Privacy Policy

ZLTS LLP ("we", "us", "our", or the "Company") operates Puresect (the "App"), a mobile application for Android devices that helps residents, management committees, security staff, and service providers manage community and condominium/society operations, including visitor and gate management, maintenance and utility payments, notices and complaints, staff verification, parking, and amenities booking.

This Privacy Policy explains what information we collect through the App, how we use and share it, and the choices available to you. By downloading, installing, or using Puresect, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use the App.

This Policy applies to:

• Residents/Owners: individuals who own or occupy a unit and use the App for payments, notices, complaints, and approving visitor entry.
• Tenants: individuals residing in a unit under a lease, registered by the Society or the owner.
• Security Staff/Guards: personnel who use the App at the gate to log visitors, deliveries, and vehicles.
• Management Committee (RWA/Society Admins): office-bearers who manage notices, approvals, staff, and billing.
• Visitors, Delivery Personnel, and Domestic Staff: individuals whose limited information (name, phone number, photo, and purpose of visit) is captured by residents or guards at the point of entry.
• Vendors and Service Providers: plumbers, electricians, housekeeping agencies, contractors, and other third-party service providers registered on the App to offer services to the Society or individual residents.

2.1 Information You Provide to Us

• Account and Profile Information: name, phone number, email address, unit/flat number, tower/block, relationship to the unit (owner/tenant), profile photo, and password or authentication credentials.
• Identity and Verification Documents: government-issued ID, proof of ownership or tenancy, and, for staff, background-verification documents such as police verification certificates, submitted where the Society requires identity or staff verification.
• Vehicle Information: vehicle registration number, type, and parking slot details for parking management.
• Vendor and Service Provider Information: business/trade name, contact details, service category, GST or business registration number (where applicable), and KYC documents (such as government-issued ID and address proof) submitted by vendors and service providers for onboarding and verification.
• Household and Family Members' Information: names, ages, contact numbers, and photographs of family members, domestic help, or dependents that a resident chooses to register.
• Visitor and Guest Information: name, phone number, photograph (captured at the gate or via pre-approval), vehicle number, purpose of visit, and host unit, entered by residents (pre-approval) or security staff (gate entry).
• Payment Information: billing details, maintenance and utility charges, invoices, and payment status. Card, UPI, net-banking, or wallet details are collected and processed directly by our third-party payment gateway partners; we do not store full card numbers or banking credentials on our servers.
• Communications: content of notices, circulars, complaints, help-desk tickets, polls/surveys, and messages exchanged through the App, including attachments and photographs you upload.
• Amenity Bookings: reservations for clubhouse, gym, swimming pool, or other shared facilities, including date, time, and number of guests.

2.2 Information Collected Automatically

• Device Information: device model, operating system version, unique device identifiers, mobile network information, and app version.
• Location Information: approximate or precise location, where you enable location permissions, used to confirm gate/society proximity, tag visitor entries, or support society-specific features. Location is only accessed while the relevant feature is in use.
• Camera and Photos: access to your camera and photo gallery to capture or upload visitor photographs, ID documents, complaint evidence, or profile pictures. We only access these when you actively use a related feature.
• Usage and Log Data: app interactions, screens viewed, features used, crash reports, and diagnostic logs, collected to maintain and improve the App.
• Push Notification Tokens: device tokens used to deliver notices, visitor alerts, payment reminders, and approval requests.

2.3 Information from Third Parties

• Society/Management Committee: billing records, unit ownership details, and approved resident lists provided by the Society administration.
• Payment Gateway Partners: confirmation of payment status and transaction references (not full financial credentials).
• Background Verification Agencies: verification results for staff, where the Society engages a third-party agency for police or reference checks.

Depending on the features you use, the App may request the following Android permissions. You can grant or deny most permissions in your device settings, though some features will not function without them.

• Camera: to capture visitor photos, ID documents, or complaint evidence.
• Storage/Photos and Media: to select or save images and documents.
• Location: to verify proximity to the Society gate or premises for certain features.
• Contacts (optional): to help you invite family members or staff, only if you choose to use this feature.
• Notifications: to deliver visitor alerts, approvals, notices, and payment reminders.

• Payment Gateways — Razorpay and PayU: used to process maintenance charges, utility bills, amenity bookings, and other payments made through the App. When you make a payment, you are directed to Razorpay's or PayU's secure payment interface. We receive only the transaction status, amount, and a reference ID — we do not receive or store your card number, CVV, UPI PIN, or banking login credentials. Razorpay and PayU are independent data controllers for the payment data they process, and their use of your information is governed by their respective privacy policies (available on razorpay.com and payu.in).
• KYC and Identity Verification — MEON Technology: for Society onboarding, we use MEON Technology as our third-party KYC verification partner to confirm that a resident, tenant, or vendor is who they claim to be before granting App access or Society approvals. This includes validating government-issued ID documents (such as Aadhaar, PAN, voter ID, or driving licence), a live photo/selfie, and other identifiers submitted at the time of registration. Verified identity is also used to enable and authenticate your digital approval/e-signature within the App (for example, approving Society resolutions, visitor pre-approvals, or agreements). MEON Technology processes only the specific documents and identifiers submitted for verification and returns a verification result and, where applicable, a digital signature/authentication record to us and the Society; MEON Technology does not have access to your payment information.
• KYC for Vendors and Tenants: in addition to residents, the Society may require vendors and tenants to complete KYC verification through MEON Technology before they are onboarded or granted access privileges, so that the Society can confirm the identity of anyone provided regular or service access to the premises.

We select payment and KYC partners that maintain appropriate security and regulatory certifications (such as PCI-DSS for payment gateways), and we periodically review these partnerships. If we add, remove, or change our payment gateway or KYC verification partner (currently Razorpay, PayU, and MEON Technology), we will update this Policy accordingly.

We use the information described above to:

• Create and manage resident, tenant, staff, and guard accounts.
• Facilitate visitor, delivery, and vehicle entry approvals at the gate.
• Process maintenance, utility, and amenity-booking payments, and send invoices and receipts.
• Deliver notices, circulars, complaint updates, and approval requests.
• Verify the identity of staff and service providers where the Society requests it.
• Maintain safety and security logs for the Society, including gate entry and exit records.
• Respond to support requests and resolve complaints or disputes.
• Improve, troubleshoot, and secure the App, and analyze usage trends.
• Comply with applicable law, respond to lawful requests from authorities, and enforce our terms.

We do not use visitor, staff, or resident data for third-party advertising, and we do not sell personal information.

We share information only as necessary for the App to function and as described below:

• With the Society/Management Committee: residents' unit, contact, payment, and gate-log information is visible to authorized Society administrators for community management.
• With Security Staff: visitor pre-approvals and host contact details are shared with guards to process gate entries.
• With Other Residents (limited): Society notices, polls, and directory information (if enabled by the Society) may be visible to other verified residents.
• With Payment Gateway Partners: to process maintenance, utility, and amenity-booking payments, transaction details (such as amount, unit/flat number, and payment reference) are shared with our payment gateway partners, currently Razorpay and PayU. Sensitive payment credentials — such as full card numbers, CVV, UPI PIN, or net-banking passwords — are entered directly into Razorpay's or PayU's own secure, PCI-DSS-compliant interfaces and are not collected, seen, or stored by us. These partners process your payment information under their own respective privacy policies, which we encourage you to review.
• With KYC Verification Partners: to confirm the identity of residents, tenants, and vendors for Society onboarding, App access, and digital approval/e-signature purposes, we share relevant identity documents, photos, and identifiers with MEON Technology, our third-party KYC verification partner. MEON Technology is contractually required to use this information solely for identity verification and authentication, and to apply appropriate confidentiality and security safeguards.
• With Service Providers: cloud hosting, SMS/notification delivery, analytics, and customer support vendors who process data on our behalf under confidentiality obligations.
• With Background Verification Agencies: in addition to KYC verification described above, staff-specific information (such as police verification certificates) may be shared with specialized background-check agencies engaged by the Society for staff screening purposes.
• For Legal Reasons: where required to comply with law, respond to a court order or government request, protect the safety of residents, or investigate fraud or security incidents.
• Business Transfers: if the Company is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Policy.

We do not share personal information with third parties for their own independent marketing purposes without your consent.

We store information on secure servers operated by us or our cloud-hosting providers, using industry-standard safeguards such as encryption in transit, access controls, and regular security reviews. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Where data is processed or stored outside your home country, we take reasonable steps to ensure it receives a comparable level of protection, consistent with applicable data protection law.

We retain personal information for as long as your account is active or as needed to provide the App's services. Gate/visitor logs, payment records, and verification documents may be retained for longer periods to meet Society record-keeping needs, security requirements, or statutory obligations, after which they are securely deleted or anonymized.

Subject to applicable law, you may have the right to:

• Access, correct, or update your personal information through the App or by contacting us.
• Request deletion of your account and associated personal data, subject to the Society's record-keeping and legal obligations.
• Withdraw consent for optional features (such as location or contacts access) at any time via your device settings.
• Object to or restrict certain processing, and request a copy of your data, where applicable law provides for this.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at core@zlts.org. We may need to verify your identity before acting on a request.

The App is intended for use by adult residents, tenants, staff, and Society administrators. We do not knowingly collect personal information directly from children. Where information about minors (such as a resident's children) is entered by a parent or guardian, it is used solely for household registration, safety, and Society-management purposes.

The App and any associated web portal may use cookies, SDKs, or similar technologies for authentication, analytics, and crash reporting. You can control cookie preferences through your browser settings where applicable.

The App may contain links to third-party services (for example, payment gateways or maps). This Policy does not apply to those third-party services, and we encourage you to review their privacy policies separately.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised Policy in the App and update the "Effective Date" above. Continued use of the App after changes take effect constitutes acceptance of the revised Policy.

This Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, without regard to conflict-of-law principles, unless a different governing law is required by the jurisdiction in which a specific Society operates.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact: