Privacy Policy

At AapkaStay, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform.

Personal Information:

• Full name, email address, and phone number
• User role (Property Owner, Tenant, or Admin)
• Profile information and preferences

Authentication Data:

• Account credentials (managed securely by Clerk)
• Session information and authentication tokens
• IP addresses and device information for security purposes

Property Information (for Owners):

• PG/property details including name, address, and location coordinates
• Property images and amenity information
• Room configurations, pricing, and availability
• UPI payment information and QR codes

Tenant Information (collected by Owners):

• Personal details and contact information
• ID proof documents (Aadhaar, PAN, Driving License, Passport) - stored encrypted
• Rent payment records and payment screenshots
• Security deposit and tenancy agreement details
• Maintenance requests and communication history

Usage and Analytics Data:

• App usage patterns and feature interactions
• Device type, browser type, and operating system
• Error logs and performance metrics

We use your information to:

• Provide Services: Enable property management, tenant management, rent tracking, and communication between owners and tenants
• Process Transactions: Handle rent payments, security deposits, and generate financial reports
• Verify Identity: Authenticate users and verify property ownership and tenant credentials for safety and security
• Improve Platform: Analyze usage patterns to enhance features, fix bugs, and optimize performance
• Communication: Send important notifications about rent reminders, maintenance updates, and platform announcements
• Compliance: Maintain records for legal and regulatory compliance
• Security: Detect and prevent fraud, unauthorized access, and other security threats

We use the following trusted third-party services to operate our platform:

Clerk (Authentication):

• Purpose: Secure user authentication and session management
• Data shared: Email, phone number, authentication credentials
• Privacy Policy: https://clerk.com/privacy

Firebase (Google Cloud):

• Purpose: Cloud database for real-time data storage and synchronization
• Data stored: All application data including user profiles, properties, tenants, and payment records
• Privacy Policy: https://firebase.google.com/support/privacy

Cloudinary (Image Storage):

• Purpose: Secure image and document storage
• Data stored: Property images, ID proof documents, payment screenshots, UPI QR codes
• Privacy Policy: https://cloudinary.com/privacy

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Between Owners and Tenants: Property owners can view tenant information for properties they manage. Tenants can view property and owner information for their current residence.
• Service Providers: With third-party services listed above that help us operate our platform
• Legal Requirements: When required by law, court order, or government regulation
• Safety and Security: To protect the rights, property, or safety of AapkaStay, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)

We implement industry-standard security measures to protect your data:

• Encryption: ID proof numbers and sensitive documents are encrypted at rest using application-level encryption
• Secure Transmission: All data is transmitted using HTTPS/TLS encryption
• Access Control: Role-based access ensures users can only access data they're authorized to view
• Authentication: Secure authentication through Clerk with options for two-factor authentication
• File Security: Images and documents are stored with access control and signed URLs for sensitive files
• Regular Audits: Ongoing security monitoring and vulnerability assessments

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our security measures.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate or incomplete information through your account settings
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
• Data Portability: Request your data in a commonly used, machine-readable format
• Withdraw Consent: Opt-out of non-essential communications and data processing where consent was given
• Object to Processing: Object to certain types of data processing, such as marketing communications

To exercise these rights, please contact us at support@aapkastay.app

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we use soft-delete mechanisms to mark data as deleted while maintaining data integrity. Financial records and transaction history may be retained longer for legal and accounting purposes. You can request complete data deletion by contacting us, subject to legal obligations.

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and maintain user sessions. Essential cookies are required for platform functionality (authentication, security). You can control cookie preferences through your browser settings, though disabling certain cookies may limit functionality.

9. Children's Privacy

AapkaStay is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can remove it.

10. International Data Transfers

Your data may be stored and processed in servers located in different countries, including where our third-party service providers operate. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically. Continued use of AapkaStay after changes constitutes acceptance of the updated policy.