Loading page
About this tool
Retention register for client KYC documents that flags what to keep, what to delete now and what should never have been collected.
The Real Estate Agent Privacy Kit turns the pile of client documents in a broker's files into a dated retention register. Each row is classified against two rules: the five-year record-keeping duty that applies to notified reporting entities under India's Prevention of Money-Laundering Act, and purpose limitation, which ends the basis for holding a document once the enquiry it supported has closed. Identity copies that should never be held in unmasked form, such as a full-number Aadhaar image or a document left sitting in a WhatsApp gallery, are flagged separately whatever the deal outcome.
Open Real Estate Agent Privacy Kit on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Each document gets a calculated expiry date, not a vague 'delete when done' instruction.
Shows which files a record-keeping rule actually requires and which are simply never cleared out.
Listing photo metadata, personal phone numbers and passing client details to other brokers.
Reporting entities under India's Prevention of Money-Laundering Act must preserve records of transactions and client identity for five years, so documents attached to a completed deal have a fixed keep-until date. Real estate agents above the notified turnover threshold fall inside that regime; documents from enquiries that never became transactions have no such duty and should be deleted once their purpose ends.
UIDAI's guidance is that unlicensed private entities should not collect or store unmasked Aadhaar copies, and that a masked Aadhaar or offline verification document should be used instead. If you already hold full-number copies, replace them with masked versions and destroy the originals, including chat and gallery copies.
Delete them once the selection is made. There is no record-keeping duty for an enquiry that produced no transaction, and holding salary slips or bank statements for rejected applicants is exactly the kind of stale personal data that causes complaints and breaches.
Yes — auto-download puts the file in your phone gallery, cloud photo backup and the chat archive at once, and none of those copies get deleted when you clean the KYC folder. Move the document into one encrypted folder per deal and remove the chat, gallery and backup copies. This is general guidance, not legal advice; confirm your obligations with a qualified professional.