1. Introduction
NestManager Technologies Pvt. Ltd. ("NestManager," "we," "our," or "us") is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website
and mobile applications (collectively, the "Platform"), including all related services and features offered.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use
our Platform. By accessing or using NestManager, you acknowledge that you have read, understood, and agree to be
bound by all the provisions of this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Registration: Name, email address, phone number, password, date of birth, address, and other profile information
- Property Management: Property details, room configurations, amenities, pricing, documents, and photographs
- Tenant Information: Name, phone number, email, Aadhaar/ID proof, emergency contacts, and tenancy agreements
- Financial Information: Banking details, payment method information (UPI, credit/debit cards), subscription preferences, and billing address
- KYC Information: Government-issued identification, selfies, and verification documents for regulatory compliance
- Communication: Messages, tickets, complaints, feedback, and support requests
- Documents: Agreements, invoices, receipts, notices, and other uploaded files
2.2 Information Collected Automatically
- Device Information: Device type, operating system, unique device identifiers, and mobile network information
- Usage Analytics: Pages visited, time spent, clicks, features used, and interaction patterns
- Location Data: Approximate location based on IP address (if enabled)
- Cookies and Tracking: Session tokens, authentication data, and analytics cookies
- Log Data: IP addresses, timestamps, HTTP headers, browser type, and referring pages
2.3 Third-Party Sources
- Payment processors (Razorpay, UPI providers)
- KYC verification services (MessageCentral eKYC, DigiLocker)
- SMS/Communication providers (MSG91, Twilio, WaSender)
- Identity verification services (UIDAI)
3. How We Use Your Information
- Service Delivery: Providing property management features, billing, invoicing, and tenant communication
- Account Management: Account creation, authentication, verification, and password management
- KYC Compliance: Identity verification, regulatory compliance, and fraud prevention
- Payments: Processing subscriptions, rent payments, deposits, and refunds
- Communications: Sending notifications, receipts, invoices, reminders, and service updates via SMS, WhatsApp, and email
- Analytics: Understanding usage patterns, improving features, and optimizing performance
- Support: Responding to inquiries, resolving issues, and providing customer service
- Security: Detecting and preventing fraud, unauthorized access, and malicious activities
- Legal Compliance: Meeting regulatory requirements and responding to legal requests
- Marketing: Sending promotional offers, newsletters, and product updates (with your consent)
4. Data Sharing and Disclosure
4.1 We Share Information With:
- Service Providers: Payment gateways, SMS providers, email services, storage providers, and analytics platforms that process data on our behalf
- Legal Requirements: Government agencies, law enforcement, and courts when required by law
- Business Transfers: In case of merger, acquisition, or sale of assets, your data may be transferred as part of the transaction
- Property Owners/Managers: Tenant information is shared with property owners who manage those properties
- Tenant Communication: Necessary information is shared with tenants for their invoices, notices, and communication
4.2 We Do NOT:
- Sell your personal data to third parties
- Share sensitive data without proper legal basis
- Disclose payment card details directly (handled by PCI-DSS compliant providers)
5. Data Security
We implement industry-standard security measures to protect your personal information from unauthorized access,
alteration, disclosure, or destruction. Our security practices include:
- SSL/TLS encryption for data in transit
- Encryption at rest for sensitive data
- Regular security audits and penetration testing
- Access controls and role-based permissions
- Secure password hashing (bcrypt)
- Two-factor authentication support
- Regular security updates and patches
- Backup and disaster recovery procedures
However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee
absolute security. You acknowledge that you assume all risks associated with the transmission of your data.
6. Data Retention
We retain your personal information for as long as necessary to provide services, comply with legal obligations,
and resolve disputes. Retention periods vary based on the type of information:
- Account Data: Retained while your account is active and for 2 years after deactivation
- Financial Records: Retained for 7 years (as per Indian accounting regulations)
- Transaction History: Retained for 7 years
- KYC Information: Retained as per regulatory requirements
- Audit Logs: Retained for 3 years
- Marketing Data: Retained until you unsubscribe
Upon request and when no legal obligation exists to retain data, we will delete or anonymize your information.
Some data may not be immediately deletable due to technical or legal constraints.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Portability: Request your data in a portable format
- Right to Object: Object to processing of your data for marketing or analytics
- Right to Withdraw Consent: Withdraw consent for specific data processing activities
- Right to Restrict Processing: Request limitation of how your data is processed
- Right to File Complaints: File complaints with relevant data protection authorities
To exercise any of these rights, please contact us at privacy@nestmanager.in with sufficient details
of your request. We will respond within 30 days.
8. Cookies and Tracking Technologies
We use cookies, local storage, and similar tracking technologies to enhance your experience, remember preferences,
analyze usage, and maintain security. You can control cookie settings through your browser preferences. However,
disabling cookies may affect Platform functionality.
- Session Cookies: Automatically deleted when you close your browser
- Persistent Cookies: Stored for authentication and user preferences
- Analytics Cookies: Used to understand usage patterns (anonymized)
- Third-Party Cookies: May be set by payment processors and analytics providers
9. Third-Party Links and Services
Our Platform may contain links to third-party websites and services that are not operated by NestManager.
This Privacy Policy does not apply to these external sites. We recommend reviewing their privacy policies
before providing your information. We are not responsible for the privacy practices of third-party services.
10. Children's Privacy
Our Platform is not intended for children under 18 years of age. We do not knowingly collect personal information
from minors. If we become aware that we have collected data from a minor, we will delete it immediately and take
appropriate steps to comply with applicable law. Parents who believe their child has provided information to us
should contact us immediately.
11. International Data Transfers
Your personal information may be transferred to, stored in, and processed in countries other than India,
including countries that may not have the same data protection laws as India. By using our Platform, you consent
to such transfers. We implement appropriate safeguards, including standard contractual clauses and your explicit consent.
12. Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee our privacy practices and serve as a point of contact
for privacy-related inquiries. You can reach our DPO at dpo@nestmanager.in.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
NestManager Technologies Pvt. Ltd.
4th Floor, Prestige Tech Park, Marathahalli
Bengaluru, Karnataka 560103
India
Email: privacy@nestmanager.in
Phone: +91-80-4567-8900
Website: https://nestmanager.in
We will respond to your inquiries within 30 days of receipt.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, and applicable law.
We will notify you of material changes by posting the updated policy on our Platform and updating the "Last Updated" date.
Your continued use of the Platform following the posting of changes constitutes your acceptance of those changes.
