Privacy Policy

1. Overview & Statutory Commitment

Satyox ("Company", "we", "our", or "us"), as the developer and operator of the PropFit mobile application and related services ("Service"), is dedicated to safeguarding your personal data. This Privacy Policy sets forth our policies and procedures on the collection, processing, storage, and protection of data in strict conformity with the Digital Personal Data Protection Act, 2023 (DPDP Act, India), the Information Technology Act, 2000, and applicable mobile marketplace policies.

2. Categories of Information Collected

We collect and process only the specific data necessary to deliver the operational features of PropFit:

• Account & Identity Data: Name, Email Address, and Google Account Identifier collected securely through Google OAuth single sign-on.
• Phone Verification Data: Landlord mobile phone number collected solely for two-factor SMS OTP authentication and account recovery.
• Landlord-Entered Property Data: Building names, property identifiers, unit types (e.g., 1BHK, 2BHK, Single Room, PG Bed), and standard rental structures.
• Landlord-Entered Tenant Records: Tenant names, phone numbers, assigned unit identifiers, lease start/end dates, agreed rent amounts, and security deposit figures recorded by the landlord.
• Financial & Transaction Logs: Rent payment status (Paid, Due, Overdue), payment amounts, dates, recorded payment modes (Cash, UPI, Bank Transfer), and property maintenance expense entries.

3. Purpose and Legal Basis of Data Processing

All data collected is utilized exclusively for legitimate, product-essential purposes:

• Providing core dashboard metrics, financial summaries, room vacancy status, and net profit calculations.
• Delivering security notifications, session authentication, and transactional SMS OTPs.
• Composing pre-filled, polite WhatsApp rent reminder messages executed at the landlord's explicit command.
• Ensuring synchronized data availability across your authorized mobile devices.

4. Absolute Ban on Data Selling and Commercialization

5. Infrastructure & Authorized Processors

Data processing is conducted only through verified, industry-standard infrastructure providers bound by contractual data security obligations:

• Google Play Services: In-app billing authentication, subscription management, and application delivery.
• Cloud Database Infrastructure (Supabase): Encrypted database hosting with strict tenant-level access isolation policies.
• SMS Gateway Providers (MSG91 / DLT): Delivering transactional one-time passwords compliant with Indian telecom regulations.

6. Data Security Safeguards

We enforce robust administrative, physical, and technical safeguards to protect against unauthorized access, loss, alteration, or disclosure. All data transmissions are encrypted using standard TLS/HTTPS protocols, and sensitive database tables are protected by strict access controls.

7. Data Principal Rights & Right to Erasure

Under the DPDP Act 2023, you have enforceable rights regarding your personal data:

• Right to Access & Summary: You may request a summary of your personal data held by us.
• Right to Correction & Update: You can edit or correct property and profile records directly in the app.
• Right to Complete Erasure / Account Deletion: You may request permanent deletion of your account and all associated property/tenant records by sending an email to [email protected] with the subject line "Data Deletion Request". Upon verification, all records will be permanently deleted from our active databases within 30 days.

8. Grievance Redressal & Contact Officer

In accordance with the DPDP Act 2023 and Information Technology Rules, if you have any questions, concerns, or grievances regarding our privacy practices: