Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account & Profile Information: Name, mobile number, email address, profile photo, flat/unit number, block, ownership status (owner/tenant), and family member details.
• Society & Admin Information: Society name, address, block/flat structure, committee member roles, and configuration details entered by society administrators.
• Vehicle Records: Vehicle registration/license plate numbers, vehicle type, and the flat they are tagged to.
• Complaints & Tickets: Descriptions, photographs, category, priority, and status updates you submit.
• Visitor Information: Visitor name, mobile number, photo (if captured at the gate), purpose of visit, and approval/denial actions.
• Payment-Related Information: Billing details, UPI transaction references, and payment status connected to maintenance bills. Sosayty facilitates UPI deep-links to third-party UPI apps (e.g., GPay, PhonePe, Paytm) and payment gateway partners; we do not store your UPI PIN, card numbers, CVV, or net-banking credentials, as these are handled directly by the payment gateway/UPI provider.
• Communications: Notices, polls, poll responses, and messages sent through the platform, along with any information you provide when contacting support.

1.2 Information Collected Automatically

• Device & Usage Data: Device model, operating system, unique device identifiers, IP address, app version, crash logs, and usage patterns (e.g., features used, session duration).
• Location Data: Approximate location may be collected only where a specific feature (such as verifying a resident is within the society premises for gate approvals) requires it, and only with your permission.
• Log Data: Timestamps of logins, visitor entries/exits, bill views, and complaint status changes, used for audit trails within your society.

1.3 Information from Third Parties

• Information provided by your society's committee/administrator when onboarding you as a resident (e.g., flat allocation, contact details imported during setup).
• Payment confirmation data received from UPI apps and payment gateway/processing partners.

2. How We Use Your Information

We use the information collected to:

1. Create and manage resident, admin, and staff accounts.
2. Generate and deliver maintenance bills, track payment status, and issue receipts/invoices.
3. Enable visitor logging, resident approval, and OTP-based gate entry.
4. Enable complaint/ticket creation, assignment, tracking, and resolution.
5. Display the resident directory to other verified residents of the same society, subject to permission settings configured by the society administrator.
6. Send notices, announcements, polls, and service-related communications (including SMS to residents who prefer not to use the app).
7. Maintain security, prevent fraud, and ensure only verified residents and staff access society-specific data.
8. Provide customer support and respond to queries or complaints about the Services.
9. Analyze usage to improve app performance, fix bugs, and develop new features.
10. Comply with applicable law, legal process, or requests from public/government authorities.

We do not use resident data for third-party advertising, and we do not sell personal data to data brokers.

3. How We Share Your Information

• Within Your Society: Your name, flat number, and (subject to permissions set by your society) contact details are visible to other verified residents and committee members of the same society, for legitimate society-management purposes (e.g., directory lookup, visitor approval).
• Society Administrators/Committee: Committee members and authorized staff (e.g., watchmen) may access relevant information — such as visitor logs, complaint status, and billing status — strictly to operate the society's day-to-day management.
• Service Providers: We share information with trusted third parties who help us operate the Services, including:
  • Cloud hosting and data storage providers (servers located in India).
  • Payment gateway and UPI facilitation partners, solely to process maintenance payments.
  • SMS/communication providers, solely to deliver notifications. These providers are bound by confidentiality and data protection obligations and may only use the data to provide services to us.
• Legal Requirements: We may disclose information if required by law, court order, or government/regulatory request, or to protect the rights, property, or safety of HasX Labs Pvt. Ltd., our users, or the public.
• Business Transfers: If HasX Labs Pvt. Ltd. is involved in a merger, acquisition, or sale of assets, resident data may be transferred as part of that transaction, subject to equivalent privacy protections.

We do not share resident personal data with unrelated third parties for their own marketing purposes.

4. Data Storage & Security

• All data is stored on encrypted servers located in India.
• We implement role-based access controls so that committee members, residents, and staff only see information relevant to their role.
• We use industry-standard technical and organizational measures (encryption in transit, access controls, and periodic security reviews) to protect data against unauthorized access, alteration, disclosure, or destruction.
• No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Services, and thereafter for as long as required to:

• Comply with legal, accounting, or regulatory obligations (e.g., billing and payment records);
• Resolve disputes and enforce our agreements; and
• Maintain historical society records (e.g., past complaints, visitor logs) as reasonably required for society administration.

When a resident moves out or an account is deactivated, personal data is either deleted or anonymized within a reasonable period, except where retention is required by law or legitimate society record-keeping needs (e.g., financial/audit records).

6. Your Rights and Choices

Subject to applicable law, you may:

• Access & Update: View and update your profile information within the app.
• Request Deletion: Request deletion of your personal data by contacting us at support@hasxlabs.com, subject to any legal or record-keeping obligations that require us to retain certain data (e.g., billing history).
• Withdraw Consent: Withdraw consent for optional features (e.g., location access) via your device settings; this may limit certain functionality.
• Opt-Out of Notifications: Manage notification preferences within the app, where available.
• Raise Grievances: Contact our Grievance Officer (Section 10) for any privacy-related concerns.

Please note that certain data (e.g., society admin records, financial/billing history) may be controlled by your society's committee rather than by HasX Labs Pvt. Ltd. directly, and requests relating to such data may need to be routed through your society administrator.

6.1 How to Delete Your Account (Mobile App)

If you are using our mobile application, you can delete your account directly from within the app by following these steps:

1. Open the Sosayty mobile application.
2. Go to Profile.
3. Select Delete Account.
4. Confirm your deletion request.

Once confirmed, your account deletion request will be processed, subject to any legal or record-keeping obligations described above (e.g., billing history).

7. Children's Privacy

Sosayty is intended for use by adult residents, tenants, owners, and society staff. We do not knowingly collect personal data directly from children. Family member details (including of minors) may be added to a household profile by a parent/guardian who is the registered resident account holder, solely for directory and identification purposes within the society.

8. Third-Party Links and Services

The Services may contain links to or integrations with third-party services (e.g., UPI apps, payment gateways). This Privacy Policy does not apply to those third-party services, and we encourage you to review their respective privacy policies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify users of material changes through the app or via email/SMS, and the "Effective Date" above will be updated accordingly. Continued use of the Services after such changes constitutes acceptance of the revised policy.

10. Grievance Officer & Contact Us

In accordance with the Information Technology Act, 2000, and rules made thereunder, the Grievance Officer for Sosayty is:

For any questions, concerns, or complaints regarding this Privacy Policy or your personal data, please write to us at the above email address. We aim to acknowledge grievances within a reasonable time and resolve them as per applicable law.