Privacy Policy

1. Introduction

Welcome to CaliPay.in ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and mobile applications (iOS and Android) available on respective app stores (collectively, the "Service"). CaliPay.in is designed exclusively for Residents Welfare Associations (RWAs) and managing committees of residential buildings or complexes in India.

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

When you use our Service, we may collect the following personal information:

• Contact Information: Name, phone number, email address, and residential address
• Identity Information: Details required for RWA membership verification
• Financial Information: UPI ID, payment transaction details, maintenance fee records
• Property Information: Building/apartment details, ownership/tenancy status
• Profile Information: Profile picture, preferences, and account settings

2.2 Usage Information

• Device information (device type, operating system, unique device identifiers)
• App usage data and interaction patterns
• Log data including IP addresses, browser type, and access times
• Location data (if enabled) for address verification purposes

2.3 Communication Data

• Messages and communications within the RWA community
• Support requests and correspondence with our team
• Feedback and survey responses

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Creating and managing your RWA member account
• Processing payments and maintaining financial records
• Facilitating communication between RWA members and administrators
• Managing invoices, expenses, and ledger entries
• Providing customer support and technical assistance

3.2 Administrative Purposes

• Verifying identity and preventing fraud
• Complying with legal obligations and regulatory requirements
• Maintaining security and preventing unauthorized access
• Improving our services through analytics and performance monitoring

3.3 Communication

• Sending important notifications about your account and services
• Providing updates about RWA activities and announcements
• Sending payment reminders and transaction confirmations
• Delivering customer support communications

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Within Your RWA Community

• Basic contact information with other verified members of your RWA
• Payment status and dues information with RWA administrators
• Community announcements and meeting participation

4.2 Service Providers

• Payment processors for handling financial transactions
• Cloud storage providers for data hosting and backup
• SMS and email service providers for communications
• Analytics providers for service improvement (anonymized data only)

4.3 Legal Requirements

• When required by law, court order, or government authorities
• To protect our rights, property, or safety
• To prevent fraud, security breaches, or illegal activities
• In connection with legal proceedings or investigations

5. Data Security

We implement robust security measures to protect your information:

• Encryption: All data transmission is encrypted using industry-standard protocols
• Secure Storage: Data is stored in secure, access-controlled environments
• Authentication: Multi-factor authentication and secure login procedures
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Periodic security assessments and vulnerability testing
• Incident Response: Established procedures for handling security breaches

However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your information for the following periods:

• Account Information: As long as your account remains active
• Financial Records: For 7 years as per Indian financial regulations
• Communication Logs: For 3 years for dispute resolution purposes
• Usage Data: Anonymized data may be retained indefinitely for analytics

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

• Request access to your personal information
• Download your data in a machine-readable format
• Obtain copies of your payment and transaction history

7.2 Correction and Updates

• Update your profile information through your account settings
• Request correction of inaccurate information
• Update your communication preferences

7.3 Deletion and Restriction

• Delete your account and associated data
• Request deletion of specific information (subject to legal requirements)
• Opt-out of non-essential communications

To exercise these rights, please contact us using the information provided in Section 12.

8. Mobile Application Specific Information

8.1 App Store Information

Our mobile applications are available on iOS App Store and Google Play Store. Each platform may collect additional information as per their respective privacy policies.

8.2 Permissions

Our mobile apps may request the following permissions:

• Camera: For uploading profile pictures and document scanning
• Storage: For saving documents and receipts locally
• Notifications: For important updates and reminders
• Location: For address verification (optional)
• Contacts: For easier member invitation (with your consent)

8.3 Push Notifications

You can control push notifications through your device settings or app preferences. We may send notifications about payment due dates, community announcements, and security alerts.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your login preferences and settings
• Analyze usage patterns and improve our services
• Provide personalized content and features
• Ensure security and prevent fraud

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Service.

10. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

RWA membership and financial transactions require adult supervision and authorization.

11. International Data Transfers

Our services are designed exclusively for users in India. All data is stored and processed within India in compliance with Indian data protection laws. We do not transfer personal data outside of India except:

• With your explicit consent
• When required by law
• For essential service operations with adequate safeguards

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For urgent security concerns, please contact: security@calipay.in

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the app or email for significant changes
• Provide a summary of key changes
• Give you the opportunity to review the updated policy

Your continued use of our Service after any changes indicates your acceptance of the updated Privacy Policy.

14. Governing Law

This Privacy Policy and our data practices are governed by the laws of India, including but not limited to:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (when applicable)
• Other applicable Indian privacy and data protection laws

Any disputes arising from this Privacy Policy shall be subject to the jurisdiction of Indian courts.

15. Specific Features and Data Usage

15.1 Payment Processing

When you make payments through our platform, we work with certified payment processors who maintain PCI DSS compliance. We do not store complete credit card or banking information on our servers.

15.2 Community Features

Information shared in community features (announcements, discussions) may be visible to all verified members of your RWA. Please be mindful when sharing personal information in these public spaces.

15.3 Admin Functions

RWA administrators have access to member information necessary for community management, including payment status, contact details, and property information. Administrators are bound by confidentiality obligations.