1. Scope and Applicability

This Policy applies to:

• Users registering on the Platform as Housing Society Administrators, Committee Members, Residents, or Service Providers.

• All data collected through web portal, mobile app, payment gateway integrations, and any related digital interfaces.

2. Information We Collect

We collect information that is necessary for lawful operation, transparency, and providing the requested services.

(A) Personal Information

• Full Name

• Contact Details (Mobile Number, Email Address)

• Address & Flat Details

• Aadhaar Number / PAN (for identity verification & KYC)

• Bank Account Details (for fund disbursement or verification)

• Photographs or ID documents (if uploaded voluntarily)

(B) Financial & Transactional Information

• Payment history

• Online payment details (through authorized gateways such as SabPaisa)

• Invoice and receipt records

• UTR / Transaction references

(C) Technical & Usage Data

• Device identifiers (IMEI, IP address, browser type)

• App usage logs and access timestamps

• Cookies and session tokens (for security and functionality)

Note: We do not store or process your debit/credit card information directly. All payments are securely handled by RBI-authorized payment gateways (SabPaisa, etc.) which are PCI-DSS compliant.

3. Purpose of Data Collection

We collect and process personal data only for legitimate purposes such as:

• Registering and authenticating users

• Managing housing society records and funds

• Generating invoices, receipts, and reports

• Processing online payments securely

• Maintaining KYC and audit compliance

• Sending transaction confirmations, notices, and important alerts

• Addressing support requests or disputes

• Complying with legal and regulatory requirements

We do not sell, rent, or trade your personal information for marketing or commercial gain.

4. Lawful Basis of Processing

Your data is processed under the following legal grounds:

• Performance of a contract (user’s agreement with the society or platform)

• Compliance with legal obligations (IT Act, Aadhaar Act, RBI guidelines)

• Legitimate business interests (fraud prevention, system security)

• Explicit user consent (where required, e.g., for KYC uploads)

5. Data Retention

We retain data only as long as necessary:

• Transaction & accounting data – minimum 8 years as per Indian accounting norms.

• KYC/Aadhaar data – until membership is active or as mandated by law.

• Usage & access logs – for audit/security for up to 2 years.
  Upon expiration or withdrawal, data is securely deleted or anonymized.

6. Data Sharing & Disclosure

We may share limited information with:

• Banks / Payment Gateways (for payment processing and reconciliation)

• Regulatory Authorities / Auditors (as per statutory requirements)

• Technology Partners under NDA for hosting, maintenance, or support

• Society Office Bearers for legitimate administrative purposes

All such entities are contractually bound to maintain confidentiality and comply with applicable data protection laws.

We never share Aadhaar or sensitive personal data with unauthorized third parties.

7. Data Security Measures

We implement reasonable and industry-standard security practices, including:

• Data encryption (AES-256) for sensitive fields

• HTTPS/TLS secure communication

• Role-based access control (RBAC)

• Firewalled AWS hosting

• Regular vulnerability scans and access logs

• Limited employee access on a need-to-know basis

8. User Rights

Under applicable laws, you have the right to:

• Access, review, or correct your personal data

• Withdraw consent (where applicable)

• Request deletion (subject to legal retention requirements)

• Lodge a complaint with the Grievance Officer

Requests can be made by email to our Data Protection Officer (details below).

9. Cookies and Tracking

Users may disable cookies in their browser settings; however, certain features may not function correctly.

10. Children’s Privacy

11. Third-Party Links

12. Data Protection Contact

In accordance with Rule 5(9) of the IT Rules, the Grievance Officer is:

Name: Gaurav Dayama

13. Policy Updates

We may modify this Policy from time to time. The revised version will be posted on our website and mobile app with a new effective date. Continued use of our Platform after such changes constitutes consent.

14. Jurisdiction

This Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of India, with exclusive jurisdiction of the courts at Pune, Maharashtra.

15. Acceptance

By using The Society Navigator web or mobile application, you acknowledge that you have read, understood, and agreed to this Privacy Policy and our Terms of Use.