Fundle.ai: Customer Engagement Platform with Data Privacy Compliance in India

Understanding DPDP 2023 and Its Impact on Customer Engagement Platform India

The Digital Personal Data Protection Act 2023 is not a general data hygiene law — it is a consent architecture mandate. Under Section 6, every data fiduciary (which includes any retail brand or mall operator collecting consumer data) must obtain free, specific, informed, and unambiguous consent before processing personal data. The consent notice must be in plain language, available in all 22 scheduled languages if the consumer requests it, and must itemise the specific purpose for which data is being collected. If a Select CITYWALK loyalty programme wants to use a shopper's purchase history for personalised push notifications, that is a distinct purpose from using it for partner brand cross-promotions — and each requires separate consent.

Purpose limitation is the second structural shift. Data collected for one purpose cannot be repurposed without fresh consent. This single clause invalidates the practice — near-universal in Indian retail CRM — of buying or renting third-party data lists, merging them with first-party loyalty data, and blasting campaigns across the combined pool. Brands like FabIndia and Apollo Pharmacy that have historically enriched their customer files with third-party demographic appends will need to either re-consent those records or quarantine them.

Data minimisation and storage limitation add further pressure. The DPDP Act requires that only data necessary for the stated purpose be collected, and that it be deleted once the purpose is fulfilled. For mall operators running long-tail loyalty programmes — where a customer's first transaction data might sit untouched in a database for seven years — this requires automated retention policies and deletion workflows that most legacy platforms simply do not have.

The Act also creates a new class of individual rights that retail brands must operationalise: the right to access one's data, the right to correction, and critically, the right to erasure — the so-called 'right to be forgotten.' A Cafe Coffee Day member who asks to be deleted from the loyalty database must be deleted, completely and verifiably, within the timeframes the rules will specify. Building this into a POS-integrated loyalty stack running on Wondersoft or a fragmented multi-brand mall CRM is a non-trivial engineering problem. It requires a purpose-built consent management layer that most Indian customer engagement software vendors have not yet shipped.

Risks of Non-Compliant Customer Engagement Software for Retail

The compliance risk for Indian retailers is not purely regulatory — it is commercial, operational, and reputational simultaneously. Start with the regulatory exposure. The DPDP Act creates a tiered penalty structure administered by the Data Protection Board of India, a quasi-judicial authority with powers to investigate, adjudicate, and impose fines without requiring a court process. At ₹250 crore maximum per significant breach, the risk is existential for mid-market retail chains. A single misconfigured WhatsApp broadcast campaign — of the kind routinely run by brands on platforms like MoEngage or WebEngage without proper consent tagging — could trigger an investigation that consumes management bandwidth for months before a rupee of penalty is assessed.

Beyond regulatory fines, the commercial cost of a data trust breach in Indian retail is increasingly quantifiable. The KPMG data cited above — 68% of Indian consumers would switch brands after a data misuse incident — maps directly to churn economics. For a specialty retailer like Tanishq, where a single customer's lifetime value can exceed ₹4-5 lakh across jewellery purchases and gold schemes, even a small percentage of loyalty member churn triggered by a privacy incident represents crores in forgone revenue. The math gets worse for mall operators: a Phoenix Marketcity with 15-20 anchor tenants sharing a single loyalty data pool faces multiplied exposure if that pool is breached or misused.

Operational risks are equally acute. Non-compliant platforms create technical debt that compounds. When regulators require deletion of non-consented records — as happened with GDPR enforcement in Europe, a preview of what Indian brands should expect — brands on legacy stacks face months of manual data remediation. Legacy customer engagement software built on monolithic databases cannot surgically delete a single user's record without risking referential integrity across the entire dataset. Indian brands that postpone architectural compliance are essentially deferring a very expensive engineering crisis.

Competitive risk rounds out the picture. As Indian consumers become more digitally sophisticated — driven by UPI-era financial literacy and growing awareness of digital rights — brands that demonstrably respect data will command a trust premium. Competitors who build compliant stacks now will be able to advertise their consent practices as a differentiator, particularly in categories like healthcare retail (Apollo Pharmacy), financial services adjacents, and premium lifestyle (FabIndia, Manyavar) where consumer trust is a direct purchase driver. The window for non-compliant operators to catch up without reputational damage is narrowing.

How Compliance Drives Consumer Trust and Loyalty in Indian Retail

The relationship between privacy compliance and commercial loyalty performance is not theoretical — it is measurable, and the direction of causality is clear. Brands that operationalise transparent data practices see higher opt-in rates, longer retention cycles, and better campaign response rates. The mechanism is straightforward: when a consumer understands exactly what data is being collected and why, and knows they can withdraw consent or request deletion at any time, they are significantly more likely to share richer data voluntarily. This is the consent paradox — the more control you give consumers over their data, the more data they willingly provide.

In the Indian mall context, this plays out dramatically at enrolment. When a shopper at a Lifestyle or Shoppers Stop counter is asked for their mobile number, the default assumption is that it will be used for promotional SMS spam. Brands that instead present a clear, specific consent notice — 'We will send you points balance updates and birthday offers; we will not share your number with third parties without your permission' — see opt-in rates 20-30 percentage points higher than the industry average of 35-40%, based on Fundle's deployment data across Indian mall operators.

Higher-quality consent also drives better campaign economics. A loyalty database where every record has explicit, purpose-specific consent attached is a fundamentally different marketing asset than a bulk list of phone numbers. Response rates on targeted campaigns — personalised vouchers for Tanishq's gold scheme members, tier-upgrade nudges for premium mall loyalty members — are 3-5× higher when sent to consented, engaged records versus non-consented bulk lists. Cost per acquisition drops, ROI per campaign rises, and the data flywheel accelerates.

The long-term compounding effect is even more significant. Brands that build trust early in the DPDP era will establish data-sharing norms with their customer base that become habitual. Consumers who trust a brand with their purchase preferences, wishlist data, and communication preferences become co-creators of personalisation — essentially volunteering the training data that makes AI-powered engagement genuinely useful. Brands that skip the consent architecture now will find themselves with large databases of legally suspect records and no path to the deep personalisation that AI-powered customer engagement software makes possible.

KPIs to Track for Privacy-Compliant Customer Engagement Platform Performance

Compliance without measurement is compliance in name only. Indian retail CMOs and loyalty programme managers need a parallel KPI framework that tracks privacy performance alongside traditional engagement metrics. The two are not in tension — properly instrumented, they tell a coherent story about programme health.

Consent Rate by Touchpoint is the foundational metric. Measure the percentage of new enrolments that provide explicit, purpose-specific consent at each collection point — POS, app onboarding, web form, in-store kiosk. Segment by channel, by store, and by campaign. A consent rate below 60% at any touchpoint is a red flag — it usually indicates the consent notice is poorly designed, not available in the local language, or buried in a flow that consumers are clicking through without reading. Benchmarks from compliant Indian deployments suggest well-designed consent flows achieve 75-85% opt-in rates for core marketing purposes.

Active Consent Coverage — the percentage of your total loyalty database with verified, current, purpose-specific consent — is the single most important data quality KPI in a post-DPDP world. This number should be tracked weekly and should trend upward. A programme launching fresh DPDP compliance may start at 30-40% active consent coverage; a mature, well-managed programme should reach 80%+ within 12 months of remediation.

Consent Withdrawal Rate is the early-warning signal for trust erosion. If consumers are withdrawing consent at rates above 2-3% per month, something in your communication cadence, personalisation quality, or data handling is generating friction. Correlate withdrawal spikes with specific campaigns to identify the cause. Conversely, a low and stable withdrawal rate — under 1% monthly — is a strong indicator of programme health and consumer trust.

Time-to-Fulfilment for Rights Requests measures operational compliance. Track the average and 95th percentile time to respond to access, correction, and erasure requests. Regulatory timelines under DPDP rules are expected to be tight — likely 30-72 hours for acknowledgement. Brands that cannot meet these SLAs consistently face both regulatory exposure and the kind of consumer frustration that generates social media amplification. Integrate rights request fulfilment directly into your engagement platform's operational dashboard, not as a standalone compliance task.

How Fundle solves this

Fundle was architected from day one as a customer engagement platform with data privacy compliance at its core — not bolted on after the fact, but embedded in every data flow, every consent capture, and every campaign execution. The Fundle AI Platform operates on a consent-linked data model where no consumer record can be used in a campaign segment, an AI model training run, or a partner data share unless a verified, current, purpose-specific consent record exists and is attached to that consumer's profile in real time. This is not a policy document — it is enforced at the database and API layer.

Fundle Loyalty and Fundle Mall Loyalty deployments include the ConsentFirst CMP as a standard module — not an optional add-on. ConsentFirst supports all 22 scheduled Indian languages, presents purpose-specific notices at every enrolment touchpoint (app, web, POS, kiosk, WhatsApp), and stores every consent receipt with full audit metadata. Fundle processes consent from millions of Indian consumers through its DPDP-compliant ConsentFirst CMP daily — at a scale that gives the platform unmatched visibility into what consent flows actually perform in Indian retail conditions versus what looks good in a compliance document.

Fundle Brand Loyalty extends the same consent architecture to enterprise retail brands operating outside mall environments — think national pharmacy chains, specialty food and beverage brands, and fashion retailers running their own loyalty programmes. The Fundle AI Agents layer automates the operationalisation of consumer rights: when a member submits an erasure request via the self-service portal, Fundle Agentic AI orchestrates the deletion workflow across all integrated systems — CRM, analytics, partner integrations, push notification queues — without human intervention, generating a compliance receipt that can be submitted to the Data Protection Board of India if required.

Fundle AI Workflow handles the complexity of multi-brand mall environments where a single consumer may be a member of multiple tenant loyalty programmes sharing a common data infrastructure. The workflow engine enforces purpose-specific consent gates at every data handoff between the mall operator and individual brands, ensuring that a shopper who consented to receive offers from a specific anchor tenant cannot have their data accessed by a co-tenanted brand without separate consent. This granularity is what separates a purpose-built DPDP compliance architecture from legacy platforms attempting retrofit. Vineet Narang's founding vision — that AI-powered loyalty must be built on a foundation of genuine consumer trust, not data extraction — is the reason Fundle's compliance layer is a product advantage, not a cost centre.