Last updated: [date]
This policy explains what personal data Co-hopp collects, why, and the rights you have over it. It applies to the Co-hopp website, the Co-hopp Business app and the Co-hopp Residents app. Co-hopp is operated by [Legal business name], [registered address] ("Co-hopp", "we", "us").
- For data about PG owners, and for running the website and apps, Co-hopp decides how data is used.
- For data about residents that an owner adds or manages (rent, room, complaints, visitors), the PG owner decides why it is collected, and Co-hopp processes it on the owner's behalf.
- Questions either way can come to our Grievance Officer (details at the end of this policy).
What we collect
| Who | Data | Why |
|---|---|---|
| Owners | Name, mobile, email, business name, property addresses, room details | To create your account and run your PG |
| Residents | Name, mobile, email, photo (optional), room, move-in/out dates, emergency contact | So your PG can manage your stay |
| Residents | Rent, deposit and payment records | Ledger, receipts and reminders |
| Residents | ID verification result via a licensed KYC provider | Tenant verification, if your owner requires it |
| Visitors | Name, phone, person visited, time in/out | Visitor log for safety |
| Everyone | Complaints and messages you submit | To resolve them |
| App users | Device push-notification token, app version, crash logs | To send reminders and notices, and to fix bugs |
| Website visitors | Form entries; anonymous page statistics (no cookies) | To reply to you and improve the site |
We do not collect card or bank details; Razorpay handles payments directly. [Confirm: we do not store full Aadhaar numbers.]
How we use it
Only to provide and improve Co-hopp: running accounts, ledgers and receipts; sending reminders and notices; handling complaints and visitor logs; verification; support; security and fraud prevention; and meeting legal obligations. We do not sell personal data, rent it, or use it for advertising.
Consent
We process your data on the basis of your consent, given when you sign up or when your owner adds you and you accept the invite, or where the law otherwise allows. You can withdraw consent anytime by contacting us or deleting your account. Some features stop working without it.
Who we share it with
- Your PG owner (if you're a resident) — the data needed to manage your stay.
- Service providers who help us run Co-hopp, under contract: cloud hosting [Supabase / hosting provider], push notifications (Google Firebase), KYC verification [provider], payments (Razorpay), and messaging.
- Authorities, only when required by law, such as a valid police or court request.
Where it's stored and how long we keep it
- Stored on servers in [India — confirm region], encrypted in transit and at rest.
- Kept while your account is active. After deletion, removed within [30 days], except records we must keep by law (for example financial and tax records, kept for up to [8 years]).
Your rights
Under the DPDP Act, you can:
- Ask for a summary of the personal data we hold about you and who we've shared it with.
- Ask us to correct, complete or update it.
- Ask us to erase it, unless we must keep it by law.
- Withdraw consent.
- Nominate someone to exercise your rights if you die or become unable to.
- Raise a grievance with us, and then with the Data Protection Board of India if unresolved.
To use any right, message our Grievance Officer. We reply within [48 hours] and resolve within [30 days].
Children
Co-hopp is for people aged 18 and above. If a resident is under 18, the owner must obtain verifiable consent from a parent or guardian before adding them, and we do not track or target minors.
Changes to this policy
We'll post any change here and update the date. For important changes, we'll also notify you in the app.
Grievance Officer
[Name], [Legal business name], [address]. Email: privacy@co-hopp.com. Phone: [phone].