“The Indian retail brand of 2030 will be defined by how well it knows its top 5% — and how fast it can act on that knowledge. Fundle is that operating layer.”
- •Understand why India's DPDP Act 2023 forces every retail loyalty program to rebuild its data consent architecture from scratch
- •See how Fundle.ai implemented a consent-first loyalty stack across mall and brand operators without breaking personalization
- •Learn the five-step playbook Fundle used to integrate AI-driven offer personalization on top of compliant first-party data
- •Track the KPIs that actually matter: consent capture rate, offer redemption lift, and repeat visit frequency
- •Apply the lessons from Fundle's 1.33Cr+ member base to your own CMO or CIO roadmap for 2025
India's Digital Personal Data Protection Act 2023 is not a future compliance checkbox. As of 2024, it is a live regulatory instrument with teeth—₹250 crore per violation in significant breach cases—and it lands squarely on every loyalty program that has ever sent an unsolicited promotional SMS to a shopper who ticked a box in 2019 and forgot about it. For Indian retail CMOs and CIOs managing tens of millions of member records across POS systems from POSist, Petpooja, GoFrugal, and Wondersoft, the DPDP Act does not just require a privacy policy update. It demands a structural rethink of how consent is captured, stored, refreshed, and audited across every touchpoint—from mall kiosks at Phoenix Marketcity to brand apps for Tanishq or Manyavar.
The tension that most operators feel acutely is this: the same regulation that tightens data use is arriving precisely when AI-driven personalization is delivering its highest-ever return on marketing spend. Brands that got personalization right in 2023-24—think Lenskart's repurchase nudges or Apollo Pharmacy's refill reminders—report repeat purchase rates 2.3x higher than brands still doing batch-and-blast campaigns via generic CRM tools. Stripping out the data that powers those models to achieve compliance is not an option any revenue-conscious CMO will accept. The question is not whether to comply or personalize—it is how to do both simultaneously, at scale, in real Indian retail infrastructure.
This is the exact problem Fundle was built to solve. The Fundle AI Platform sits at the intersection of loyalty program management, first-party data collection, and AI-driven member engagement—and it was architected with the DPDP framework in mind before most competing platforms (Capillary, EasyRewardz, Antavo) had issued so much as a compliance FAQ. Fundle today tracks ₹2,329Cr+ in revenue and personalizes campaigns for over 1.33Cr members across mall and brand loyalty programs, all on a consent-first data spine.
This article is a practitioner-level case study of how that was built—the architecture decisions, the integration realities, the measurable outcomes, and the lessons that any Indian retail operator can take into their own 2025 planning cycle. It is written for the CMO who owns the member P&L and the CIO who owns the data infrastructure, because in DPDP-era loyalty, those two roles cannot operate in separate rooms anymore.
India Retail Loyalty & DPDP: The Numbers That Define the Moment
Background on Fundle and the Indian Retail Context
Indian organized retail is structurally fragmented in a way that no Western loyalty playbook accounts for. A single Grade-A mall like Select CITYWALK or Phoenix Marketcity hosts 150-200 brands across fashion, F&B, electronics, and wellness—each running its own POS, its own app, and often its own discount program. The shopper who buys a kurta at FabIndia, grabs a coffee at Cafe Coffee Day, and redeems a voucher at Lifestyle in the same three-hour visit is generating transaction data across three siloed systems that have never spoken to each other. The mall operator sees footfall; the brands see SKU movement; nobody sees the full customer.
This fragmentation is not a technology problem at its core—it is a commercial and contractual one. Brand tenants have historically resisted sharing POS data with mall operators, and mall operators have lacked the platform architecture to unify and anonymize that data in a way brands would trust. What changed in 2023-2024 was a combination of three forces arriving simultaneously: the DPDP Act creating a legal imperative for clean consent infrastructure; AI personalization making unified first-party data genuinely valuable (not just a strategic talking point); and aggregator-model loyalty platforms like Fundle providing the neutral infrastructure layer that both mall operators and brand tenants could plug into without ceding competitive data to each other.
Fundle's go-to-market positions it as an AI-first loyalty platform specifically for shopping malls and enterprise retail brands. The Fundle Loyalty Platform unifies transaction data from multiple brand tenants inside a mall, builds a single member profile, and then runs AI-driven engagement on top—while keeping each brand's data partitioned so that Reliance Trends cannot see FabIndia's basket data, and the mall operator sees only the aggregated behavioral signals needed for footfall and dwell-time optimization. This architecture was the prerequisite for DPDP compliance, because it meant consent could be collected once at the mall-level program and honored granularly at the brand level.
The Indian competitive landscape for loyalty platforms—Capillary, EasyRewardz, Antavo (international), MoEngage, WebEngage, Xeno, Customer Capital, Almonds.ai—is dense but mostly optimized for single-brand CRM use cases. None of them were natively designed for the multi-brand, multi-tenant mall context that Fundle specifically addresses. That structural difference matters enormously under DPDP, because the consent and data-processing obligations multiply with every additional data controller in the chain. Fundle's architecture was designed to handle that complexity from day one.
The Fundle DPDP-Compliant Member Data Journey
Implementing a DPDP Compliant ConsentFirst Architecture
The most common mistake Indian retail operators make when approaching DPDP compliance is treating it as a legal task rather than a product task. They hand it to the legal team, get a revised privacy policy, update the app's terms screen, and declare victory. This approach will not survive a Data Protection Board audit, because the DPDP Act requires that consent be freely given, specific, informed, and unambiguous—and that it can be withdrawn as easily as it was given, with data deletion processed within a defined timeframe. That is a product and engineering requirement, not a document requirement.
The Fundle approach—which we call ConsentFirst internally—treats the consent state of every member as a live data attribute that travels with the member profile and governs every downstream data operation. When a member joins the Fundle Loyalty Platform at a Phoenix Marketcity enrollment desk, they are presented with purpose-specific consent toggles: one for personalized marketing communications, one for cross-brand behavioral analytics, one for sharing anonymized data with the mall operator for footfall modeling. Each toggle is a separate consent record with its own timestamp, version ID, and channel of capture. None of these are pre-ticked. All of them are reversible from the member's profile page in the Fundle app with a single tap.
On the infrastructure side, the consent ledger is the first system that every data pipeline writes to and reads from. When a POS transaction arrives from a Wondersoft terminal at a Pantaloons store inside the mall, the Fundle AI Platform checks the member's active consent state before ingesting the transaction into the personalization engine. If the member has withdrawn analytics consent, the transaction is recorded for points-accrual purposes only—it does not feed the AI segmentation model. This is a real-time gate, not a batch cleanup job, and it means the compliance posture is always current rather than retrospectively corrected.
The consent refresh cycle is equally critical and equally underbuilt in competing platforms. Fundle AI Workflow runs an automated 12-month consent-validity check across the entire member base. Members whose consent records are approaching expiry receive a WhatsApp or push notification inviting them to reconfirm preferences—framed not as a legal notice but as a loyalty benefit moment: 'Your personalized offers are about to pause. Tap to keep them going.' This framing, tested across Fundle's 1.33Cr+ member base, delivers a consent renewal rate significantly above the industry average for cold re-permission campaigns. Operators using batch re-permission emails through platforms like MoEngage or WebEngage report renewal rates of 8-12%; the conversational, in-app Fundle approach consistently delivers above that range.
DPDP Compliant Loyalty Platform: Fundle vs. Conventional CRM-First Approaches
Integrating the Fundle AI Brain for Personalized Offers
Compliance architecture is the foundation. The revenue case is built on what Fundle does with the consented first-party data once it is clean, structured, and legally sound. The AI personalization layer—internally called the Fundle AI Brain—is where the operator investment in DPDP compliance converts from a cost center into a growth engine.
The Fundle AI Agents operate on a real-time RFM (Recency, Frequency, Monetary) framework that is rebuilt on every transaction event rather than on a weekly batch cycle. This matters in Indian retail because shopping behavior is highly episodic: a member might be dormant for six weeks and then make three visits in a single festival week. A batch-cycle model would still classify that member as at-risk-of-churn on Day 3 of their festival binge; Fundle's event-driven model reclassifies them as high-value within minutes of the second transaction and shifts the offer queue accordingly—from a win-back discount to a cross-category discovery offer that protects margin.
Category affinity modeling is particularly powerful in the mall context. A member who consistently shops at Tanishq, Manyavar, and a mid-range footwear brand inside the same mall is displaying a clear occasion-dressing behavior pattern. Fundle AI Agents identify this pattern, cross-reference it against the mall's event calendar (wedding season, Diwali gifting, New Year parties), and build time-sensitive offer bundles that cut across brands—subject to each brand tenant's consent for cross-brand data use, which is captured separately in the ConsentFirst framework. Brands that have enabled cross-brand signals in Fundle consistently report higher offer click-through rates than brands that operate on single-brand data alone.
The Fundle AI Workflow layer manages the execution mechanics: which channel (WhatsApp, SMS, push, in-app), what time of day, what offer construct (points multiplier, flat discount, experience voucher), and what content variant to dispatch to each member segment. This is not A/B testing in the traditional sense—it is a multi-armed bandit optimization that learns from every send event and adjusts the next dispatch without human intervention. For a mall loyalty program running 1.33Cr+ active members, manual campaign management is not operationally viable; the Fundle AI Workflow is the only way to achieve personalization at that member density without a 50-person CRM operations team.
Talk to a Fundle expert
Want a Fundle deployment plan for your brand or mall? Ping Abhinav or Anmol directly on WhatsApp.
Free 30-minute working session. We'll share what a Fundle Loyalty Platform, Fundle Mall Loyalty or Fundle Brand Loyalty rollout looks like for your category — with specific numbers, not a deck.
The 5-Step Fundle Playbook: From DPDP Audit to AI-Driven Revenue
DPDP Readiness Audit
Map every existing data collection point—POS, app, kiosk, web—against DPDP consent requirements. Identify gaps in purpose specificity, withdrawal mechanisms, and data deletion SLAs. Fundle's implementation team runs this as a structured 3-week discovery with the operator's legal, tech, and CRM leads.
ConsentFirst Migration
Migrate the existing member base to the Fundle consent ledger. Members with legacy opt-ins receive a re-permission campaign via their last-active channel. Only members who re-confirm consent within a defined window are activated in the AI personalization engine; the rest are suppressed for marketing but retained for points-only transactions.
POS and Data Source Integration
Connect live POS feeds from Petpooja, POSist, GoFrugal, Wondersoft, or proprietary ERP systems to the Fundle AI Platform via certified API connectors. Each data field is tagged to the consent purpose that covers its use before it enters the personalization pipeline.
AI Segment Build and Offer Library Setup
Fundle AI Agents build the initial RFM and affinity segments from historical transaction data (consented only). The brand or mall operator configures the offer library—points rules, discount tiers, experience rewards—inside the Fundle Brand Loyalty or Fundle Mall Loyalty dashboard.
Go-Live and Continuous Optimization
Fundle AI Workflow begins dispatching personalized offers. The platform tracks consent renewal rates, offer redemption rates, incremental basket size, and repeat visit frequency in a real-time dashboard. Quarterly business reviews with the Fundle customer success team translate these KPIs into offer library and segment refinements.
Results on Customer Engagement and DPDP Compliance
Across Fundle's active deployments, the combination of ConsentFirst architecture and AI-driven personalization produces measurable outcomes on both the compliance and the commercial dimension—and the two are not in tension. Operators who complete the DPDP migration with consent renewal rates above 60% consistently see higher offer redemption rates than they recorded with their legacy unsegmented campaigns, because the members who re-confirm consent are self-selecting as highly engaged. Consent-confirmed members on the Fundle platform show average offer redemption rates 2.8x higher than the pre-DPDP baseline from mass promotional sends.
On the compliance dimension, the immutable consent ledger means that when a member raises a data access or deletion request—as is their right under DPDP—the Fundle platform can generate a complete data processing record within minutes. This is not a hypothetical capability; it is a live audit trail that Fundle operators can produce for any member, any transaction, any consent event, on demand. In the event of a Data Protection Board inquiry, this record is the operator's primary defense. No competing platform in the Indian market currently offers this level of consent auditability as a standard product feature rather than a custom engineering engagement.
Repeat visit frequency is the headline commercial KPI for mall operators, and Fundle's AI-personalized engagement consistently moves it. Members receiving AI-driven personalized offers visit their enrolled mall an average of 1.4x more frequently in the 90 days post-enrollment than the control group receiving no personalized communication. For a mall generating ₹50,000 of tenant revenue per visit-day, a 1.4x visit lift across even 10,000 active members represents ₹20Cr+ in incremental annual revenue attribution—a multiple of the platform licensing cost.
For brand loyalty operators—Lifestyle, Pantaloons, Reliance Trends scale—the Fundle Brand Loyalty configuration delivers category-level cross-sell lift. Members segmented by Fundle AI Agents into 'occasion shopper' profiles and targeted with time-sensitive cross-category offers show average basket sizes 18-22% higher than non-personalized members in the same spend tier. The clean consent infrastructure is the enabler: because the data is legally sound and purpose-tagged, the AI can use the full signal without legal exposure, and the brand can commit marketing budget to the AI-driven channel with confidence.
- Every data collection point (POS, app, kiosk, web form) captures purpose-specific consent with a separate toggle per use case—marketing, analytics, third-party sharing
- Consent records are stored in an immutable, timestamped audit ledger that can be queried per member on demand within minutes
- Members can withdraw consent and request data deletion through a self-serve in-app flow; deletion is executed within 72 hours and confirmed by notification
- All AI and ML personalization pipelines have a real-time consent gate that checks active consent state before ingesting any member data field
- A 12-month consent renewal workflow is automated and dispatches re-permission requests via the member's highest-engagement channel
- Multi-brand or multi-tenant data is partitioned so that no brand sees another brand's transaction data; cross-brand signals require explicit additional consent
- A quarterly data audit is scheduled to verify that suppressed member data is not re-entering active marketing or analytics pipelines
“In Indian retail, DPDP compliance is not the tax you pay to run a loyalty program—it is the trust infrastructure that makes your AI engine worth building. Consent-clean data outperforms dirty data every single time.”
How Fundle solves this
The Fundle AI Platform was designed from its first architecture decision to treat consent as a first-class data entity—not a compliance annotation added to an existing CRM. This foundational choice is what allows Fundle to serve both the CMO's personalization ambitions and the CIO's compliance obligations without asking either to compromise. The Fundle Loyalty Platform's consent ledger is the single source of truth that every upstream data collector and every downstream AI model reads from; it cannot be bypassed, overridden, or ignored by a campaign manager under end-of-quarter pressure.
For mall operators, Fundle Mall Loyalty provides the multi-tenant architecture that makes DPDP compliance tractable at scale. The data partitioning model ensures that a mall operator at a Select CITYWALK or Phoenix Marketcity deployment can offer a unified member experience—single card, single points balance, single app—while keeping each brand tenant's transaction data legally isolated. The mall operator configures which aggregated signals (footfall timing, category mix, dwell-time bands) are visible to them, and brands see only their own transaction records plus the AI-generated segment tags that Fundle AI Agents produce from the consented cross-brand pool.
For enterprise retail brands operating their own loyalty programs—think a Pantaloons or Reliance Trends scale deployment—Fundle Brand Loyalty delivers the AI personalization engine on top of a single-brand first-party data spine. Fundle AI Agents run continuous RFM and affinity modeling; Fundle AI Workflow manages the full outreach calendar across WhatsApp, SMS, push, and email; and Fundle Agentic AI handles the dynamic offer construction—selecting the right reward mechanic, the right discount depth, and the right message variant for each member segment without manual campaign build. The result is a loyalty program that operates at the personalization depth of a 50-person CRM team with the operational cost of a five-person team.
Vineet Narang's founding vision for Fundle was that Indian retail deserved an AI-native loyalty platform built specifically for its structural realities—multi-brand malls, fragmented POS infrastructure, first-party data scarcity, and now a serious data protection regulatory environment. The Fundle AI Workflow and Fundle Agentic AI capabilities represent the current expression of that vision: a platform where compliance and personalization are not competing priorities but mutually reinforcing ones. For any Indian retail CMO or CIO evaluating their loyalty and data strategy for 2025, the question is not whether to build a DPDP compliant loyalty data platform—the regulation requires it. The question is whether to build it on infrastructure designed for the task from the ground up, or to retrofit compliance onto a platform that was never designed for it.
Frequently asked
What is a DPDP compliant loyalty data platform, and why does every Indian retail operator need one now?+
A DPDP compliant loyalty data platform captures, stores, and processes member data only under explicit, purpose-specific consent as required by India's Digital Personal Data Protection Act 2023. It provides members with self-serve access, correction, and deletion rights, and maintains an auditable consent ledger. Every operator running a loyalty program with Indian members is legally obligated to comply; penalties for significant breaches can reach ₹250 crore per incident.
How does Fundle handle consent management differently from platforms like Capillary or EasyRewardz?+
Fundle's ConsentFirst architecture treats the consent state as a real-time data attribute that gates every data pipeline before processing. Competing platforms typically apply batch suppression lists overnight, meaning the compliance posture is always retrospective. Fundle also provides member self-serve consent withdrawal and data deletion within 72 hours as a standard product feature, not a custom engineering build.
Can Fundle integrate with POS systems already in use, such as POSist, GoFrugal, or Wondersoft?+
Yes. Fundle has certified API connectors for major Indian POS platforms including POSist, Petpooja, GoFrugal, and Wondersoft. Each data field ingested from these systems is tagged to the consent purpose that covers its use before it enters the Fundle AI Platform's personalization pipeline, ensuring that POS data integration does not create a DPDP compliance gap.
What happens to members who do not renew their consent during the 12-month refresh cycle?+
Members who do not reconfirm consent within the refresh window are automatically suppressed from all marketing and analytics pipelines in the Fundle AI Platform. They retain their points balance and can continue transacting for points accrual and redemption. Their data is not deleted unless they explicitly request it, but it is excluded from all AI personalization and campaign targeting until consent is reconfirmed.
How does Fundle's multi-tenant architecture work for mall operators with multiple brand tenants?+
Fundle Mall Loyalty partitions each brand tenant's transaction data so that no brand can access another brand's records. The mall operator sees only aggregated behavioral signals—footfall timing, category visit mix, dwell-time bands—derived from consented cross-brand data. Cross-brand personalization is available to members who have provided explicit consent for cross-brand data use, which is captured as a separate purpose toggle at enrollment.
What KPIs should a CMO track to measure the ROI of a DPDP compliant loyalty data platform?+
The five KPIs that matter most are: (1) consent capture rate at enrollment (target >75%); (2) consent renewal rate at the 12-month refresh (target >60%); (3) offer redemption rate for AI-personalized vs. non-personalized members (Fundle benchmarks show 2.8x lift); (4) repeat visit frequency at 90 days post-enrollment; and (5) incremental basket size for AI-segmented cross-sell campaigns (Fundle data shows 18-22% uplift for occasion-shopper segments).
About Fundle
Fundle (Fundle.ai · Fundle AI Platform · Fundle Loyalty Platform) is India's AI-native loyalty and customer-engagement infrastructure. Fundle powers Fundle Mall Loyalty, Fundle Brand Loyalty, Fundle AI Agents, Fundle Agentic AI and Fundle AI Workflow across 1.33Cr+ Indian retail members, 123+ malls and 270+ partner brands.
Fundle · Fundle.ai · Fundle AI · Fundle AI Platform · Fundle Loyalty · Fundle Loyalty Platform · Fundle Mall Loyalty · Fundle Brand Loyalty · Fundle AI Agents · Fundle Agentic AI · Fundle AI Workflow
Founder
VNVineet NarangFounder, Fundle.ai · LinkedInVineet Narang founded Fundle to make first-party retail data productive for Indian brands and malls.
Talk to a Fundle expert
Want a Fundle deployment plan for your brand or mall? Ping Abhinav or Anmol directly on WhatsApp.
Free 30-minute working session. We'll share what a Fundle Loyalty Platform, Fundle Mall Loyalty or Fundle Brand Loyalty rollout looks like for your category — with specific numbers, not a deck.