Privacy Policy

1 Introduction & Scope

Welcome to AssociaOne (the "Application" or "App"), owned and operated by Sathuram Software Services ("we", "us", or "our"). We respect your privacy and are committed to safeguarding personal information collected from property owners, registered tenants, and association committee members.

This Privacy Policy outlines how we collect, use, store, process, and protect your information when you access or use the AssociaOne mobile app and accompanying management portals. By installing, registering, or using AssociaOne, you acknowledge and agree to the data collection and usage practices described herein.

2 Information We Collect

We collect strictly the minimal data required for residential property administration, maintenance fee billing, and tenant/owner association records:

• Personal & Contact Details: Full name, verified email address, mobile phone number, emergency contact, and occupancy classification (Owner, Tenant, Committee Administrator). User passwords are stored only in cryptographically hashed (irreversible BCrypt) format.
• Unit & Property Records: Flat/unit number, block or tower identifier, floor, unit square footage (used for formulaic maintenance fee computations), and lease dates for tenants.
• Financial & Billing Records: Monthly association dues, surcharge allocations (e.g. metered water, diesel generator consumption, parking, amenity fees), payment reference identifiers (UPI transaction ID, bank reference, cash receipt counter), and digital payment receipts. We do not collect or store credit/debit card numbers, ATM PINs, or CVV codes.
• Device & Diagnostic Information: Device model, operating system version, application version, client IP address, and login session timestamps used strictly for session security, troubleshooting, and audit trail compliance.

3 Device Permissions Required

AssociaOne requests only essential device permissions:

• Camera & Media / Storage (Optional): Required solely when you capture or upload photos of payment transfer receipts, maintenance issues (e.g., plumbing or electrical repair requests), or profile avatars.
• Push Notifications (Optional): Required solely to deliver timely alerts regarding newly generated monthly maintenance bills, payment confirmations, and emergency resident notices.

4 How We Use Your Information

The information collected is used strictly for legitimate residential association purposes:

• Generating and distributing monthly maintenance invoices based on apartment square footage and approved association tariff rules.
• Issuing official digital receipts upon maintenance fee reconciliation.
• Maintaining up-to-date Resident Welfare Association (RWA) member and tenant rosters.
• Resolving maintenance tickets, service requests, and facility bookings.
• Authenticating user sessions and preventing unauthorized account takeover.
• Delivering service-related administrative communications.

5 Data Sharing & Third-Party Services

We never sell, rent, or trade resident data to advertisers or third-party marketing brokers.

Your data is accessible only to:

• Authorized Association Administrators: Designated committee members of your specific residential society who manage flat dues and occupancy records.
• Infrastructure Providers: Encrypted cloud database hosting, transactional email relays (for password reset and invoice dispatch), and push notification infrastructure operating under strict enterprise data-protection agreements.
• Legal & Law Enforcement: Strictly when compelled by applicable statutory law, judicial order, or regulatory authority.

6 Data Security & Storage Architecture

We deploy robust enterprise safeguards to protect your personal information:

• Multi-Tenant Data Isolation: Every residential society's records are logically segregated so that residents and managers of one association cannot view data of another association.
• Transport Layer Security: All client-to-server traffic is encrypted using TLS / HTTPS.
• Authentication & Access Controls: Role-based access control (RBAC) enforced via stateless cryptographically signed JSON Web Tokens (JWT).
• Credential Hashing: Passwords are hashed with salted BCrypt before storage and cannot be read by administrators or staff.

7 Data Retention & Account Deletion

We retain your personal data for as long as your account remains active with your residential association. Once you vacate the premises or resign from the association, your account can be deactivated.

In full compliance with Google Play's User Data & Account Deletion Policy, users can request full deletion of their account and associated personal data at any time:

• In-App: Under Profile > Settings > Delete Account.
• Web-based Deletion Form: Available publicly without logging in at https://45.142.237.38:8092/delete-account.

Upon receiving a deletion request, your authentication credentials, personal profile, and contact details are permanently deleted within thirty (30) days. Historical financial billing logs may be archived in anonymized form as required by local cooperative society accounting regulations.

8 Your Rights & Regulatory Compliance

In accordance with applicable privacy regulations, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, you have the right to:

• Review and request a copy of the personal information held about you.
• Request correction or rectification of inaccurate details.
• Withdraw consent and request account deletion.
• File a complaint with our designated Grievance Officer regarding data handling.

9 Children's Privacy

AssociaOne is designed for property owners, adult residents, and association management personnel aged eighteen (18) and above. We do not knowingly collect personal data from minors under 18 years of age. If we discover that a minor's information has been collected, it will be deleted immediately.

10 Updates to this Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory requirements. Any modifications will be posted to this page with an updated effective date. We encourage you to review this policy periodically.

11 Contact & Grievance Redressal

For questions, privacy inquiries, or data deletion requests, please contact our Grievance Officer: