Legal Center

Privacy Policy

Effective: 1 July 2026

1. Overview

SociyoHub ("we", "us", "the Service") is a Software-as-a-Service platform operated for the purpose of housing-society management. This policy explains what personal information we collect, why we collect it, how we secure it, and the rights you have over it. SociyoHub is not the society administration; each society controls its own community content within the platform.

2. Information we collect

We collect only the information strictly necessary for society management:

  • Identity: full name, flat/unit details, block, relationship (owner / tenant / family).
  • Contact: email address and phone number, used for authentication and notifications. Phone numbers are confirmed by a message you send from your own phone (SMS or WhatsApp) through our phone-verification provider, ReverseOTP.
  • Year of birth: asked once when you create your account, only to confirm you are 18 or older. We do not ask for your full date of birth.
  • Guard work details: for security guards, the society code you joined with, your join request, the weekdays and hours your committee sets for your shifts, and gate activity during those shifts.
  • Optional KYC: last four digits of Aadhaar and a document image, only when you choose to verify.
  • Payment metadata: payment/order reference IDs, amount, bill reference. We never see or store card numbers, CVV or UPI PINs. Maintenance is paid by cash, bank transfer or UPI directly to your society; you may upload a payment screenshot and reference number for verification.
  • Community activity: posts, comments, complaints, poll votes and other content you publish inside your society.
  • Device data: push-notification token, browser/user-agent, basic crash and error diagnostics.

3. How we use it

Strictly to operate your society: showing notices, processing maintenance dues, managing visitors and vehicles, sending alerts you opt in to, and preventing abuse. We do not sell personal data to third parties and we do not run third-party advertising profiles against your account.

4. Data security

  • All traffic between your device and our servers is encrypted over TLS (HTTPS with 128-bit SSL or higher).
  • Data at rest is encrypted on managed Postgres storage.
  • Row-level security policies scope every query to your society; residents of one society cannot access another society's data.
  • Card and UPI PIN data never reaches our servers; UPI payments happen inside your own UPI app.
  • Aadhaar images live in a private storage bucket accessible only to authorised society admins for verification.

5. Who can see what

  • Other residents in your society see your name, flat, and posts you publish.
  • Your society admin sees contact details and payment history for billing purposes.
  • Other residents cannot see your phone number or email address.
  • SociyoHub staff access production data only for support requests you initiate.

5A. Where your data goes (service providers)

  • Lovable Cloud (database, file storage and app hosting, built on Supabase and Cloudflare): stores all society data and files and runs the app.
  • Google Firebase: Google sign-in and push notifications to your device.
  • ReverseOTP: confirms your phone number when you send it a verification message by SMS or WhatsApp; it receives your phone number and that message.
  • Google Gemini and OpenAI (through Lovable AI): only when an AI feature is used, such as the AI Secretary, invoice reading, or reading an uploaded Aadhaar image for optional verification; they receive only the question, document or image needed for that task.
  • Razorpay: only if a society pays its SociyoHub subscription online once that option is switched on; it receives payment details, never resident data.

Some of these providers may process data outside India under their own security commitments. We do not use advertising or analytics trackers inside society screens.

6. Data retention

Account data is retained while your society is active. When you delete your account from Settings, your login, contact details, family list, posts and personal files are removed immediately; anonymised financial records may be kept for statutory audit periods (up to 7 years) as required by Indian tax and accounting law.

UPI plan payments. When you pay a plan by UPI we collect the payer name, optional payer UPI ID, transaction ID, payment time and a screenshot, only to verify the payment and issue a GST receipt (purpose limitation under the Digital Personal Data Protection Act, 2023). Screenshots are stored in private storage, are visible only to SociyoHub's Super Admin through short-lived links, and are kept as payment records for the statutory period. Please crop out unrelated balances or messages before uploading.

6A. Why we may use your data (legal basis)

  • Your consent, given when you sign up, join a society or opt in to optional messages. You can withdraw it at any time, and withdrawing is as easy as giving it.
  • Legitimate uses allowed by the Digital Personal Data Protection Act, 2023: data you share for a purpose you asked for (such as a visitor entry), meeting legal duties (such as GST and accounting records), and responding to emergencies or threats to safety.

If you withdraw consent, we stop processing for that purpose. Records the law requires us to keep are still kept, as explained in Data retention.

6B. Children

Accounts are for adults aged 18 and above. Society records may list children as family members only when an adult resident adds them. We do not track children's behaviour, show them targeted ads or profile them.

6C. Data breaches

If a personal data breach happens, we will tell affected users without delay. We will explain what happened, the likely impact and the steps you can take. We will also report it to the Data Protection Board of India as the law requires.

7. Your rights

  • Access: you can see a summary of your data, how it is used and who it is shared with.
  • Correction: you can update your details in the app, or ask us to fix anything wrong or incomplete.
  • Deletion: you can delete your account from Settings, subject to the legal retention described above.
  • Withdraw consent and opt out of optional messages at any time from Settings.
  • Nominate a person to use these rights for you in case of death or incapacity.
  • Grievance redressal: contact us first. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.

To use any of these rights, write to sociohub710@gmail.com.

8. Grievance contact

Grievance Officer — SociyoHub Support Team, sociohub710@gmail.com, Pethapur, Gandhinagar, Gujarat — 382610. We aim to resolve grievances within the time the law allows.