Legal

Privacy Policy

Last updated 2026-08-15 · Applies to the Society Security web portal and mobile apps.

1. Who we are

Society Security is operated by Ingenious Analytics ("we", "us"), India. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as the Data Fiduciary for the data described below, and your society's committee acts on behalf of its residents when it enters their details.

Registered entity and office: [registered legal name and address]. Contact: support@ingeniousanalytics.com.

2. What we collect

• Society details: society name and address.
• Admin/President account: name, phone number and a hashed password (we never store your password in readable form).
• Residents: name, phone number, flat number, and vehicles they register.
• Guards: name, phone number, shift and duty records.
• Gate activity: entry records — visitor/vendor/resident category, purpose, timestamps, and who approved or rejected an entry.
• Device data: a push notification token per device, so alerts reach the right phone.
• Website analytics: aggregate usage of our public pages via Google Analytics. Signed-in portal pages are deliberately not tracked.

We do not collect Aadhaar numbers, biometrics, payment card data or location tracking.

3. Why we use it, and on what basis

We process this data on the basis of the consent you give when registering your society, and each person gives when they activate their app. The purposes are limited to: operating gate entry logging, sending guest approval requests and notifications, onboarding residents and guards by SMS, producing your committee's reports, and supporting and securing the service.

4. Advertisements on the free plan

Society Security is free for your first 2 months and remains available on a free plan afterwards. Apps on the free plan display advertisements — this is how the free plan is funded. Advertisements are served generically; we do not pass residents' names, phone numbers, flat numbers or gate records to advertisers, and we do not use that data to target ads. Paid plans do not display advertisements.

5. Who can see your data

Every record is scoped to your society. Guards see gate activity, residents see their own flat's activity, and only your society's admins see the full register and reports. Our staff access production data only when required to support or repair the service.

We share data outside this only with the service providers needed to run the product — SMS delivery, push notification delivery (Firebase Cloud Messaging), hosting, and web analytics on public pages — strictly for those purposes, and never for their own marketing. We disclose data to authorities only where the law compels us to.

6. Where it is stored and for how long

Data is stored on servers operated for us in the cloud. We keep your society's data for as long as the society account is active. If you close the account or withdraw consent, we delete or irreversibly anonymise the data within 90 days, except where a law requires us to retain a record for longer.

7. Your rights

• Access a summary of the personal data we hold about you and how it is processed.
• Correction and erasure of data that is inaccurate, incomplete or no longer needed.
• Withdraw consent at any time, as easily as it was given. Withdrawing consent for the society account closes that account.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Grievance redressal — see below — before approaching the Data Protection Board of India.

To exercise any of these, write to support@ingeniousanalytics.com from the phone number or email on your account. We respond within 30 days.

8. Children

Accounts are created by adults on a society's committee. We do not knowingly process the personal data of a child except where a society records a resident's household details; parents or guardians may ask us to remove such data at any time.

9. Security

Passwords are stored only as salted hashes, portal sessions are protected against cross-site request forgery, sign-in and registration are rate limited, and traffic to the portal is encrypted over HTTPS. No system is perfectly secure; we will notify affected users and the Data Protection Board of a personal data breach as required by the DPDP Act.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, and the DPDP Act, 2023:

Grievance Officer: [name]
Ingenious Analytics, [registered office address], India
Email: support@ingeniousanalytics.com

Complaints are acknowledged within 24 hours and resolved within 15 days.

11. Changes

If we change this policy in a way that materially affects you, we will tell you in the app or portal before the change takes effect, and where the law requires it we will ask for your consent again.

Register your society Read the Terms of Service