Privacy Policy

1. Introduction

GatePass+ ("we", "our", "us") provides a housing society management platform via mobile applications and web dashboards. This Privacy Policy explains how we collect, use, store, share, and protect personal data of users including residents, administrators, guards, vendors, and visitors.

By using the Service, you agree to this Privacy Policy.

2. Role Under Law

• We act as a Data Fiduciary under applicable law
• Each housing society acts as a joint Data Fiduciary
• Societies may enforce additional policies independently

3. Data We Collect

3.1 Account Information

• Name, Email, Phone number
• Username and encrypted password
• Role and society/unit details

3.2 Household & Society Data

• Family members (optional)
• Emergency contacts
• Vehicle and staff records

3.3 Visitor & Gate Data

• Visitor details (name, phone, purpose)
• Vehicle number (optional)
• Visitor photo (optional)
• Entry/exit logs and OTP data

Visitors are informed via signage or guard communication, and entry implies consent.

3.4 Operational Data

• Complaints, notices
• Parcel logs
• Poll participation
• Uploaded documents

3.5 Security & Incident Data

• Incident reports
• SOS alerts
• Guard logs

3.6 Financial Data

• Maintenance billing records
• Transaction references (if recorded by society)

We do NOT store: card details, UPI credentials, banking passwords.

3.7 Device & Technical Data

• Device ID, IP, app version
• Push notification tokens

3.8 On-Device Data

• Session tokens
• Encrypted credentials (optional)
• Cached data

4. How We Use Data

• Account management
• Visitor and security operations
• Billing tracking (no payment processing)
• Notifications and alerts
• Complaint handling
• Legal compliance

5. Data Sharing

We do not sell personal data.

5.1 Within Society

• Admins, Guards, Residents (limited access)

5.2 Service Providers

• Cloud hosting
• Notification services

5.3 Legal Disclosure

We may share data when required by law or to prevent fraud or threats.

6. Data Retention

• Account data: Active + 30 days
• Visitor logs: up to 24 months
• Financial records: up to 8 years
• Incidents: up to 36 months

7. Security

We use encryption, secure authentication, and access controls. However, absolute security cannot be guaranteed.

8. Permissions

Camera, Internet, Notifications, Biometric (optional).

9. Notifications

Used for visitor alerts, approvals, and emergency alerts.

10. International Transfers

Some providers may process data outside India with safeguards.

11. Children's Data

We do not knowingly collect children's data.

12. Your Rights

• Access, update, delete data
• Withdraw consent
• File complaints

13. Account Deletion

Request via app or email. Processed within 30 days.

14. Grievance Redressal

Acknowledgement within 24 hours, resolution within 15 days.

15. Changes to Policy

We may update this policy and notify users.

16. Contact

Email: divine.drwa@gmail.com