Data Collection & Consent

1. Data Fiduciary

The entity responsible for your personal data is:

SOCEI (proprietorship of Preeti Singhal)
Pune, Maharashtra, India

Grievance Officer: grievance@socei.in
We respond to all grievances within 30 days as required under the DPDP Act, 2023.

2. Personal Data We Collect

We collect the minimum data necessary to provide our services:

Category	Data Points	Purpose	Retention
Identity	Name, mobile number, email address	Account creation, communication, OTP authentication	While membership is active + 1 year
Property	Flat/unit number, society name, city	Generating bills, receipts, and statements	7 years (tax compliance)
Financial	Bill amounts, payment history, transaction references, UPI details	Payment collection, reconciliation, GST/TDS compliance	7 years (GST Act requirement)
Device	Push notification token, app version, device platform	Sending bill reminders and payment confirmations	Until you log out or uninstall the app
Usage	Chat queries (AI assistant)	Answering your billing questions via AI	7 days (session history), then deleted
Payment Evidence	Screenshots you upload to report disputes	Investigating payment discrepancy reports	2 years from date of upload
Consent Record	Consent timestamp, IP address, policy version	Demonstrating compliance with DPDP Act	Duration of membership + 3 years

3. Purposes of Processing

We process your personal data only for the following purposes:

Generating and delivering monthly maintenance bills to your registered mobile / email
Processing UPI and online payments and sending instant digital receipts
Preparing and filing selected TDS and GST workflows on behalf of your society where configured
Sending bill reminders, due date alerts, and payment confirmations via push notification
Where you opt in, delivering your transactional bills, receipts, account statements and dues reminders on WhatsApp (no promotional content)
Investigating payment disputes you raise through the app
Providing the AI billing assistant with context to answer your queries
Maintaining audit logs and compliance records required by Indian law

We will not use your data for advertising, profiling, or sell it to any third party.

4. Data Processors (Third Parties)

We share your data with the following processors, strictly for the stated purpose:

Processor	Data Shared	Purpose	Agreement
Razorpay Payments Pvt. Ltd.	Name, amount, phone	Processing in-app UPI / card payments	Razorpay DPA signed
Amazon Web Services (AWS)	Phone number (Cognito), device token (SNS), chat queries (Bedrock)	Authentication, push notifications, AI assistant	AWS Customer Agreement (covers DPA)
WhatsApp (Meta Platforms)	Name, mobile number, bill/receipt/statement PDF	Delivering transactional bills, receipts, statements and reminders on WhatsApp (opt-in; opt out any time)	Meta WhatsApp Business Terms
Society Committee	Name, unit number, bill and payment status	Society administration and financial management	Covered by society membership terms
Government Portals	PAN, TAN, GSTIN (society-level)	Statutory TDS and GST filing	Statutory obligation

All AWS data is processed within India (ap-south-1 Mumbai region). No personal data is transferred outside India.

5. Your Rights Under DPDP Act, 2023

Right to Access: Request a summary of your personal data we hold — email grievance@socei.in
Right to Correction: Request correction of inaccurate data — contact your society admin or email us
Right to Erasure: Request deletion of data no longer needed (statutory records exempt) — use "Delete My Account" in the app or email us
Right to Grievance: File a complaint; we will respond within 30 days — grievance@socei.in
Right to Nominate: Designate a nominee to exercise your rights — email us with your nominee's details
Right to Withdraw Consent: You may withdraw consent at any time. Withdrawal will result in account deactivation.

6. How to Withdraw Consent

You may withdraw your consent at any time by:

Using "Delete My Account" in the member mobile app (Profile → Delete My Account)
Emailing grievance@socei.in from your registered email address with subject "Withdraw Consent"

Note: Withdrawing consent will deactivate your account. Financial records required under Indian tax law (GST Act, Income Tax Act) will be retained for the legally mandated period regardless of consent withdrawal.

Opting out of WhatsApp only: If you only wish to stop receiving messages on WhatsApp (without deactivating your account), you can toggle WhatsApp messages off under Profile settings in the app, reply STOP to any WhatsApp message, or click the opt-out link in the introductory email. You will continue to receive your bills and notices through the app, email, and society notices.

7. Data Retention Schedule

Data Category	Retention Period	Reason
Financial records (bills, payments, receipts)	7 years	GST Act & Income Tax Act
Payment screenshots / dispute evidence	2 years	Dispute resolution
Member profile (name, phone, unit)	Active + 1 year	Service delivery
Push notification device tokens	Until logout/uninstall	Notification delivery
AI chat session history	7 days	Session continuity
Consent records	Membership + 3 years	DPDP compliance

8. Data Security

All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
OTP-based authentication — no passwords stored
Role-based access: members see only their own data; committee sees only their society
Servers hosted on AWS Mumbai (ap-south-1) — data stays in India
In the event of a data breach affecting your rights, we will notify you within 72 hours

9. Policy Version & Updates

This is Data Collection & Consent Policy v1.1, effective June 2026.

If we make material changes to this policy, we will notify you via the app and update the version number. Your continued use after notification constitutes acceptance.