Who holds your data

Your society decides what is collected about its residents and why: it is the data fiduciary under the DPDP Act, and the records are its own. Society Adda runs the software and the servers on its behalf, as a data processor.

That distinction is not a technicality. A request to correct a flat number, remove an old tenant or explain a charge is answered by your estate office, because they hold and control the record.

What is held about a resident

Name and mobile number; email if given. The flat, and whether you own or rent it. Household members, vehicles, pets and domestic help you register.

What happens at the gate: visitors you approve, deliveries, your help's entries and exits. Bills, receipts and payments for your flat. Complaints you raise, amenities you book, polls you vote in — a vote itself is not tied back to you when a poll is secret.

Technical records needed to run the service: sign-in attempts, session and device records, and an audit trail of changes made in the console.

What is never collected

No location tracking. No contact list, photo library or message access. No advertising identifiers, and no third-party trackers in the console.

We do not sell personal data, and we do not share it between societies. A person who lives in one society and manages another has one account, but each society sees only its own side of them.

Who can see what

Residents see their own flat and household, and the parts of society life meant for everyone — notices, polls, amenities, the marketplace.

The estate office and committee see what their roles allow, which the society itself grants and can withdraw. Every such change is in the audit trail.

A vendor sees only their own quotations, orders, invoices and payments.

Our own staff do not browse society data. Support access is by request, is recorded, and is for the society that asked.

How long it is kept

Financial records are kept as long as the law requires them of a society — typically eight years for books of account.

Gate and visitor records, patrol scans and access events are kept for a period the society sets, and removed by a nightly sweep after that.

Sign-in attempts and one-time codes are kept for days, not months.

What a resident can ask for

A copy of everything held about you, from Account → Privacy inside your society's console. It downloads as a file, without anyone having to compile it by hand.

Correction of anything wrong, and erasure when you leave. Erasure removes your name, number, email and photograph; the society's financial and statutory records stay, because they belong to the flat and the law requires them, but they no longer point at you.

If you belong to more than one society, erasure applies to the one you asked, not to the others.

Security

Every society's data is separated by the database itself, not by application code: each table is behind a policy keyed to one society, so a query that forgets which society it is for returns nothing at all.

Sign-in is by a code to your mobile number; there are no passwords to leak. Staff accounts can be required to pass a second factor. Sessions can be revoked the moment someone leaves.

Traffic is encrypted in transit. Uploaded documents are stored outside the application, one folder per society, and are reachable only through a check that you may see that record.

Where it runs

On servers rented in Germany, operated for Society Adda. Nothing about a society's data is shared with any other customer or any advertising network.

Two services are used when a society switches them on: a phone sign-in provider to deliver the code, and a payment gateway if the society takes online payments. Each receives only what it needs — a mobile number, or an amount and a reference.