Privacy Policy

1. Scope and Roles

This Privacy Policy applies to visitors of our website, registered users of the EasyAavaas mobile application, and anyone who interacts with our platform on behalf of a paying guest (PG) property, co-living operator, or related business.

EasyAavaas provides software that helps property owners and staff manage operations such as tenants, rooms, rent records, complaints, visitors, announcements, and inventory. Property owners and authorized staff who use the platform to manage tenant information may act as independent controllers or processors of tenant data, depending on applicable law. EasyAavaas processes such data on their instructions and in accordance with this Privacy Policy and our Terms & Conditions.

EasyAavaas is a technology platform. We are not the landlord, operator, or employer of tenants listed on a property unless explicitly stated in a separate written agreement.

2. Information We Collect

We collect information in the following categories:

• Account and identity information: mobile phone number, name, email address, gender, age, profile details, and authentication tokens generated after OTP verification.
• Property and operational data: property names, addresses, floor and room layouts, amenities, house rules, photos, join codes, occupancy details, and staff role assignments.
• Tenant and member data: tenant names, phone numbers, move-in dates, rent amounts, room assignments, documents (such as ID proof or agreements), emergency contacts, and related profile fields entered by authorized users.
• Financial and billing records: rent statements, payment amounts, payment methods, UTR or reference numbers, payment proof uploads, utility bill details, and verification status — processed as part of property management workflows.
• Communications and support content: complaints, requests, announcements, in-app messages, update threads, and files or images you upload.
• Device and usage information: device type, operating system, app version, IP address, log data, crash reports, and interaction events necessary to operate and improve the Services.
• Notification data: push notification tokens (for example, via Firebase Cloud Messaging), notification preferences, and delivery logs.
• Cookies and similar technologies: when you use our website, we may collect information through cookies and analytics tools as described in our Cookie Policy.

We do not intentionally collect sensitive personal data beyond what is necessary to provide the Services. If you upload documents that contain sensitive information, you do so at your direction and with appropriate authorization.

3. How We Collect Information

• Directly from you when you register, complete your profile, create or join a property, submit requests, upload documents, or contact support.
• From property owners, managers, or staff who enroll tenants or enter operational data on the platform.
• Automatically through your use of the Services, including server logs, security monitoring, and mobile analytics.
• From service providers that help us deliver OTP authentication, cloud hosting, push notifications, file storage, and related infrastructure.

4. How We Use Information

We use personal information for the following purposes:

• Providing, maintaining, and improving the Services, including authentication, property management features, dashboards, and notifications.
• Processing join requests, role assignments, permissions, and multi-property access.
• Enabling rent tracking, payment proof submission, utility billing workflows, and operational approvals.
• Sending transactional alerts, push notifications, SMS, or email where enabled and permitted by law.
• Detecting, preventing, and addressing fraud, abuse, security incidents, and technical issues.
• Complying with legal obligations, responding to lawful requests, and enforcing our Terms & Conditions.
• Analyzing aggregated or de-identified usage trends to improve product performance and user experience.
• Communicating with you about service updates, policy changes, or support matters.

We process personal information where permitted under applicable law, including with your consent, to perform a contract with you, to comply with legal obligations, and for our legitimate interests in operating a secure and reliable platform — balanced against your rights and expectations.

5. Legal Basis (India)

Our processing of personal data is conducted in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and other relevant regulations as they come into force and are supplemented by rules and guidance.

• Consent: where required, including for optional communications and certain cookies on our website.
• Performance of a contract: to provide account access and platform features you request.
• Legitimate uses: security, fraud prevention, service improvement, and internal reporting, where consistent with applicable law.
• Legal obligation: where we must retain or disclose information to comply with law or valid legal process.

6. How We Share Information

We may share personal information in the following circumstances:

• With authorized users at a property: owners, managers, and staff with appropriate permissions may access tenant and operational data relevant to that property.
• With service providers: cloud infrastructure, authentication, messaging, analytics, customer support, and security vendors bound by contractual confidentiality and data protection obligations.
• With your direction: when you submit a visitor request, complaint, payment proof, or announcement intended for other users at a property.
• For legal reasons: to comply with applicable law, regulation, court order, or government request, or to protect the rights, property, or safety of EasyAavaas, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards and notice where required by law.

We do not sell personal information. We do not share personal information with third parties for their independent marketing without your consent.

7. Data Retention

We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data is retained while your account is active and for a reasonable period thereafter to support reactivation, audit, and legal compliance.
• Property and tenant records may be retained according to the property owner's operational needs and applicable record-keeping requirements.
• Logs and security records may be retained for a limited period consistent with industry practice.
• When data is no longer required, we delete, anonymize, or securely archive it in accordance with our retention schedules.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include access controls, encryption in transit, secure authentication, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

For more detail on our security practices, please see our Security page at /security.

9. Your Rights and Choices

Subject to applicable law, you may have the right to access, correct, update, or delete certain personal information, withdraw consent where processing is consent-based, and raise grievances regarding our processing.

• Update profile information through the app or by contacting us.
• Manage notification preferences in app settings.
• Request access, correction, or deletion by emailing [email protected].
• Raise a grievance about how we handle your personal information by writing to [email protected], which is monitored by our grievance team.

We may need to verify your identity before responding to a request. We may decline requests that are unfounded, repetitive, or prohibited by law.

10. Children's Privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us at [email protected] and we will take appropriate steps to delete such information.

11. International Data Transfers

Our infrastructure and service providers may process information in India and other jurisdictions. Where personal data is transferred outside India, we implement appropriate safeguards consistent with applicable law.

12. Third-Party Links and Services

The Services may contain links to third-party websites or integrate third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date. Continued use of the Services after the effective date of changes constitutes acceptance of the updated Privacy Policy, except where further consent is required by law.

14. Contact Us

For privacy-related questions, requests, or complaints, contact:

• EasyAavaas Technologies Private Limited, Gurugram, Haryana, India
• Data Protection / Privacy: [email protected]
• General legal inquiries: [email protected]
• Support: [email protected]

Full registered office address is available on request at [email protected].