report sent to you on WhatsApp.
• Brevo — the report sent to you by email.
• Razorpay — online payment.
• Anthropic (Claude) — reads the documents you upload and understands WhatsApp messages written in your own words.
• OpenStreetMap services (and Google Maps when enabled) — turn an address or a map link into a map point; they receive the address text only.

Some of these providers process data outside India — for example document reading (Anthropic, USA) and email delivery (Brevo, EU), and the off-site backup copy is kept in Singapore. The report itself goes only to you; anyone you give it to can check it on our verify page, which shows the report's key facts with the owner's name masked.

How long we keep it

• A request that is never paid, or that we could not issue: erased 90 days after the last activity.
• An issued report and its working papers (documents, evidence, record of steps): kept 7 years from issue for professional and tax record-keeping, then erased.
• WhatsApp conversation logs not linked to an order: 90 days.
• Backups: nightly copies on our server for 30 days and in the off-site copy for 90 days.

Your rights

• Know what personal data we hold about you and who we shared it with.
• Correct, complete or update it.
• Erase it — we erase everything we are not required to keep; an issued report's record is kept for the 7-year period above and erased then.
• Withdraw your consent at any time, as easily as you gave it — type STOP on WhatsApp or write to us. We then stop; a report already issued stays on record and work already done is not undone.
• Nominate someone to use these rights for you if you die or become unable to.
• Grievance — write to our Grievance Officer below; we reply within 7 working days. If you are not satisfied, you may complain to the Data Protection Board of India.

If the property belongs to a minor, the parent or legal guardian gives the details and the consent.

How we protect it

Encrypted connections everywhere, the data on our own server in India, the valuer's pages behind a personal sign-in with a password and a one-time code from the phone, access limited to the valuation team, a nightly backup whose off-site copy is encrypted before it leaves the server, and a weekly test that the backup restores.

Grievance Officer and contact

Ask about your data

Changes to this notice are published here with a new version number.