Privacy Policy

Who We Are

aptzo is an apartment society management service run by Aravir Technologies ("we"). Contact: hello@aravir.in.

Our Two Roles

For the data a society keeps in aptzo, such as residents, flats, dues, gate entries and notices, the society is the data fiduciary. It decides why and how that data is used. We process it only on the society's instructions, under our data processing agreement.

For our own records, such as your sign-in email, the invoices we send a society, messages sent to us through the support form, and the records of our own staff, we are the data fiduciary.

What a Society Keeps in aptzo

• Account: name, email, optional phone, language.
• Residence: flat, role, move dates.
• Community: tickets, comments, bookings, poll participation.
• Directory: name and flat. Phone and email only if you choose to show them.
• Money: invoices, receipts, ledger entries.
• Gate: visitor, delivery and daily-help entries. Only the last four digits of a visitor's mobile number are kept.

What We Keep for Ourselves

• Sign-in records: the email used, sign-in codes (stored only as a one-way hash) and failed attempts, to keep accounts safe.
• Support messages: what you send through the support form or by email, to answer you.
• Billing records: the society's plan, our invoices to it and payment references.
• Security logs: who did what, and when.

What We Do Not Do

• We do not show advertising.
• We do not sell personal data.
• We do not ask domestic workers for Aadhaar or biometrics.
• Worker ratings are not turned on by default.
• We do not use analytics or advertising cookies.

Who Can See It

Inside a society, what each person sees depends on their role. Residents see their own flat's records and the directory details other people choose to show. Committee members and managers see what their role needs.

Our staff who run the service see a society's name, city, plan, counts of flats and members, credit balances and our invoices to it. They do not see residents' names, contact details, gate entries or the society's accounts. Every look is logged.

Service providers who help us run aptzo, listed in the data processing agreement, handle data only to provide their part of the service.

How Long It Is Kept

Each society sets how long gate entries are kept, from 30 days up to 10 years. The default is 90 days. After that, names, phone digits, vehicle numbers and photos are erased, and only the fact of a visit remains, for counts.

Other data follows the society's retention settings, which cannot go below safe minimums. Accounting records stay with the society as the law requires.

Sign-in codes and failed attempts are deleted after two days. Support messages are kept as long as we need to answer you, and then for up to two years.

Your Rights

• See and export your own data in the app at any time.
• Ask for your data to be corrected or erased.
• See when staff viewed your record.
• Withdraw a consent you gave. This does not affect what was done before.
• Name another person to act for you if you die or cannot act.

For data a society keeps, ask your society first: the app has a privacy request form. You can also write to us at hello@aravir.in, and we will pass it to the society and help it answer. If you are not satisfied, you can complain to the Data Protection Board of India.

How We Protect It

• Every connection uses HTTPS.
• Each society's data is kept apart by the database itself, not only by the app.
• Sign-in uses one-time codes sent by email, not passwords.
• Stored secrets, such as payment gateway keys, are encrypted.
• Changes are written to an audit log that cannot be edited.

If a breach affects your data, the society and we will tell you what happened, what it means for you and what we are doing about it.

Children

A society may record family members who are children, for example for gate entry. Accounts are for adults. A society that records a child's data must have a parent's consent.

Changes to This Policy

We will post changes here with a new date, and tell societies before a change that affects them takes effect. Questions: hello@aravir.in.

Grievance Officer

For a complaint about privacy or the service, write to our Grievance Officer, [name to be confirmed], at hello@aravir.in. We acknowledge within 24 hours and answer within 15 days. If that does not settle it, you may approach the Data Protection Board of India.