Privacy Policy

1. Overview

NIVASA ("we", "us", or "our") provides a building and community management platform for residential societies, committees, and residents in Bangladesh. This Privacy Policy describes how we collect, use, store, disclose, and protect personal information when you use our Services.

2. Information We Collect

• Account and profile data: full name, email, mobile, NID number, photo, role (secretary, owner, tenant, committee, staff), and building/flat details.
• Building and resident records: ownership, tenancy, committee, staff, emergency contacts, and uploaded identity documents.
• Transactions: invoices, dues, payments, expenses, utility bills, salaries, cash ledger entries.
• Communication: complaints, comments, support tickets, event RSVPs, uploaded photos, and notifications.
• Device and usage: IP, browser/device, OS, app version, timestamps, crash logs, and actions performed.

3. How We Use Information

• Operate building management features: billing, notices, complaints, meetings, maintenance, staff, occupancy.
• Authenticate users and enforce role-based permissions within your building.
• Send operational notifications, reminders, complaint/RSVP updates, and announcements (opt out of non-essential in-app).
• Resolve support tickets, verify registrations, and meet legal obligations.
• Prevent fraud, abuse, and unlawful activity.

4. Sharing and Disclosure

We never sell or rent personal data. We only share it:

• Within your building: authorized roles (secretary / committee) see resident and staff contact details as part of the service.
• With vendors under contract: hosting (AWS), SMS, email, payment processors, and identity verification providers.
• When required by law: courts, government requests, or to protect safety/rights.
• With your explicit consent.

5. Storage and Security

Data is stored securely in PostgreSQL + S3-compatible encrypted storage, protected with TLS in transit, role-based access, password hashing, audit logging, and backups. Records are retained until a building admin requests deletion (plus any mandatory legal retention period).

6. Your Rights

Request access, correction, or deletion of your personal data, or object to/restrict processing, by emailing us below. We will respond per applicable law.

7. Cookies & Mobile Permissions

We use cookies/local storage to keep you signed in. Mobile apps request camera/photos permission only when you upload images; you may decline in device settings (some features may be limited).

8. Children's Privacy

Services are for adult use. We do not knowingly collect minors' data without guardian consent; contact us to remove any such data.

9. Contact

• Email: privacy@nivasa.xyz
• Support: hello@nivasa.xyz or Submit a ticket

10. Changes

We may update this policy with a new "Last updated" date. Material changes will be announced by in-app notice or email.