Privacy Policy

1. Who we are

PGManage provides property-management software for paying-guest and co-living operators in India. In this policy, “we” and “us” mean PGManage; “you” means the operator using our software, and “residents” means the tenants whose details an operator records in it.

This policy applies to our web app and to both mobile apps — the operator/staff app (“PGManage Owner”) and the resident app (“PGManage”).

For the operator’s own account data, we are the data fiduciary. For resident data an operator enters, the operator is the data fiduciary and we act as a data processor on their instructions.

2. What we collect

Operator account: name, email, phone, organisation and property details, staff logins, and billing information.

Resident data entered by operators: names, phone numbers, room and tenancy details, rent and payment records, deposits, KYC and ID-proof documents, vehicle details and emergency contacts.

Usage data: log and device information needed to run and secure the service.

3. How we use it

To provide the service — collecting rent, sending WhatsApp reminders and receipts, tracking occupancy, and the other functions you use.

To support you, secure the platform, prevent fraud, and meet legal obligations. We do not sell personal data, and we do not use resident data for advertising.

4. WhatsApp and payments

Reminders and receipts are sent via the WhatsApp Business Platform; message delivery is subject to Meta’s terms. Online rent payments are processed by our payment gateway; card and bank details are handled by the gateway, not stored by us.

5. Where data lives and how long

Data is hosted in India (AWS Mumbai / ap-south-1). We keep it for as long as your account is active and for a limited period afterwards, then delete it. You can export your data at any time.

6. Your rights

Consistent with India’s Digital Personal Data Protection Act, 2023, you may access, correct, or request deletion of personal data, and withdraw consent where processing relies on it. Residents should direct such requests to the operator who holds their data; we will assist that operator in fulfilling them.

To delete your account and personal data, use pgmanage.in/delete-account or email us. We complete deletions within 30 days, subject to records we must retain by law.

7. Security

We protect data with encryption in transit and at rest, per-organisation isolation, role-based access and an audit log. See our security page for detail. No system is perfectly secure; we work to reduce risk and to notify you of a material breach as required by law.

8. Contact

Questions or requests: pgmanage36@gmail.com.