This Privacy policy describes how Easy Connect Private Limited, the company that owns and operates ResiSmart (“ResiSmart”, “we”, “us”), collects, uses, shares and protects personal data when you use the ResiSmart website, the web dashboard, and the ResiSmart · Society, ResiSmart · Guard and ResiSmart · Partner mobile apps (the “Service”). It is written with the Digital Personal Data Protection Act, 2023 (India) and the Information Technology Act, 2000 in mind.
1. Who this policy covers
It applies to everyone who interacts with the Service: society administrators and committee members, residents and tenants, security guards and society staff, helpers (domestic staff, drivers, etc.) whose details are recorded, visitors whose entry is logged, partner businesses and their staff, and visitors to our website.
2. Our role: processor for societies, controller for accounts
- For data a society or partner enters or collects through the Service (flat and resident records, visitor logs, staff files, bills, ledgers, notices, complaints, listings), the society or partner decides why and how it is used — it is the data fiduciary/controller. ResiSmart processes that data on its instructions as a data processor. Questions about how your society uses your data should go to your society’s administrator first; we will help route them.
- For account, security, billing, support and analytics data we collect to run the Service itself, ResiSmart is the controller.
3. Data we collect
Provided by you or your society
- Identity & contact: name, phone, email, profile photo, role, flat/unit and block, ownership or tenancy status, move-in/out dates.
- Society records: blocks, flats, parking, committee terms and designations, election records, staff and helper profiles (including police-verification status where the society records it), vendor and equipment records.
- Gate & visitor data: visitor name, phone, purpose, host flat, vehicle number, entry/exit times, pass details, approval decisions, and any visitor photo the guard captures if the society enables it. Blocklist entries the society maintains.
- Finance: charge heads, bills, dues, receipts, payment mode and reference (cash/cheque/UPI/online), ledgers, budgets, fund and bank records, GST details, invoices and quotations. We do not store full card numbers or UPI PINs.
- Communications: complaints and their status history, notices, community posts and comments, reviews and ratings, support messages.
- Emergency: SOS/emergency alerts you raise, the time and the reporting user.
- Partner data: business name, GST/registration numbers, address, catalogue and services, prices, orders, bookings, invoices, party (customer/supplier) balances.
- Marketplace: property listings you publish, enquiries you send, comparisons you save.
Collected automatically
- Device & usage: device model, OS, app version, language, IP address, time zone, crash logs, and which screens/features are used — to keep the Service secure and reliable.
- Notifications: a push-notification token so we can deliver approvals, alerts and updates you have enabled.
- Guard duty: duty start/end times recorded when a guard checks in and out in the Guard app.
4. App permissions and why we ask
| Permission | Used for | Optional? |
|---|---|---|
| Camera | Scanning QR passes at the gate; taking visitor, profile or complaint photos. | Yes — only when you use those features. |
| Photos / files | Attaching images or documents to complaints, listings, staff records, notices, invoices. | Yes. |
| Notifications | Visitor approvals, SOS alerts, dues reminders, notices, order/booking updates. | Yes — you can turn them off; some society-critical alerts may still be sent by SMS/email. |
| Location | Selecting a society/partner address on a map during setup; showing nearby partners; approximate location on gate/duty events if the society enables it. | Yes. |
| Contacts | Optionally pre-filling a visitor or invitee’s number. We never upload your address book. | Yes. |
| Phone / SMS | Reading a one-time code sent to your number (Android SMS Retriever) so you can sign in faster. | Yes. |
We do not sell personal data, and we do not use it for third-party advertising.
5. How we use data
- To provide the Service: gate approvals, billing and receipts, complaint workflows, notices, bookings, orders and all other features you or your society use.
- To secure the Service: authentication, fraud and abuse prevention, audit trails (for example who approved a visitor or edited a bill).
- To communicate: transactional notifications, alerts, dues reminders and support replies via push, SMS, WhatsApp or email.
- To bill societies and partners for their plan and to keep tax and accounting records.
- To improve the Service using aggregated, de-identified usage and crash analytics.
- To comply with law and respond to lawful requests.
Legal basis: performance of our contract with you or your society; your consent (e.g., camera, location, marketing); our legitimate interests in running a secure service; and compliance with legal obligations.
6. Who we share data with
- Inside your society/partner workspace, according to roles the administrator sets — for example a guard sees today’s expected visitors, a resident sees their own bills, a treasurer sees the ledger, committee members see governance records.
- Service providers who process data for us under contract: cloud hosting and databases, payment gateways, SMS/WhatsApp/email and push-notification providers, maps, error monitoring and analytics, customer-support tools.
- Partners receive the order/booking details you submit to them (name, phone, flat/society, order contents).
- Legal & safety: to comply with law, court orders or government requests, or to protect the rights, property or safety of ResiSmart, its users or the public.
- Business transfers: if ResiSmart is involved in a merger, acquisition or asset sale, data may transfer to the successor under this policy.
7. Payments
Online payments (plan subscriptions, maintenance dues, amenity charges, partner orders) are handled by PCI-DSS-compliant payment gateways. Card and bank details are entered directly with the gateway and are not stored on ResiSmart servers; we receive a payment reference, status, amount and masked instrument details to reconcile the payment against the correct bill or order.
8. How long we keep data
- Account data: for as long as your account is active, then deleted or anonymised within 90 days of a verified deletion request, except as noted below.
- Society records (flats, residents, staff, minutes, elections) are controlled by the society; they persist while the society uses the Service and are deleted or exported when the society closes its workspace, subject to legal retention.
- Financial and tax records (bills, receipts, invoices, ledgers): retained for at least 8 years as required by Indian accounting and tax law, even after an account is deleted — but de-linked from your login identity where possible.
- Visitor logs: retained per the society’s configured retention (default 12 months) for security and audit; the society may shorten this.
- Backups and logs: encrypted backups age out on a rolling schedule (up to 90 days); security logs up to 12 months.
9. Security
We use encryption in transit (TLS) and at rest, tenant isolation so one society can never query another’s data, role-based access controls, one-time-code verification, hashed passwords, least-privilege access for our staff, and monitoring for abuse. No system is perfectly secure; if we learn of a breach affecting you we will notify you and the relevant authorities as the law requires.
10. Your rights and choices
- Access & correction: view and edit your profile in the app; ask your society administrator to correct society records about you.
- Deletion: request deletion of your ResiSmart account and personal data — see Delete your account. Some records (financial, security logs) may be retained as described in Section 8.
- Portability: society administrators can export their data (registers, ledgers, reports) from the dashboard.
- Consent: withdraw optional permissions (camera, location, notifications) in your device settings at any time.
- Marketing: we send very little; opt out via the unsubscribe link or by emailing us.
- Grievance: raise a concern with our grievance officer (Section 15). You may also approach the Data Protection Board of India where applicable.
11. Children
The Service is intended for adults. Societies may record household members (including minors) as part of a flat’s residents; that data is entered by the society/parent and used only for society purposes. We do not knowingly create accounts for children under 18.
12. Cookies and similar technologies
The website and dashboard use strictly-necessary cookies (session, language preference, security) and, where enabled, privacy-respecting analytics to understand usage in aggregate. We do not use advertising cookies. You can control cookies through your browser; the Service may not work correctly without essential cookies.
13. Where data is stored
Data is primarily hosted with reputable cloud providers with data centres in India and/or other regions that provide adequate protection. Where data is processed outside India by our providers, we use contractual safeguards. By using the Service you consent to such processing.
14. Changes to this policy
We may update this policy; the date at the top will change and material changes will be announced in the app or by email. Continued use after the effective date means you accept the updated policy.
15. Contact and grievance officer
Easy Connect Private Limited
Jaipur, Rajasthan
India
Privacy: info@resismart.in
Grievance officer: Grievance Officer — info@resismart.in
We acknowledge privacy requests within 24 hours and resolve them within 15 days, or as the law requires.