Privacy Policy

1. Who we are & our role

Digitoicy operates the Service. When you (a landlord, owner, agency or staff member) enter data about your tenants, owners, staff or visitors, you are the data controller/fiduciary of that data and we act as a processor on your behalf, handling it only to provide the Service. You are responsible for having a lawful basis and any necessary consents to collect and process that data and to contact those individuals.

2. Information we collect

• Account & identity: your mobile number (for OTP sign-in), name, role, business/property details, and profile photo if you add one.
• Data you enter: properties, units, tenants, owners, leases, rent, bills, expenses, payments, invoices, meter readings, visitors, inventory, tickets, messages and uploaded documents/photos.
• Contact details of third parties you add (e.g. tenants’, owners’, staff’ and visitors’ names and phone numbers).
• Usage & technical data: log/activity data, last-access time, device/browser information and approximate technical metadata needed to run and secure the Service.

3. How we use information

• To provide, operate, secure and support the Service and your account;
• To generate dues, invoices, reminders and reports you request;
• To send transactional communications (e.g. OTPs, due/lease reminders, and messages you choose to send) via in-app alerts, SMS or WhatsApp;
• To maintain an audit trail of sensitive actions for your security and accountability;
• To bill you for paid plans (if applicable) and to comply with law;
• To detect, prevent and address fraud, abuse or technical issues, and to improve the Service.

4. Sharing & sub-processors

We do not sell your data. We share it only with trusted service providers who process it on our behalf to run the Service, including: Google Cloud / Firebase (hosting, database, authentication), Meta / WhatsApp and SMS providers (message delivery, where you use those features), and payment gateways (where you use online payments). We may disclose data if required by law or to protect our rights, users or the public. If we undergo a merger or acquisition, data may transfer as part of that transaction.

5. Data storage, location & security

Data is stored on Google Cloud infrastructure and may be processed in data centres in or outside India. We apply reasonable technical and organisational measures, including encryption in transit, encryption at rest, role-based access control and a controlled server-side data gateway. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security; you use the Service at your own risk and are responsible for safeguarding your device and OTP.

6. Retention

We retain your data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal, tax or accounting obligations or to resolve disputes. Audit-log entries are retained for a limited period and then automatically deleted. You can request deletion of your account data as described below.

7. Your rights

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you may request to access, correct, update or delete your personal data, or withdraw consent, by contacting us using the details below. Where you have entered data about other individuals, requests from those individuals should generally be directed to you (the controller); we will support you as your processor.

8. Cookies & local storage

The Service uses essential browser storage (e.g. to keep you signed in and remember preferences). It does not use advertising cookies.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

10. Changes

We may update this Policy from time to time; the “Last updated” date shows the latest version. Continued use after changes take effect constitutes acceptance.