Privacy Policy
છેલ્લે સુધાર્યું: 17 October 2026
ટૂંકમાં
- કયા રેકોર્ડ રાખવા તે તમારી સોસાયટી નક્કી કરે છે; અમે તેના માટે એપ ચલાવીએ છીએ — ડેટા ક્યારેય વેચતા નથી, જાહેરાત બતાવતા નથી.
- ડિરેક્ટરીમાં તમારો નંબર ફક્ત તમે ઈચ્છો તો જ દેખાય. તમારા ફ્લેટના મુલાકાતી ફક્ત તમારા ફ્લેટના લોકો જ જુએ.
- મુલાકાતીના રેકોર્ડ 60 દિવસ પછી ડિલીટ થાય; ID પ્રૂફ અને RC ની નકલ ચકાસણી પછી તરત ડિલીટ થાય.
- અમે તમારો UPI PIN કે કાર્ડની વિગત ક્યારેય જોતા નથી — પૈસા સીધા સોસાયટીના ખાતામાં જાય છે.
- મારું એકાઉન્ટમાંથી ગમે ત્યારે એકાઉન્ટ ડિલીટ કરો. સોસાયટીના રેકોર્ડ (બિલ, રસીદ) સોસાયટી પાસે રહે.
- પ્રશ્ન કે ફરિયાદ: support@dwaaros.com — 30 દિવસમાં જવાબ.
નીચેનું અંગ્રેજી લખાણ જ માન્ય (binding) છે; આ ફક્ત સરળ સાર છે.
DwaarOS ("the app", "we", "us") is a society management app for housing and commercial societies in India, operated by Cybertron Softech LLP. This policy explains what personal data the app handles, why, who can see it, how long it is kept and the rights you have under the Digital Personal Data Protection Act, 2023 and its Rules. It applies to the app on the web, the Android app and the website dwaaros.com.
1. Who decides and who processes
Your society (through its managing committee) decides what records it keeps about its flats and members — the member register, bills, payments, notices, complaints and gate records. For that data the society is the Data Fiduciary and we process it on the society's behalf, only to run the app for that society.
For your login account, our subscription billing to the society, our website and support, we are the Data Fiduciary.
If you have a question about a society record (for example a bill or a register entry), the committee of your society is the first place to ask. We help the society answer it.
2. Personal data the app handles
| What | Details |
|---|---|
| Login account | Name, mobile number, e-mail (optional), password (stored only as a one-way hash), preferred language, the society and role you belong to. |
| Flat and member register | Flat number, owner / tenant / family, move-in and move-out dates, area, parking, and what the committee enters for the society's records. |
| Your profile (optional) | Family members you add (name, relation; children are added without a phone number), blood group and whether you wish to be a donor, whether you appear in the member directory and whether your number is shown, your occupation and any business you choose to list. |
| Money | Bills, payments, receipts, the UPI reference (UTR) or cheque details you or the committee enter, payment screenshots you upload, expenses and their bills, flat-transfer entries. We never see or store your UPI PIN, card number or bank password — online payments are handled by the payment gateway. |
| Gate | Visitor name, mobile, photo, purpose and vehicle number entered by the guard; daily help (name, phone, which flats); guest passes; parcels; SOS alerts. |
| Vehicles | Vehicle number, type, make, colour and parking slot. A copy of the RC uploaded for checking is deleted once the committee has checked it. |
| Joining a society | If the society asks for an ID proof when you join, the copy is deleted as soon as the committee accepts or declines the request. |
| Things you post | Complaints and suggestions (with photos), proposals and votes, buy & sell posts, flat / office board posts, business listings, reports you make on posts. |
| Voice | When you use the microphone (voice complaint, guard voice entry), your phone or browser turns speech into text using its own speech service (Google on Android and Chrome, Microsoft on Edge). We receive only the text; we never record or store audio. |
| Device and security | A session cookie that keeps you signed in, the device / browser name and last-active time for 'Linked devices', and server logs (including IP address) used to stop misuse and investigate security problems. Push-notification tokens if you allow notifications. |
| Activity records | An audit log of important actions (who approved a bill, recorded a payment, changed a setting) so the society can check its own records. |
3. Why we use it
We process data on the basis of your consent (for example the optional profile details, directory listing, blood-donor status, business listing and notifications) and for legitimate uses allowed by law, such as data you give voluntarily for a specific purpose and data the society must keep for its accounts. You can withdraw consent for optional details at any time in My profile or by writing to us; this does not affect what was done before.
We do not sell personal data, we do not show advertising, and we do not use your data to build advertising profiles.
- To run the services your society uses: bills and receipts, payment confirmation, accounts statements, notices, meetings and polls, complaints, gate and visitor approval, parking, amenities and the member directory.
- To sign you in, keep your account secure (one-time passwords, device list, rate limits) and send the notifications you asked for.
- To bill the society for its subscription and send GST invoices.
- To answer support requests and fix problems.
- To meet legal duties, such as tax records and lawful requests from authorities.
4. Who can see what inside your society
- Committee members see the records they need for their role (for example the treasurer sees payments). Guards see only what the gate needs.
- Visitors to your flat are visible only to the people living in your flat — not to other members and not to the committee.
- Other members see you in the member directory only if you choose to be listed, and see your phone number only if you choose to show it.
- Buy & sell posts, flat / office board posts and business listings are visible to members of your society only — never to the guard and never on the public internet.
- The society's public mini-website, if the committee switches it on, shows only what the committee chooses (for example a description and committee names). It never shows flats, dues or members' phone numbers.
5. Service providers we use
We share only the data each provider needs to do its job, under contracts or terms that require them to protect it:
- Hosting and file storage providers that run our servers, database and backups.
- SMS provider to send one-time passwords to your mobile; e-mail provider for password reset and invoices.
- Payment gateway (Razorpay) — for our subscription billing, and for online maintenance payments into the society's own gateway account when the society switches this on.
- Push notification services (Google Firebase / your browser's push service) to deliver notifications.
- An AI service (Anthropic) — only if the society uses automatic notice translation or the committee assistant: the notice text or the question and the society figures needed to answer it are sent; phone numbers are not.
- WhatsApp links in the app open WhatsApp on your phone; the app does not send messages through WhatsApp on your behalf.
6. Other disclosures
- When required by law, a court order or a lawful request from a government authority.
- To protect the safety of people or prevent fraud and misuse.
- If our business is transferred or merged, to the new operator, who must keep this policy's protections.
7. How long data is kept
| Data | Kept for |
|---|---|
| Visitor records and photos, gate events, visitor notifications | 60 days, then deleted automatically |
| Guest passes | 60 days after the pass stopped being valid |
| Collected parcels, resolved SOS alerts | 60 days |
| Buy & sell and flat / office board posts, reports on posts | 90 days after the post ended |
| ID proof shown when joining, RC copy of a vehicle | Deleted as soon as the committee has checked it |
| Signed-in devices | Removed 60 days after last use, or 7 days after signing out |
| Bills, payments, receipts, accounts, member register, meeting records | As long as the society uses the app — these are the society's records, which it needs for its accounts and legal duties |
| Society that stops its subscription | Read-only for 90 days so members can still see statements and receipts and the committee can download all its data; then archived or deleted as agreed with the society |
| Backups | Rolling backups kept up to 14 days |
| Security and activity logs | At least one year, to investigate misuse and security incidents as the DPDP Rules require |
8. Your rights
- See the data the app holds about you — most of it is in My profile, My bills and My account.
- Correct or update it — in My profile, or ask your committee for register entries.
- Erase it — delete your account any time from My account → Delete my account (also explained at /delete-account). Your login, contact details, devices, notifications, posts, business listings and optional profile details are deleted. Records the society must keep (bills, payments, receipts, the member register, complaints and meeting records) stay with the society and show you as a deleted member.
- Withdraw consent for optional details (directory, phone number, blood donor, business listing, notifications) at any time.
- Nominate a person to exercise these rights for you in case of death or incapacity, by writing to us.
- Complain — write to our Grievance Officer (below). We reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
9. Children
The app is meant for adults. Children do not get their own login. A parent or guardian living in the flat may add a child as a family member (name and relation, optionally blood group) for the society's records; no phone number is stored for a child. We do not track children or show them advertising.
10. Security
- All traffic is encrypted (HTTPS). Passwords are stored only as one-way hashes; payment-gateway keys are encrypted.
- Each society's data is kept apart, and every screen and action checks the person's society and role.
- Platform administrators must use a second factor (authenticator code). Sign-ins are rate-limited and can be signed out from any device.
- Nightly backups, an audit log of important actions, and private file links that work only for people allowed to see the file.
- If a personal data breach happens, we will inform affected people and the Data Protection Board of India as the law requires, and tell the affected society.
11. Cookies
We use only cookies the app needs to work: a sign-in cookie, a language cookie and (on your device only) your light / dark theme choice. We do not use advertising or tracking cookies.
12. Changes to this policy
If we change this policy in a way that matters, we will show a notice in the app before the change applies. The date at the top shows the latest version.
13. Contact and Grievance Officer
Grievance Officer: Grievance Officer, Cybertron Softech LLP · SF-219, Vishala Supreme, Opp. Torrent Substation, S.P. Ring Road, New Nikol, Ahmedabad, Gujarat 382350 · E-mail: support@dwaaros.com
Please mention your society name and flat number so we can help quickly.