Privacy Policy
At NivaasX, safeguarding your privacy and ensuring the physical and digital security of your residential community is our highest priority. This policy outlines how we collect, manage, and safeguard information across our mobile and web applications.
Need to delete your NivaasX account or data?
Under Google Play policies and DPDP rules, you can request full erasure of your account and personal data online at any time without keeping the app installed.
Introduction & Scope
This Privacy Policy governs the manner in which NivaasX Technologies Pvt. Ltd. ("NivaasX", "we", "our", or "us") collects, uses, maintains, and discloses information collected from users (including residents, apartment owners, tenants, society management committee members, security guards, visitors, and facility vendors) of our mobile application NivaasX (Android Package Identifier: com.nivaasx) and our official web portal located at https://nivaasx.com.
By downloading, accessing, or using the NivaasX application (com.nivaasx) or related services, you consent to the data practices described in this Privacy Policy. This policy is formulated in compliance with:
- The Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India.
- The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
- Google Play Store Developer Program Policies, specifically including the User Data, Permissions, and Account Deletion guidelines.
Information We Collect
We collect information necessary to deliver gated community security, society accounting, and resident communications. The categories of information collected include:
- Full Name, Primary Mobile Phone Number, and Email Address.
- Society Name, Building/Block number, Flat/Apartment/Villa Number.
- Occupancy status (Owner, Tenant, Family Member).
- Vehicle registration numbers (for automated parking / RFID security).
- Optional profile picture for resident directory identification.
- Visitor Name, Contact Number, and Destination Flat.
- Visitor photograph (captured by security guards at gate check-in).
- Vehicle number, entry timestamp, and exit timestamp.
- Delivery executive company name and parcel delivery status.
- Resident digital approval/denial status logs.
- Maintenance fee invoices, bill amounts, and due dates.
- Transaction reference IDs and digital payment receipts.
- Important Note: We DO NOT collect, handle, or store debit/credit card numbers, CVVs, or NetBanking passwords. All online payments are handled directly by RBI-authorized PCI-DSS Level 1 compliant payment gateways (such as Razorpay or Cashfree).
- Device brand, hardware model, and operating system version.
- Unique Device Identifier (UUID / Android ID).
- Firebase Cloud Messaging (FCM) registration token for push notifications.
- App crash logs, diagnostic performance logs, and IP address.
Android Device Permissions (com.nivaasx)
To provide seamless gate automation and communication features, the NivaasX Android app (package: com.nivaasx) may request explicit user permissions. We follow the principle of data minimization—permissions are requested only when required for core features:
| Permission | Category | Exact Usage & Justification | Optional / Mandatory |
|---|---|---|---|
| CAMERA | Media Capture | Used by security guards to photograph visitors/delivery executives at gate entry, and by residents to capture photos for maintenance complaint tickets or profile setup. | Optional (Feature-based) |
| POST_NOTIFICATIONS | Alerts | Critical for receiving instant visitor gate approval requests, delivery arrivals, emergency society SOS broadcasts, and maintenance dues notifications. | Highly Recommended |
| READ_MEDIA_IMAGES | Storage | Allows users to select existing photos or PDF maintenance invoices from their device to upload into the society document repository or attach to helpdesk tickets. | Optional |
| ACCESS_FINE_LOCATION | Location | Used strictly for verifying on-duty attendance geofencing for security staff/facility workers within society premises, or locating the resident's society during onboarding. We do NOT track background location when the app is closed. | Optional (Staff / Guard Only) |
How We Use Your Information
We process the collected data for the following legitimate purposes:
Data Sharing & Third-Party Services
We do NOT sell, rent, monetize, or trade personal data to third-party advertisers, telemarketers, or commercial brokers. Data is shared strictly on a need-to-know basis with:
- Your Registered Residential Society (Management Committee): Authorized committee administrators have access to flat owner registries, maintenance payment statuses, and gate log records for lawful society management.
- Payment Aggregators (Razorpay / Cashfree): Securely transmit payment instructions to process maintenance dues. Compliant with RBI guidelines and PCI-DSS standards.
- Infrastructure & Push Notification Providers: Cloud infrastructure (AWS / Google Cloud hosting based in India) and Firebase Cloud Messaging (FCM) to deliver mobile notifications.
- Legal & Regulatory Authorities: We may disclose information if required to do so by law, subpoena, court order, or governmental directive under Indian legislation.
Data Security & Storage Standards
We implement robust enterprise-grade technical and organizational safeguards to protect your personal data:
Data Retention & User Account Deletion Policy
We retain personal data only as long as necessary to provide services to you and your society, or to comply with statutory legal and auditing obligations under Indian law.
Under Google Play Developer Data Safety rules and the DPDP Act 2023, you have the right to request deletion of your account and personal data at any time. You do not need to have the app installed to submit a deletion request.
You can initiate deletion via either:
- In-App: Open NivaasX (
com.nivaasx) → Go toProfile → Settings → Privacy → Delete Account. - Web Portal: Submit an online deletion request directly at nivaasx.com/account-delete-request.
Upon verified account deletion, personal profile identifiers, linked phone numbers, profile photos, and push tokens are permanently purged within 7 business days. Society statutory financial accounting receipts (bills already audited by the society) are retained by the society committee in accordance with cooperative societies regulations.
Your Rights Under the DPDP Act 2023
As a Data Principal under the Digital Personal Data Protection Act, you possess the right to:
- Right of Access & Summary: Request a summary of personal data being processed by NivaasX.
- Right to Correction & Erasure: Rectify inaccurate personal records or request permanent deletion.
- Right of Grievance Redressal: Register complaints with our designated Grievance Officer.
- Right to Nominate: Nominate an individual to exercise data rights in the event of death or incapacity.
Children's Privacy
NivaasX does not knowingly solicit or collect personal information directly from children under 18 years of age without explicit verifiable consent from their parents or legal guardians. Child resident profiles may only be created by an authorized adult primary household account holder.
Updates to This Privacy Policy
We may periodically update this Privacy Policy to reflect enhancements in our app services, new legal requirements, or evolving Google Play policies. When changes are made, the revised date at the top of this page will be updated. In case of material alterations affecting your rights, we will notify you via in-app banner or registered email.
Grievance Officer & Official Contact Details
In compliance with Rule 5(9) of the Information Technology Rules, 2011 and Section 13 of the DPDP Act 2023, the details of our designated Grievance Officer and Data Protection Desk are:
Entity: NivaasX Technologies Pvt. Ltd.
Application: NivaasX (Package: com.nivaasx)
We acknowledge all formal grievance inquiries within 24 business hours and aim to resolve data protection matters within 15 working days.